Bitcoin.Review Podcast with NVK & Guests

BR041 - Sparrow, River, COLDCARD, Trident, 10101 + MORE ft. Craig Raw, Rob Hamilton & Alex Leishman

Jun 29, 2023
Ask episode
AI Snips
Chapters
Transcript
Episode notes
ADVICE

Verify Builds And Check Signatures

  • Verify and reproducibly build firmware before trusting a hardware wallet release.
  • Use project-provided build scripts and check signatures to detect tampering.
INSIGHT

Centralized Repos Increase Supply-Chain Risk

  • Centralized platforms like GitHub are single points of failure for distributing binaries.
  • Attackers or state actors can target central repos to deliver malicious releases to specific demographics.
ADVICE

Keep Seeds In Secure Vaults And Use HSM Mode

  • Use hardware wallets for multiple seeds via secure vaults rather than exposing seeds in insecure places.
  • Leverage HSM modes to sign safely and record local logs for auditability.
Get the Snipd Podcast app to discover more snips from this episode
Get the app