SeedSigner

https://github.com/SeedSigner/seedsigner

Build your own airgapped, stateless bitcoin signing device for less than most hardware wallets. 🤘

Public Key

npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl

NIP-05 Address

seedsigner@nostr.seedsigner.com

Profile Code

nprofile1qqs09jtvjlmyrxjn37zv70a89csegcz7rpyqjmnw29cveedhv7vagqqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq32amnwvaz7tm9v3jkutnwdaehgu3wd3skueqxp2yth

Publishing to

relay.damus.io

eden.nostr.land

nostr.wine

Author Public Key

npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl

Show more details

Last Notes

2024-10-27 17:08:39

Our contributors have built a top tier tool set for permissionless, self-sovereign saving, provided at no cost for the global bitcoin community.
The majority of the bitcoin industry is not incentivized to share what we've built -- please help us get the word out! 🧡 🙏 https://image.nostr.build/98fb6b3b30f59921121f7cd786a45ea55a8757a148575aa3deb0d9a678b1dbf0.jpg

2024-10-07 12:19:21

- reply

Thank you for sharing this.

2024-10-07 12:18:36

Easy is an amazing designer, contributor to our project, and a solid dude besides. Can’t wait for this. #note1kcl…l9g4

2024-09-30 14:12:57

Appreciate Max having me on the @npub1jcy…2890 pod for a chat. 🧡
https://ungovernablemisfits.com/podcast/confab-09-bitcoin-paradise/ https://image.nostr.build/49698d3b214b0ded8f807b84c3682103aa126308323f77dfd0b45b516eeb7da6.jpg

2024-09-29 19:19:25

I just created a brand new Nostr account with Primal, selected “bitcoin“ as my interest, and the new account was automatically configured to follow 56 people, which included Pavlenex (who is an awesome dude). It’s good to be in the club if you’re in the club, but I'm also left wondering if Primal can be or is used to de-emphasize some voices or topics as well. #note1c8z…ef38

2024-09-28 08:34:17

Giving people the opportunity to put less trust in centralized third parties is not "UX regression".
When a commercial HWW verifies firmware/software at power-on, users are trusting they're using authentic hardware, and they're outsourcing the verification process to the same entity that produces both the hardware and the software.
For many users these choices will make sense, but for some they won't -- it's good for people to have options to choose from.

2024-09-28 08:00:57

- reply

Any safety concerns there? Don't know what to believe based on things i see / hear.

2024-09-27 21:14:05

- reply

🤤

2024-09-27 17:25:02

- reply

~$10-15 for Pi Zero
~$10-20 for Waveshare LCD hat
~$10-15 for camera
You can get some of the parts for less if you buy them on Ali Express.

2024-09-26 17:07:38

The read-only CD backup is a clever idea. The shelf-life of optical discs isn't terribly long but could be a good fit for this use case. 🧡 #note16rg…z9vh

2024-09-26 14:08:40

TLDR for those who missed this:
. RPi 0, 0W, 02W, 2 & 3 have permanent ROM that is burned in at the factory
. "Firmware" is split between the Pi AND the microSD
. Verifying the code on the microSD is authentic is vital, but simple
. Sharing a signer is not ideal, but can be viable w/ trusted 3rd parties #note1jkx…fpsl

2024-09-25 21:42:26

- reply

🧡🧡🧡

2024-09-25 21:42:19

For clarity, the SeedSigner only stores keys temporarily until power is disconnected, but it does make getting comfortable with multisig a lot easier. ☺️ #note1ura…uywq

2024-09-25 03:21:35

🤯 #note167t…qj8s

2024-09-25 03:11:42

Last few have been a little jarring -- really appreciate my ride-or-die SeedSigner peeps, you know who you are. 🧡

2024-09-24 20:58:08

- reply

Thank you for sharing this. 🧡

2024-09-24 17:42:57

This made me LoL. In seriousness, I appreciate all of the pods who have had me or someone else from the project on as a guest, especially those who have a HWW sponsor and are still willing to talk about other options. 🧡 #note1dv8…zun6

2024-09-23 22:44:59

- reply

Appreciate this a ton. I don't have an apple watch any more so I've been keeping my eye out for an alternative for that function.

