@freemo At this point I feel like one you don't build yourself is likely to be a scam.
non-wireless PCBs capable of running Linux are pretty cheap anyway.

@swiley That wouldnt exactly be a hardware wallet if you just threw a wallet on a linux device. Hardware wallets would need special security chips that ensure your private key can never be retrieved. Building one yourself is doable

@freemo Aren't those "security chips" just CPUs that sign things and don't let you import/export the keys?
The only difference here is how big the hardware holding the keys is.

@swiley they usually let you import keys into the chip but no way to get them out of the chip.

So you need more than a SoC where all you'd have to do is update the OS and you could get the key out.

Follow

@freemo Most modern SoCs let you burn a hash of the second stage bootloader into OTP on chip memory. You can use that to prevent OS updates.

@swiley There are all sorts of potential attacks I wouldnt want to mitigate with my own. I'd much rather use something that has been tested by a large number of people using known approaches. Not that I trust it either, the NSA probably have some backdoors in a lot of shit. But I'd trust it more than something I just whipped up where I am the only consumer.

@freemo I'm more worried about backdoors the developer themselves put in than the NSA.

Sign in to participate in the conversation
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.