Does multi-sig,
using two different signing devices mitigate
From 2 different manufacturers
mitigate the Dark Skippy Nonce attack?
If both devices were independently loaded with corrupt software, I guess it would still be possible?
Props to @stephanlivera for 2 great episodes on this issue.
I think so It woukd require collusion between 2 different hardware wallets.
Seems unlikely that two different vendors’ devices of your quorum would be corrupted at the same time, undetected.
My brain says single sig is safe enough but my irrational paranoia says a multi is safer. The slippery slope of too much complexity is siren's song.
Oddbean new post about login | logout