pull down to refresh
I didn't quote what you wrote, so I wasn't referring to what you wrote, sorry if I made that impression.
What I was calling out was a growing narrative that continuously using the seed (i.e. it not being a cold emergency backup like you describe) to re-derive something that could have been encrypted with a password, is good, while in fact it is exposing something that should only be exposed in emergencies (like you say too.)
I have seen this whole "stateless device, just insert seed" narrative for years now, and we also see a lot of "directly roll seed". With that, more and more safety measures get pushed aside without speaking to what those are, which bothers me. Not criticism of people, but more of a trend that calls for simplicity without understanding what is lost by ignoring guardrails.
I didn't quote what you wrote, so I wasn't referring to what you wrote, sorry if I made that impression.
What I was calling out was a growing narrative that continuously using the seed (i.e. it not being a cold emergency backup like you describe) to re-derive something that could have been encrypted with a password, is good, while in fact it is exposing something that should only be exposed in emergencies (like you say too.)
I have seen this whole "stateless device, just insert seed" narrative for years now, and we also see a lot of "directly roll seed". With that, more and more safety measures get pushed aside without speaking to what those are, which bothers me. Not criticism of people, but more of a trend that calls for simplicity without understanding what is lost by ignoring guardrails.
Perfect, that makes sense! And no worries at all – I'm brand new to Stacker News today so some conventions may be sailing past me; apologies for that. I completely agree, and it's also why I haven't jumped aboard the Seed Signer train thus far. Good to call these things out! For Tails, the persistent LUKS storage seems a very clever feature for this use case.
Possibly something else is being discussed here but just to be clear, I'm referring to three independently generated seeds, not multiple accounts generated from one seed. And the seed plate backups themselves would live elsewhere as a cold "emergency" backup, while remaining imported into the two hardware wallets' secure enclaves and the Tails Electrum's persistent LUKs storage. As I say though, this may be a separate discussion – if so, pardon the intrusion!