OrangeSurf on Nostr: 1) Wholesale Replacement If the total amount being secured by all users of the device ...
1) Wholesale Replacement
If the total amount being secured by all users of the device is significant *to the attacker* wholesale replacement is a real risk.
This doesn’t require a malicious party within the intended sharing group, just for someone to make an undetected substitution while the device is not in use.
2) Shared Access “done right”
Shared access “done right” requires the device to be kept secure at all times, requires each user to verify software signatures and have access to a computer to reflash their SD prior to each use. If the amount being secured is small a mobile wallet sufficient IMO. For larger amounts the users should use their own devices.
If the total amount being secured by all users of the device is significant *to the attacker* wholesale replacement is a real risk.
This doesn’t require a malicious party within the intended sharing group, just for someone to make an undetected substitution while the device is not in use.
2) Shared Access “done right”
Shared access “done right” requires the device to be kept secure at all times, requires each user to verify software signatures and have access to a computer to reflash their SD prior to each use. If the amount being secured is small a mobile wallet sufficient IMO. For larger amounts the users should use their own devices.