Oddbean new post about | logout
▲ ▼
Cyph3rp9nk | 8 months ago (raw) | root | parent | reply | flag +4 
 From my point of view, a hardware wallet has to be totally opensource, both software, firmware and hardware.

This reduces the options to only three:

Trezor one, Trezor T and Jade.

Trezor one and Trezor T you have to use passphrase if or if because they are vulnerable to seed extraction, or sd protection in Trezor T to mitigate this vulnerability.

Jade is not vulnerable to seed extraction.

Therefore Jade, but using the firmware no radio to disable bluetooth.

Post: Also seedsigner, but I don't like having to have your seed always available.
▲ ▼
RealJohnDoe | 8 months ago (raw) | root | parent | reply | flag +1 
 I've had a Trezor Model T for several years. Has always worked well for me. I don't trust secure elements. They're closed source.

I have basically created my own secure element with a bip39 passphrase and keepass2Android.

You might be able to get the seed phrase out. But it will be useless without my high entropy passphrase. And it's not stored in the wallet. Or on me.

I also backup and wipe my cold storage wallet. So there's actually nothing there to get out. If someone gets my seed back up, it's still useless without the high entropy passphrase..🧡😊🦍
▲ ▼
marcelinho | 8 months ago (raw) | root | parent | reply | flag +1 
 I really love the concept of seedsigner but I understand your point with opensource hardware.

In my opinion the Bitbox02 is also fully open source except the secure element.
▲ ▼
⚡₿it₿y₿it⚡ | 8 months ago (raw) | root | parent | reply | flag +1 
 Didn't know you can disable Bluetooth on Jade. I only use it air-gapped. Gotta try that.