thejohnnycrypto on Nostr: PeterK a canary only helps if the attacker takes it first. if the weakness is in how ...

PeterK (nprofile…anv4) a canary only helps if the attacker takes it first. if the weakness is in how the seed was generated, the canary address and your cosigner key come off the same master secret, so one sweep finds both and the warning arrives with the loss instead of ahead of it. a canary on a separate seed in the same device model tests the vendor instead, which is the part in question here. and none of it works unless something is watching that address and telling you.