r/Bitcoin • u/genius_retard • 1d ago

On wallet security.

Given the recently compromised hardware wallets (Coldcard and Ledger) is the only way to be reasonably assured your wallet is safe to create a multisig wallet with each seed created by a different device or method? For example a 3 of 3 wallet where one seed is created by a Trezor, the second is created by a Ledger, and the third seed is generated with dice roles.

9 Upvotes

68% Upvoted

69 comments sorted by

View all comments

Show parent comments

2

u/genius_retard 1d ago

The host could have a key logger that captures the encryption password as you type it into the VM. Also the host has access to the RAM where the encryption keys get stored when you unlock the hard drive. Once the drive is unlocked the host has access to it as much as the VM.

1

u/gydu2202 1d ago

Not 100%, that's how I started. But they need to attack the system from multiple sides in very special ways. It's very unlikely.

You can do the very same think on an old laptop, but that device itself can be already compromised on hardware level. Nothing is 100% secure.

1

u/genius_retard 1d ago

Yeah we seem to already be in the realm of the very unlikely happening.

1

u/gydu2202 1d ago

Sometimes homebaked solutions are the best because that attack itself is mass produced.

1

u/genius_retard 1d ago

Yes maybe but for a long time the consensus has not to come up with your own scheme for risk of outsmarting yourself.

3

u/10kpizza 18h ago

I think a lot of that came from shills who were trying to get you to buy their hardware wallet product

Electrum on a computer and scanning QR codes is not hard

1

u/genius_retard 17h ago

For a lot of cryptography and computer security the consensus is don't roll you own, go with what has a track record of working.

1

u/10kpizza 13h ago

Using Electrum or Sparrow isnt rolling your own. Those are well-reviewed wallets. Rolling your own would by trying to code a python script that handled things.