You’re just dodging my question.
What benefit does open source truly have to an HWW?
It’s a black box you can’t really inspect and anything it tells you about the code it is running is “trust me bro”.
For all you know there is a segment of the firmware not overwritten by the update process that tampers with the code to steal your keys.
Of course, having open source code would be good for security auditing, but it doesn’t prevent any actual malicious code. And there’s some vendors that just can’t due to NDAs.
/ semisol
npub122…cgrkj
2024-07-22 01:05:01
in reply to nevent1q…wxd8
Author Public Key
npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkjPublished at
2024-07-22 01:05:01Event JSON
{
"id": "55b06f56ca8586840e0da0c6f8ab1809c56eb349b4acedbf34ac745b37669c17",
"pubkey": "52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"created_at": 1721603101,
"kind": 1,
"tags": [
[
"e",
"89f0c0c1c9426f6c06e77b19937cb67250794924fce65d501a641311d359e4db",
"",
"root"
],
[
"e",
"81b3641fe53ae37813f346176fc73c8facaecc7ed6a0fc6e4790b2268e9cbfb9",
"",
"reply"
],
[
"p",
"a723805cda67251191c8786f4da58f797e6977582301354ba8e91bcb0342dc9c"
],
[
"p",
"a60e79e0edad5100d7543b669e513dbc1c2170e8e9b74fdb8e971afd1e0e6813"
]
],
"content": "You’re just dodging my question.\n\nWhat benefit does open source truly have to an HWW?\n\nIt’s a black box you can’t really inspect and anything it tells you about the code it is running is “trust me bro”.\nFor all you know there is a segment of the firmware not overwritten by the update process that tampers with the code to steal your keys.\n\nOf course, having open source code would be good for security auditing, but it doesn’t prevent any actual malicious code. And there’s some vendors that just can’t due to NDAs.",
"sig": "14fe482f4b63c073a85bfd78bda42a1babef53640a90022f04d56d9d86f7484a37befd06da6594f50cd759fd2fb50bdac8787c9b0c0067377e23ba1143781cef"
}