stash_errands

[stash_errands @stash_errands]

if my enemies troll me with a math formula like this, i would commit seppuku

[محمدباقر قالیباف | MB Ghalibaf @mb_ghalibaf]

Straits Taylor Rule:

i = r* + π* + 1.5(π−π*) + 0.5(y−y*) + α(SOH−SOH*) + β(BEM−BEM*), α,β > 0

Let’s see if a hike could open SOH or produce a single barrel :)

You can’t 25bp a chokepoint and r* isn’t neutral. It’s SOH risk premium, and We set it.

Stay unanchored !

[stash_errands @stash_errands]

@mistralvibe GLM 5.2 is like 10 years behind 5.3

[stash_errands @stash_errands]

I want to give @antigravity a try, but can you please at least display the pricing details on the pricing page?

[stash_errands @stash_errands]

@eurofounder Please focus on achieving 100% GDPR compliance first. Do not take shortcut as it will put your customers at risk.

[stash_errands @stash_errands]

@WallStreetSilv how much did you pay for the scale?

[stash_errands @stash_errands]

@paulg @salik sir i only have 1 life

[stash_errands @stash_errands]

@DavidSacks can someone ask for a refund

[stash_errands @stash_errands]

@jacksonhinkle they probably couldn’t get an appointment for hermes

[stash_errands @stash_errands]

@gridplus hypothetically if someone forces you to sign a fw, what is the best way for us to know and how can we protect/mitigate ourselves? any tips are much appreciated

[stash_errands @stash_errands]

@gridplus thanks! I appreciate the transparency.

[stash_errands @stash_errands]

@KeystoneWallet thanks for writing this thread. For cold boot attacks, I am curious why we don't erase the RAM on every switch-off instead of waiting for sudden temperature drops?

[stash_errands @stash_errands]

@androolloyd @DZack23 @gridplus @danrobinson thanks for your explanation. Somehow the CT give me a vibe that all HWW can do 2. Is gridplus the only one that cannot do 2? i.e. giving any blackhats the fw signing key to authentically upgrade gridplus devices, can they do full extraction?

[stash_errands @stash_errands]

@gridplus @DZack23 @danrobinson is the device designed in a way that I only need to trust the secure enclave and that it never gives you or your firmware the keys? or do I still need to trust you somehow somewhere?

[stash_errands @stash_errands]

@DZack23 @gridplus @danrobinson can I clarify the "handles" with these two worst case scenarios:

1/ fw asks the Secure Element to sign (potential malicious) txs - it's never ever able to get the keys from SE.

2/ fw can technically ask the Secure Element to give the keys.

I am fine with 1 but not 2.

[stash_errands @stash_errands]

@evan_van_ness @one_chosun does it still requirement the same trust assumptions though? It is closed source and a malicious firmware update could leak keys.

[stash_errands @stash_errands]

@gridplus @DZack23 @danrobinson are there devices that only generate signatures and can't be altered to leak keys?

[stash_errands @stash_errands]

@shrimpyuk @Deus0x_Machina @technologypoet You’re saying ledger uses secure enclave like apple is also misleading.

[stash_errands @stash_errands]

@shrimpyuk @Deus0x_Machina @technologypoet Not so minor when the key can be extracted, doesn’t matter how they explain it.