QnA (npub15c8…ssvx) I listened to a #ungovernablemisfits episode recently where you commented on #coldcard vs #passport.
Your main critique was coldcard not being FOSS. As and end user, I really dont see why this is such a big deal as long as the code is verifiable. I don't really care that NVK (npub1az9…m8y8) wants to make sure people dont steal his codebase and profits from it. All I care about is my sleep at night, really.
As an example, iMessage is closed source obviously, so thats why I dont use it as a messaging service, I prefer Signal. On a graphene phone, preferably. But say I was invited into Apple to verify the code and it turns out I can personally verify that its end to end encrypted and no backdoors yada yada.
In that case, I might use it to send my mom a txt saying I'll be over for dinner. Even though its fully closed source! All I care about is making sure only my mom can read that highly confidential message.
Taking the #FOSS argument away, would you say Coinkite has done an impressive job at thinking adversarially enough when creating the Coldcard? To an extent that it would be recommendable?
And second question, what would you say npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8s (npub1az9…8y8s) critique of Passport would be, if any, and what makes those points irrelevant enough to make you highly recommend Passport?
Looking forward to learning a bit here and maybe help others who see this post in choosing good #multi-sig vendors.
As a final note, I could go for a coldcard Q4, a passport and a #seedsigner for a multi sig setup.
Thoughts?
NVK will probably critizise the rpi, I hope you'll pitch in with knowledge on this to switch the seedsigner out with something else, Nvk, if you think its unsafe.
zaytun /
npub1wn…845pr
2024-10-07 15:26:39
Author Public Key
npub1wnw8s4eq2uwkhdvyue72m0w5u3zfhywuuk4nrunxeg3wac958n9st845prSeen on
wss://relay.damus.ioPublished at
2024-10-07 15:26:39Event JSON
{
"id": "7d76258c28534875c95cd0df82264dde6a81b87b424e90355e9a0c046ca38673",
"pubkey": "74dc785720571d6bb584e67cadbdd4e4449b91dce5ab31f266ca22eee0b43ccb",
"created_at": 1728314799,
"kind": 1,
"tags": [
[
"p",
"a60e79e0edad5100d7543b669e513dbc1c2170e8e9b74fdb8e971afd1e0e6813",
"",
"mention"
],
[
"p",
"e88a691e98d9987c964521dff60025f60700378a4879180dcbbb4a5027850411",
"",
"mention"
],
[
"t",
"ungovernablemisfits"
],
[
"t",
"coldcard"
],
[
"t",
"passport"
],
[
"t",
"FOSS"
],
[
"t",
"multi"
],
[
"t",
"seedsigner"
]
],
"content": "nostr:npub15c88nc8d44gsp4658dnfu5fahswzzu8gaxm5lkuwjud068swdqfspxssvx I listened to a #ungovernablemisfits episode recently where you commented on #coldcard vs #passport. \n\nYour main critique was coldcard not being FOSS. As and end user, I really dont see why this is such a big deal as long as the code is verifiable. I don't really care that nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 wants to make sure people dont steal his codebase and profits from it. All I care about is my sleep at night, really. \n\nAs an example, iMessage is closed source obviously, so thats why I dont use it as a messaging service, I prefer Signal. On a graphene phone, preferably. But say I was invited into Apple to verify the code and it turns out I can personally verify that its end to end encrypted and no backdoors yada yada. \n\nIn that case, I might use it to send my mom a txt saying I'll be over for dinner. Even though its fully closed source! All I care about is making sure only my mom can read that highly confidential message.\n\nTaking the #FOSS argument away, would you say Coinkite has done an impressive job at thinking adversarially enough when creating the Coldcard? To an extent that it would be recommendable?\n\nAnd second question, what would you say nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8s critique of Passport would be, if any, and what makes those points irrelevant enough to make you highly recommend Passport?\n\nLooking forward to learning a bit here and maybe help others who see this post in choosing good #multi-sig vendors. \n\nAs a final note, I could go for a coldcard Q4, a passport and a #seedsigner for a multi sig setup.\n\nThoughts?\n\nNVK will probably critizise the rpi, I hope you'll pitch in with knowledge on this to switch the seedsigner out with something else, Nvk, if you think its unsafe. \n\n",
"sig": "8531b4a536addde17b2119b3d4707858e9f2cdd479a525470fa7e6c7f79816fe6ade24984d5d5acecd0cdf25df9cf32b6684c9fc79bdb44f7fb4f6bb296deef6"
}