Large-scale Coldcard compromise (1596 BTC stolen so far)

[Pmalek]

The only thing I still have some confidence in are air-gapped wallets, but even there things are clearly not completely secure considering what happened.

Nothing has changed. Airgapped solutions are great and they work. Airgapped and stateless systems are even better. The problem was in the implementation, resulting in not enough randomness during seed creation.

Most hardware wallets make entering a strong passphrase cumbersome. Even if the thing has a decent keyboard (which none do, not even LOL'DCARD), do you really want to type a long passphrase every time you use it?

I am doing that. My Jade is probably the most cumbersome one, but I am still using long and complex passphrases with it. It takes me several minutes to enter. But as I said earlier, I am fine with giving up convenience for an increase in security. Besides, it's not like I am using it daily. One part of my holdings are on that Jade but I haven't accessed the wallet for over a year. I have a watch-only wallet on a different machine I can access if I need t see my balance.

[Lucius]

~snip~
Most hardware wallets make entering a strong passphrase cumbersome. Even if the thing has a decent keyboard (which none do, not even LOL'DCARD), do you really want to type a long passphrase every time you use it? Most hardware wallets encourage the use of weak passphrases. That weakens security through bad design.
~snip~

Have you ever held a Foundation Passport in your hands and tried to type in passphrases? I've already written that it's the same as typing a message on an old model mobile phone and it takes me less than 1 minute to type 20+ characters, noting that I have no need to rush. I don't know why you need a 50-character passphrase, but if you think you're safer that way...

Besides, I don't know why the same nonsense is constantly repeated that someone needs to do it every day, considering that such setups are used for long-term storage - and that for everyday use we have other less complicated solutions.

[mabji1]

~snip~
Most hardware wallets make entering a strong passphrase cumbersome. Even if the thing has a decent keyboard (which none do, not even LOL'DCARD), do you really want to type a long passphrase every time you use it? Most hardware wallets encourage the use of weak passphrases. That weakens security through bad design.
~snip~

Have you ever held a Foundation Passport in your hands and tried to type in passphrases? I've already written that it's the same as typing a message on an old model mobile phone and it takes me less than 1 minute to type 20+ characters, noting that I have no need to rush. I don't know why you need a 50-character passphrase, but if you think you're safer that way...

Besides, I don't know why the same nonsense is constantly repeated that someone needs to do it every day, considering that such setups are used for long-term storage - and that for everyday use we have other less complicated solutions.

Users who view the hardware wallet as a frequently accessed tool are rightly frustrated by poor input interfaces.
Users who view the hardware wallet as a high-security vault accept the "1-minute penalty" as a necessary cost of protecting their assets.