Oddbean new post about login | logout TOO MUCH CONCERN OVER LACK OF KEY ROTATION. NOT ENOUGH FOCUS ON HARDWARE SIGNERS AND MULTISIG.
YES! HARDWARE PEOPLE STEP UP. LET'S GO! nostr:nevent1qqs9dczn8slzmpevlyx0dwnykvy334lycznzzpt8c88az5qnh5nhypcpzdmhxue69uhhwmm59e6hg7r09ehkuef0qgsqfjg4mth7uwp307nng3z2em3ep2pxnljczzezg8j7dhf58ha7ejgrqsqqqqqp7ynnaa
Who's working on any of this stuff? nostr:note12ms9x0p79krje7gv76axfvcfrrt7fs9xyyzk0sw069gp80f8wgrs29w40j
If someone wants to modify the #Signet firmware, it already stores keys/passwords/secrets in hardware. It's all #OpenSource. No permission needed to make the change. nostr:nevent1qqs9dczn8slzmpevlyx0dwnykvy334lycznzzpt8c88az5qnh5nhypcppemhxue69uhkummn9ekx7mp0qgsqfjg4mth7uwp307nng3z2em3ep2pxnljczzezg8j7dhf58ha7ejgrqsqqqqqpjpu29d
Worse, NOT ENOUGH FOCUS ON PUTTING YOUR SATS IN AN 1181 OR COMMON LAW TRUST AND FORMING A 508c1a PMA.
Key revocation and rotation is a solvable problem and is ultimately about authentication, regardless if a key is ever compromised! How do you know who is who? Do you remember their npub? Where do you save the name you have for their npub? Right now it is all just a list of pubkeys in a follow list (mostly). nostr:nevent1qqs9dczn8slzmpevlyx0dwnykvy334lycznzzpt8c88az5qnh5nhypcpzemhxue69uhkummnw3ex2mrfw3jhxtn0wfnj7q3qqny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysxpqqqqqqzdkxsmw
Yes, we need more focus on hardware signers and multisig. Time better spent 🫡
Hardware signer are cool but unfortunately have poor scalability for the masses (cost, shipping logistic, mobile usage). I would aim for multisign/Frost solutions.
TapSigner /Satchips are good for the masses IMO. Cheap and mobile compatible. Screens are a bit of an overkilling feature and necessary only for bigger amounts. Basically when you move your long term savings, with a private key that you will use only few times a year
+1
Multisig Nostr posts are possible simply by running a Fedimint! https://github.com/m1sterc001guy/roastr
I'm multisiged up to my eyeballs. Feels good.
there is some work in progress at nostr:nprofile1qqst4k7a55r4w2ee0pfqfr48fuh08tvjkx4vqlpafcw7c96w3nwfv2spzdmhxue69uhhwmm59e6hg7r09ehkuef0uhd59d for this. we are planning to use current lnbits software for first version. if it was successful and had enough demand, we are going for our custom software and hardware. probably supported on all devices.
