You're welcome. You can always choose how you deploy the software.  For instance, even if you are constrained and can only use a single device for both the node software and VLS, you can also use any Unixlike OS and have separate users for the node software and VLS.  Then even if the attacker can shellcode your node software, it still cannot access the VLS userspace, as it is a different user.  Of course, if the node software is rootkitted, it can now access everything, which is why we still recommend separate devices, but it is still a (smaller) security improvement to have VLS on the same machine but under a separate user.

ZmnSCPxj

Knowing there's a design where the node can be fully compromised and still only get to ask "will you sign this?" is a good reason to sleep better as a bitcoiner.

Thanks for the AMA, for the answers, and above all,  for building ⚡🔨

Hi, we're the team from Validating Lightning Signer, AMA!

jackronaldi

Knowing there's a design where the node can be fully compromised and still only get to ask "will you sign this?" is a good reason to sleep better as a bitcoiner.

Thanks for the AMA, for the answers, and above all,  for building ⚡🔨