Quote from: bitpop on August 20, 2014, 05:47:49 PM

Quote from: RedDiamond on August 20, 2014, 04:47:48 PM

Quote from: thewayshegoes on August 20, 2014, 04:10:47 PM

Quote from: sardokan on August 20, 2014, 09:38:37 AM

Quote from: btchip on August 20, 2014, 09:34:31 AM

Quote from: sardokan on August 20, 2014, 09:29:24 AM

Yup, clearly, a connected device will never reach paper wallet security

until you want to spend it Kiss

(that should be a new meme ...)

Create a transaction offline, sign offline, broadcast

Over Wink

But in real life, I have used your solution to sweep a private key Wink

Even with offline transactions though, you have to move a USB stick between offline and online computers, creating a possible vulnerability, correct?

Correct. A malware can change the firmware of the stick in such way that it do nasty things when connected to another computer. For more detailed technical explanation please see https://srlabs.de/badusb/

No they must be signed. Those usb disks accept any firmware

A little return on badusb exploit
You can use an ironkey, I love it
The device check if firmware is signed for your key.
If not, the usbkey won't work