trust a hardware wallet?
or verify?
did you verify your coldcard wallet? your blockstream jade wallet?
did you verify every single word of the opensource code of your wallet? did you understand what those words in the code mean? are you a programmer? did you know in what programming language the code is written? from where did you download the code? how did you verify that it is the same code which runs in your device?
how did you verify the hardware components in your device? how many units of hardware storage, memory and how many controllers did you find on your device. how did you verify that every single component was working properly and as intended? even if all components correspond with the image of the manufacturer, how do you know that the manufacturer did not put additional components on all devices in order to take all your coins later when they have reasonable value? how did you verify that no additional code was put into any memory or other storage device ? did you build another device using similar components running the opensource code with the same results? congratulations. your device seems to be verified and safe to use.
even if you are a hardware and software engineer graduated as phd from mit you will have a hard time doing all that. it will take days or even weeks to verify everything.
anyone else will have to trust the device maker. or build his own device with opensource code (same challenge to understand the code and verify)
at the end there is always someone or something you need to trust.
i would never trust anything coming from canada. in bitcoin i would rather not trust a us company for obvious reasons.
i would rather trust the czech company trezor and the french company ledger. they are the oldest hardware companies and never had any funds stolen out of their devices.
defamation and unfounded attacks do not change a thing
Its one thing when you're trusting the 50 people who have reviewed a repo, its another when you're just trusting a company with closed source software. Trezor of course being open source is different from ledger in that regard, but I still don't like them for various reasons.
The most disappointing thing about this, is that we're looking at companies who want to point fingers are their users, people who actually buy their products as the villians, rather than seeing it as customer feedback.
reply
Congratulations, your hardware wallet has just been upgraded to a custodial wallet. You don't trust us company , but your seed will be stored in us.
But for me it was a bad experience, I don't trust the custodial wallet hardware version.
reply