2024-09-23 17:21:27

- reply

What hardware and app are you using for this?

2024-09-21 16:05:11

- reply

Currently two for every post or reply... https://image.nostr.build/7ff035e8e762afa7ba46ae67bba8fceb3a25a9ec30913e67ed1b015a5437332b.jpg

2024-09-21 15:40:59

Nominal amt of sats to post seems like it would go a long way to resolve the spam issue. Pretty painful right now.

2024-09-21 15:25:37

SMH, LoL. https://image.nostr.build/f554f7113daf33260c985f16ebab8d700649dcf20d54713237365f0be35c1916.jpg

2024-09-19 06:06:20

- reply

Hmmmmm... have to phone-a-friend on this. Any idea @newtonick ?

2024-09-19 03:03:48

- reply

Agree.

2024-09-19 02:04:41

- reply

For sure, thanks for checking into it -- give this one a try: https://image.nostr.build/62883676f0aa655ea888f4148f33c015e865c0af4e67ba7be95375ad2d2e0648.jpg

2024-09-18 18:34:09

- reply

At some point, Nunchuk stopped supporting static XPUBs. If you change your SeedSigner to the Sparrow export setting, it will animate the QR code that depicts the XPUB and the rest should work fine. I ran into this a couple of weeks ago as well.

2024-09-18 17:49:51

- reply

Functioning DM notifications.

2024-09-17 22:43:54

- reply

👀

2024-09-17 19:34:07

- reply

I'm just going to agree to disagree with you here. I strongly disagree with what you’re saying, but I just don’t have the time to refute every far fetched exotic attack scenario. Have a great afternoon.

2024-09-17 19:31:08

- reply

I guess I feel like I've tried to talk about tradeoffs a lot and have always been willing to admit there are some use cases where a conventional hardware wallet makes a lot of sense. Meanehile some manufacturers constantly misrepresent our project for seemingly self serving reasons. But I understand it can be frustrating from someone with your perspective. I just don't know what the answer is.

2024-09-17 18:51:52

- reply

All side channel attacks I am aware of require running software that has been maliciously modified. So to avoid that, run our released code.

2024-09-17 18:49:45

- reply

Just so you know, that is not me. No idea who "Roberts" is. I was an LEO however, but have been very candid that digital forensics was my specialty. You should really double check it your sources, would have been easy to find this out.

2024-09-17 18:48:14

- reply

This is the same as our approach. Boot from attached storage, then remove the storage device to show the system is probably running from RAM. SeedSigner is just a single purpose, hardened, verifiably offline computer.

2024-09-17 18:20:29

- reply

#nevent1q…kkmd

2024-09-17 18:19:58

- reply

We trust the manufacturer to do a lot less. We don't trust the device to validate software, we don't trust it to persistently store keys, and we don't trust it to make wireless or wired connections with other devices. We just trust it to execute SeedSigner code.

2024-09-17 18:17:40

- reply

As of right now, just one, but progress on more is ongoing. But you're missing the point, it's not worth it to target the entire RPi supply chain at this point, and even if you wanted to target individuals, less than 0.01% of RPi products likely will end up as SeedSigners, so who knows which ones to pick. Whereas, at a certain point in a HWW's life, it's known that the device will be used to store PKs, and an attacker further knows that just about every device is going to someone who will potentially use it for that purpose. Different tradeoffs.

2024-09-17 17:52:38

Yup.
And we will continue to be here with a compelling alternative model, that requires much less trust in manufacturers and distributors. https://image.nostr.build/ac3742a377e7691e41c3bf207faf4cb235c2bbf9641d1e1e0fb60ea1cc993df0.jpg

2024-09-17 17:11:50

- reply

With SeedSigner yes, but unfortunately BlueWallet does not support testnet. You can, however, go through the same workflow with either Nunchuk on mobile, or sparrow wallet on the laptop/desktop and use testnet. The experience with bluewallet is much the same.

