Almost everyone installing android is gonna to do it on a pwnt operating system or a pwnt device.
Given the prevalence of bad actor and sockpuppet 'influencers', specialist hardware is too risky.
And even ESP/STM32's are vulnerable to backdoored libraries.
I think the most effective mitigants are to generate private key directly from entropy, and put it through the derivation path on two different home brew set-ups.
Monero Dog
npub103…g6vh8
2026-10-16 12:25:16 UTC
in reply to nevent1q…80ps
Author Public Key
npub1039a2tgr9g7d0mvhm87tzj4vh0mk58wyu7tudnfqdqutp42r50wsug6vh8Published at
2026-10-16 12:25:16 UTCEvent JSON
{
"id": "81851befbff4f6152441fcf2e4a8336c7f4784f71142fc9993841e755355eab6",
"pubkey": "7c4bd52d032a3cd7ed97d9fcb14aacbbf76a1dc4e797c6cd206838b0d543a3dd",
"created_at": 1792153516,
"kind": 1,
"tags": [
[
"e",
"a3489e01fdd79309dfc59cfbb7157b0601c35a729646b42d031898e89e86ea0c",
"wss://nos.lol/",
"root",
"fcf70a45cfa817eaa813b9ba8a375d713d3169f4a27f3dcac3d49112df67d37e"
],
[
"p",
"fcf70a45cfa817eaa813b9ba8a375d713d3169f4a27f3dcac3d49112df67d37e",
"wss://bcast.girino.org/"
],
[
"client",
"Amethyst"
]
],
"content": "Almost everyone installing android is gonna to do it on a pwnt operating system or a pwnt device.\n\nGiven the prevalence of bad actor and sockpuppet 'influencers', specialist hardware is too risky.\n\nAnd even ESP/STM32's are vulnerable to backdoored libraries.\n\nI think the most effective mitigants are to generate private key directly from entropy, and put it through the derivation path on two different home brew set-ups.",
"sig": "3021be5d121f7f41fcc23916188b9a29853f67afbe0d85fc18324a8ab523edc450b4e6247d96ec8923deca71b27c375ab1e6af5d67168142551809a6ffda86f3"
}