> Multisig with the same device is like using a passphrase, but more convenient
It's the user's decision. I can use every signer on the market multiple times in one setup
One of the many issues with this is that SS is closed platform without any tampering protection. It is trivial for someone to load evil firmware accidentally or be tampered with in their absence. The device can then broadcast the private key to an attacker. Multi dig with multiple devices also de-risks bugs, say for example bad entropy.
> I think the software is portable to other computers and even microcontroller.
the team has state multiple times they are don't interest in porting to actual embedded platforms. It is not an easy task as they are not embedded developers, don't have security experience and depend on some of the Linux stack.
> I don't think there is a truly open hardware platform at the moment. if that changes, we will see whether the project goes down this path.
there are many options are that orders of magnitude more open and less complex. Like Krux and specter DIY, jade, etc...
As a side note, raspberry pi was a platform created for education, it is not designed for critical operations. It is just a full Linux computer like your laptop. And we all recommend that people don't use laptops for signing.
NVK
npub1az…am8y8
2024-04-20 14:06:24
in reply to nevent1q…t4f2
Author Public Key
npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8Published at
2024-04-20 14:06:24Event JSON
{
"id": "22be97584f5052e9f8c614dca8401210de81805a752c429c648933b759d0c2ce",
"pubkey": "e88a691e98d9987c964521dff60025f60700378a4879180dcbbb4a5027850411",
"created_at": 1713621984,
"kind": 1,
"tags": [
[
"e",
"c44f6ac20e39fd4b81eeb94f423175e1911ca9b94500d20d90a6c99381c85b5b",
"wss://nos.lol",
"reply"
],
[
"p",
"d60397e8a390b41dd17551b04be27ad26831beb6d55a98a1f14d94ec2fe3fde0"
],
[
"e",
"c44f6ac20e39fd4b81eeb94f423175e1911ca9b94500d20d90a6c99381c85b5b",
"wss://nos.lol",
"root"
]
],
"content": "\u003e Multisig with the same device is like using a passphrase, but more convenient\nIt's the user's decision. I can use every signer on the market multiple times in one setup\n\nOne of the many issues with this is that SS is closed platform without any tampering protection. It is trivial for someone to load evil firmware accidentally or be tampered with in their absence. The device can then broadcast the private key to an attacker. Multi dig with multiple devices also de-risks bugs, say for example bad entropy.\n\n\u003e I think the software is portable to other computers and even microcontroller.\n\n the team has state multiple times they are don't interest in porting to actual embedded platforms. It is not an easy task as they are not embedded developers, don't have security experience and depend on some of the Linux stack.\n\n\u003e I don't think there is a truly open hardware platform at the moment. if that changes, we will see whether the project goes down this path.\n\nthere are many options are that orders of magnitude more open and less complex. Like Krux and specter DIY, jade, etc...\n\nAs a side note, raspberry pi was a platform created for education, it is not designed for critical operations. It is just a full Linux computer like your laptop. And we all recommend that people don't use laptops for signing.",
"sig": "f0781c42c30d119d7acdb6dcb1cf1558832453f4860aa7340e968937e4ffb160b05fe6664ebe9b533332285a3becb59c314bae5663d2e2c90179772cc4aae9ce"
}