2024-09-17 12:09:20

A FOSS tool built by bitcoiners, for bitcoiners, shared one bitcoiner at a time. #note1v3u…arzn

2024-09-17 12:00:15

- reply

Thank you for sharing our project with the bitcoiners there. 🧡

2024-09-17 11:22:52

It is an exceedingly simple process to verify and write new firmware/software to your SeedSigner, and it takes at most a couple of minutes. Users with any concern about their device can easily re-deploy to put those concerns to rest. The messaging put out there by both the Dark Skippy researchers and Odell/RHR was unfortunate, but those who have learned about our security model and been through the process know better. Myself and our contributors are as confident and bullish as ever on our project, which serves both those who may have difficulty acquiring cold storage tools, and those who are seeking more trustless cold storage solutions. #note12qt…hxpe

2024-09-14 20:22:32

- reply

Love the color choice for the enclosure. 🧡

2024-09-14 15:03:32

- reply

Coinkite guidance is that you should plan to replace your HWWs every 2-3 years, you may get a lot more mileage out of yours, but wanted to provide this info.

2024-09-14 12:17:00

- reply

Amen to this. Text input on mobiles is still such a pain point, phone companies seem oblivious.

2024-09-13 21:14:33

- reply

Visited Bern and Grindelwald earlier this year -- it's a beautiful country!

2024-09-12 19:44:12

- reply

🧡

2024-09-11 19:48:11

- reply

You paint a beautiful picture -- you're not the only one at all.

2024-09-11 00:21:12

- reply

🔥

2024-09-10 23:23:38

- reply

Where did you get the tallow?

2024-09-10 23:09:02

File this as posted under the umbrella of my personal opinion, flowing from my "exorbitant privilege" as the creator and public face of our project, and not necessarily representative of the opinion of all, or even any, of our other contributors.
The tone of this note is not constructive will only cause more people to question the motives behind the rejection of Peter Todd's grant application.
A constructive response would at least make some reference to the specific proposal's faults, or the specific shortcomings in the applicant's credentials, but instead he childishly makes fun of Peter without even having the courage to mention his name.
It is absolutely detestable that this individual, who operates a company that profits from bitcoin products that are not open source, and that had to be publicly pressured to take down marketing claims of those products being open source, is in a position where he influences decisions on literally millions of dollars of funding for other, legitimate, open source builders.
OpenSats will continue to struggle with credibility and public perception as long as nvk has a role of influence there. #note1xwd…wf6n

2024-09-10 22:45:49

Perspective worth considering from our project's Telegram community.
https://t.me/joinchat/GHNuc_nhNQjLPWsS https://image.nostr.build/6db7a948263520064c4a8b979712fda4976b54d151de07f54920734cf0f33c3a.jpg https://image.nostr.build/7f3d913a1aea0d403c1b5f668f9410f407616cb1e136d88be589aedcaaa640a1.jpg

2024-09-10 03:18:04

After witnessing several orange-pilling sessions in Curaçao last week, am thinking that cashu.me with a solid mint like minibits is one of the lowest friction ways to quickly get some sats into a noob's hands.

2024-09-08 14:13:13

- reply

Briefly -- time and time again it has been demonstrated that guerilla warfare is an effective military combat strategy, and the firearms are already well-distributed across the country in both urban and rural areas. A tyrannical government might be able to control metropolitan, more populous areas, but you may also underestimate the size of America and that there is a stronger culture of gun rights and ownership in rural areas.

2024-09-07 18:27:59

- reply

You and Keith both, I am apparently in the minority on this. 🤣

2024-09-07 17:53:55

- reply

The see through logo is soooo painful! I regret that version ever getting out into the wild, LoL.

2024-09-06 18:09:16

I cosign this. #note1zmy…smw0

2024-09-06 16:41:02

- reply

Cool!

2024-09-06 16:28:45

Continue to appreciate every seller who donates back to our contributors. 🧡 #note1fh4…vdky

2024-09-06 15:32:44

- reply

Different set of tradeoffs that not all grok, in part likely because bitcoiners are perpetually bombarded with a marketing narrative declaring HWWs as the most secure way to interact with private keys. Different tools are appropriate for different people and different use cases, but SeedSigner is entirely a viable option "in practice".

