Alan ₿'s avatar
Alan ₿
alanbwt@primal.net
npub1r0fj...uzz3
"This is it." Author @npub109gj5765thuet2hj2nk2j9r89a03xm2cpd0jp8rel2mqd68cn04s5wvahd | Dev @npub1fjh05rc223et4emdwex3ec34qya339szfe2w6yf8vcguuqrclh6s8us2yr
Alan ₿'s avatar
alanbwt 1 week ago
Better to think of them as “signing devices” than “hardware wallets” image
Alan ₿'s avatar
alanbwt 1 week ago
The more you learn about Bitcoin security, the more you become a SeedSigner (or more broadly a general-purpose air-gapped computer) maximalist: generate the seed entirely offline with dice or other analog entropy, and ideally never load it onto a device that remembers or stores it. Even when you spend, use a stateless device so the seed only exists temporarily in RAM and is wiped on power-off. Add a strong dice-generated passphrase and/or a geographically distributed multi-sig quorum, and you have ironclad security for your stack.
Alan ₿'s avatar
alanbwt 2 weeks ago
Nice side by side visual of what a healthy random number generator output looks like v a compromised one image
Alan ₿'s avatar
alanbwt 2 weeks ago
When I first took the orange pill after learning about the difficulty adjustment and having the “aha” moment, I was all set to self-custody my stack. Then I realized I had to use someone’s software to broadcast transactions and set up my self-custody hardware the standard way (granted, I could roll dice to generate it offline, but even then I’d need to connect to software to move coins), and it struck me as the most vulnerable part of Bitcoin hodling. Using FOSS mitigates the risks tremendously over closed source, but I still stand by that part of the tech stack being the most worthy of caution. Self-custody remains infinitely superior to trusting a third party to hold your keys if you know what you are doing, but it requires eternal vigilance.
Alan ₿'s avatar
alanbwt 2 weeks ago
The duality of the coldcard fiasco is that it is both worse than Mt Gox in that it happened to Bitcoiners who adhered to “not your keys, not your coins,” and at the same time it is far less bad than Mt Gox in that 1K BTC was taken vs 850K, so it’s barely registering in the market cap or as a mainstream news story.
Alan ₿'s avatar
alanbwt 2 weeks ago
The reality of closed source RNG image
Alan ₿'s avatar
alanbwt 2 weeks ago
Open source > closed source Multiple vendors > one vendor Multi-signature > single-signature Multiple baskets > all in one basket Offline entropy > random # generator