Oddbean new post about | logout
 What is the misinformation about seed signer? 
 I think “A Raspberry Pi is a closed source system and should not be used to store private keys” or something similar 
 Isn‘t the whole point of seed signer to not store the keys? 🤔 
 It stores them temporarily, and could exfiltrate them to the mempool or blockchain when used. 
 Same with passphrases? 
 In principle, yes. If you can exfiltrate any sequence of bits (eg a seed phrase), you can exfiltrate whatever you want (eg a BIP39 passphrase). But it may be impractical, and I don't know if there are actual exploits.