2024-09-06 11:42:07

👀
If you purchase SeedSigner-related items, please buy from sellers who commit to donate a portion of their proceeds back to support our contributors.
And if you're a seller who does this, please let us know! 🧡 #note14y8…lgq0

2024-09-04 14:15:48

https://image.nostr.build/fae22e8bce782c48435f65c5a0a75ac079624093562cd48b0cb78ebd729033b4.jpg

2024-09-03 20:28:40

The "Cult of Jack" is just as bad as all of the other cults in bitcoin.
Kill your heroes. It's just you, your keys and the protocol; and that's okay. #note1yjf…sqng

2024-09-03 20:25:30

- reply

Barber, good music choice.

2024-09-03 19:55:47

- reply

https://image.nostr.build/78cd6d7f545ee131220ebd2d5b7c5692328fdf4fa102b6ba0a144dc6cedc3b5e.jpg

2024-09-03 19:32:04

YubiKey has a larger security budget than your favorite HWW -- hardware security is a never-ending cat and mouse game.
Better to put your trust in functionally unsolvable math problems rather than "unhackable" hardware. https://image.nostr.build/4fac5912deb2f6f8387a9d6fba217b7158ac1e2a4dbcc46b45ef2971b8dc3544.jpg #note1704…a77f

2024-09-03 15:20:50

- reply

Lol, take it all with a grain of salt, but so far I'm proud of the results. 🤞

2024-09-03 15:17:26

- reply

🧡

2024-09-03 15:17:04

Multisig w/ geographically distributed analog keys. 🙌 https://image.nostr.build/47fe7206c9b9e398e1c558fefbd8436149ac2a7ad78ae7c3ddcc68d66e00a53b.jpg

2024-09-03 15:15:33

- reply

The best part is that even if they find your SeedSigner, there's nothing there! 🙂

2024-09-03 15:14:00

- reply

Check out the links at https://seedsigner.com/hardware or have a look at @npub1l5p…4q0n

2024-09-03 02:54:01

A few of our contributors were disappointed by how SeedSigner was characterized last week during RHR. I agree with Nick's comments here and am reposting for visibility. #note1yfl…07rl

2024-09-02 16:02:05

Proud that our project has continued to reflect the ethos of bitcoin -- volunteer driven, collaboratively built, distributed at zero cost, permissively licensed, and highly accessible; while cultivating deeper understanding, personal responsibility & self reliance.

2024-09-02 15:00:49

Love to see it. 🫶 #note1amk…dh6v

2024-08-31 15:46:46

This, sooooo this. For all of the anal retentive timeliners out there -- we're following the people we're followong for a reason. #note1ut5…pj8x

2024-08-31 15:15:31

- reply

Software validation must always be done with another device, validation with Tails being the safest approach. 👍

2024-08-31 13:58:28

I really enjoy these conversations with Printer. 🙂 #note1luc…66xx

2024-08-31 13:12:11

- reply

None of the coordinators support anti-exfil so in part it's a chicken and egg problem, but hoping deterministic signature validation is incorporated into the psbt standard, that would be the best ux solution, rather than a second round of QR code exchange. Validating and deploying authentic software takes less than a minute, and we've always been about long term saving with bitcoin with relatively few spends, so card swap attack risk seems overblown when validating software is so fast and simple. With great power comes great responsibility, for those who are willing to assume the responsibility. Also, take a closer look at those emphasizing these issues and their motivations; it speaks to conflicts of interest that you've spoken about.

2024-08-31 12:57:49

In addition to being an "I can't buy hardware wallets" option, SeedSigner is also an "I'm not comfortable trusting hardware wallets" option.

2024-08-31 04:32:02

"No one can serve two masters; for either he will hate the one and love the other, or he will be devoted to the one and despise the other."
Matthew 6:24

2024-08-29 13:52:03

- reply

How about a SeedSigner episode...? 🤩

2024-08-28 16:30:01

- reply

I’m sorry that we don’t seem to be doing it in your approved manner. I was under the impression that bitcoin and nostr were open platforms and people had the freedom to use as they wished. ¯\_(ツ)_/¯

2024-08-28 16:23:29

- reply

Then I guess we won’t fit in around here.

2024-08-28 16:22:58

- reply

The individual operating the split service would be a money transmitter, unfortunately. This workflow we’ve set up was very intentional.

