Hacker News Reader

Who would ever trust the built-in seed generation of a wallet? Diceware, write them down, then enter them into the wallet.

View on HN

Because it's a hardware wallet. Usually these are designed to provide security by generating their own private keys and never letting the private key leave the hardware wallet. If you input the private key, you don't have the same security level.

Yes, a different security level - in this case, possibly a better one!

Only in this case, where your hardware wallet is severely compromised. But if you believe your hardware wallet is compromised, why are you using it?

I am not =]

Outsource trust carefully, kids!

If you never backed up the keys, any failure of the hardware/software results in loss of everything. Maybe you'd buy multiple of them and copy the keys over.

You trust diceware because you can trust the dice to give random numbers, and the whole process is visible before you. Even with a non-malicious wallet, you have to trust that they competently implemented the random generator and no bugs have crept in over hardware/software revisions.

Reply on news.ycombinator.com