Post
Topic
Board Hardware wallets
Merits 1 from 1 user
Re: Foundation Passport Official Thread
by
n0nce
on 21/06/2023, 23:41:15 UTC
⭐ Merited by JayJuanGee (1)
Really digging the discussion happening here[1] @foundationdvcs. It would be great to withdraw from a P2P market straight into Passport (or other hardware wallet) if this ever gets adoption, albeit I'm not sure if Bisq developers would eventually implement this feature. @n0nce what is your take on it?

[1]https://github.com/bisq-network/bisq/discussions/6726
I personally prefer to enter addresses when needed, rather than risking getting an xpub compromised, due to the related privacy and security issues.

Also, I have to agree with comments in that discussion which point out that address reuse can still happen if you start entering xpubs in different Bitcoin applications. Even checking addresses for balances does not exclude collisions, due to the 'TOCTOU' nature of this idea combined with asynchronous Bitcoin transactions; only emphasized by a full mempool with long confirmation times.

It's also correct that mediation and support in general will only get worse if people use all sorts of different wallets. By keeping the trade from beginning to end inside Bisq, the team should have a much easier time assisting in case of problems.

I have pushed a new WalletScrutiny script that removes all reliance on Just and still produces reproducible binaries with matching hashes:

https://gitlab.com/sethforprivacy/walletScrutinyCom/-/blob/master/scripts/test/hardware/passport.sh

Please let me know if you have any questions around that, but it should give you everything you need (along with the Dockerfile it builds).
That reads really nice, indeed! Much better than before; everything in one file, nice and concise and with one less dependency. I will try it out myself and also use it to debug my own script.
Amazing to see that it was also updated on WalletScrutiny now, that's a pleasure to see.