2024-08-28 16:11:03

"I had a few similar donations in the last week or so. Personally find it very encouraging."
(a quote from one of our contributors)
Now that we're about a week after the 0.8.0 release, if you're a SeedSigner user and you're getting value from the project, or if you just want to support freedom tools, please donate to our most active contributors. We have a lighting-enabled workflow that you can use to directly support those who have worked to build SeedSigner into the amazing tool that it is.
Even if it's a small amount, each donation gives these contributors a little bit of encouragement to keep going. 🧡
https://donate.seedsigner.com https://image.nostr.build/7cdd1b8c7101baaac98e8a2fe7c71de14d0644766a6f5aae1b34797334d413eb.jpg

2024-08-28 12:08:47

👀 #note1j4j…5ufq

2024-08-28 12:07:53

- reply

🧡

2024-08-27 13:52:21

- reply

All I can say is that the best developers I have worked with get excited when people find bugs in their code and they thrive on constructive feedback on things they've built. These should be communicated with tact, but if they're being processed primarily as criticism, then that says something about the builder.

2024-08-27 13:47:56

👀 #note1cqc…6lz4

2024-08-27 02:10:46

- reply

Not currently. This has been discussed but the decision to implement hasn't been made.

2024-08-27 00:10:22

- reply

Which is why I hadn't set up an LN address for the longest time, but people kept asking about it. Maybe you should be running this thing, LoL.

2024-08-26 22:35:25

- reply

Yes. Let us announce this specific thing publicly, LoL.

2024-08-26 16:38:05

- reply

Unfortunately, if I accept donations or tips on behalf of our other contributors, that makes me a “money transmitter”. 😕

2024-08-26 15:34:26

- reply

Have you tried sparrow wallet's software author verification module? It doesn’t get any easier than that.

2024-08-26 15:27:04

We don't have a PR budget or a marketing department, so it's up to me and our users to refute false claims made by established, or aspiring, hardware wallet makers.
If I have not been as clear on this as I could have been, or emphasized it enough: Our model has not changed since the outset of the project. Our software intentionally runs on simple, inexpensive, widely available commodity hardware with no software authenticity mechanisms.
This means that our users are responsible for verifying the integrity of the code they run on their SeedSigner, because you can run any code that you would want to on the device (with great power comes great responsibility). If maliciously modified software is run on a signer, there are exploits that can be attempted. Dark skippy is an optimization of an already known attack approach, but does not expose any new fundamental weakness to our approach to cold storage. If users verify they are running our released code (which is a quick and simple process) our security model remains robust and one that myself and all of our contributors fully stand behind.
Instructions to verify our releases are available in the repo, and if you haven't used your signer in a while, or if you have any concerns about who has had access to it, just re-verify and re-deploy our software and you are all set.
I will continue to beat the drum about this as best I can. Our L1 storage model is by design intended to be as trustless and permissionless as possible, for those who want to minimize their reliance on or trust in third parties, and also as a fallback for people in parts of the world where hardware wallets are unavailable or the attempted acquisition of them could come with personal risk.
If you love bitcoin and love freedom, even though our project may not be your preferred approach to cold storage, you should want SeedSigner and projects similar to it to not only exist, but to grow and flourish. https://image.nostr.build/71696a8100ed74f3e27d2e7c30b7553fda887a118b6dfee4964a0758dbec6840.jpg

2024-08-26 14:28:05

- reply

Sometimes I have this issue too!

2024-08-26 13:22:02

https://image.nostr.build/6cb41e67975a15ee6d4f545837f3b7c76ac2c7320056b0026d5a177813a577b0.jpg

2024-08-26 12:01:35

Max was the only podcaster who reached out after the dark skippy "novel" attack debacle, said that people seemed confused about it, and offered to have someone from the project on the show to explain how it related to SeedSigner. Literally the only one. He and QnA sincerely and passionately care about freedom tools. Consider putting them in your regular rotation if they are not already. #note165u…3pa4

2024-08-26 11:55:39

- reply

My family, who knows where the secrets are, also know which technically capable bitcoiners we trust and how to contact them if something happens to me. Multisig is the most theft-resistant and seizure resistant way to store bitcoin; if it isn't a good solution for most people then we're not doing it right yet.

2024-08-26 11:14:38

- reply

🔥

2024-08-26 02:25:38

- reply

As long as withholding for it ends immediately, I'd be OK with it.