pull down to refresh
multisig only buys time
...if you only used one hardware vendor...which, to be fair, most of us do.
Sure dice rolls, but aren't I still trusting the hardware wallet not to screw up turning my dice roll entries into a key?
Maybe instead of adding layers, I should have said spread out your trust.
Go through your setup and ask: if this part is pwnd what happens? Hopefully the answer is: you have time to get to safety.
but aren't I still trusting the hardware wallet not to screw up turning my dice roll entries into a key?
No you're not because you don't trust, you verify. Thursday night when someone here asked me about that I opened the code and ran through it (as in besides code glaring, stub it and execute) end-to-end, to be absolutely sure I wouldn't give the wrong answer. That was for someone else. They should have done that themselves imho, but I try to be nice and do the effort, even for a stacker that I extremely dislike, which was the case.
Go through your setup and ask: if this part is pwnd what happens?
That is the way. Also: what do I do when unlikely event xyz happens anyway. Like... some crazy RNG integration error.
ok what if you did the dice rolls to the keys in the multisig?
if you create a seed with 100+ rolls of a dice, does it matter what software or hardware wallet that you use to interact with it?
It can be a dayjob so be careful what you wish for.
More important: what made some coldcard users secure despite using the vulnerable hardware?