141 sats \ 1 reply \ @slush 9 Oct 2022 freebie \ on: I'm NVK, CEO of Coinkite. AMA. bitcoin
I get why general hardwired USB is a security risk. But if you control 100% of the hardware, as with Coldcard, why can't you just support the most limited subset of USB functionality, and not allow it to do anything weird?
write
preview
33 sats \ 0 replies \ @nvk OP 9 Oct 2022
Hey slush! We do support USB use both via E2EE direct HWI or by VirtualDisk emulation, we just don't like it and recommend the better safety of SneakerNet.
USB spec and implementations are a cluster f., it's hard to guarantee it (on the host side) and we just don't know bugs we could have exposing ppl with the added attack surface.
This presentation goes over my opinion about USB
reply