Foundation is ran by good people but I can’t trust their products.
Many of their statements, including:
- calling the SAMA5D2, which lacks security features found on many security-oriented processors, a “security processor”
- using the ATECC secure element, when it is known to be insecure and was designed by a defunct company
- calling smart cards, which are the most secure way to protect your keys and are constantly evolving, “ancient and dated technology”
- *forking* Xous instead of using a well known kernel like seL4 or Linux or even writing their own (from their marketing, it seems they want to associate with the good reputation of Xous)
make me strongly think that they do not have significant knowledge with security.
As with any HWW company, they have to prove that they can be trusted to make security products. I am not convinced at all.
semisol
npub122…cgrkj
2026-06-08 15:31:41 UTC
in reply to nevent1q…s2ep
Author Public Key
npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkjPublished at
2026-06-08 15:31:41 UTCEvent JSON
{
"id": "1531445be6cec1dcdb816aa51f5a91668e1078dce93b143b522caf5ab6af49e2",
"pubkey": "52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"created_at": 1780932701,
"kind": 1,
"tags": [
[
"e",
"eb8960e092dbd142ec48d7dbd2290003d99dd9b15788237e391823dae1e8e982",
"",
"root"
],
[
"e",
"fe5eff07f7bc3f4e6583026de5231a72a7ba59ee9a94b993b33c96229f367791",
"",
"reply"
],
[
"p",
"a60e79e0edad5100d7543b669e513dbc1c2170e8e9b74fdb8e971afd1e0e6813"
],
[
"p",
"52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd"
],
[
"p",
"f985d309197c805e1719c73185b574fc3ee407d7c1b6157dee99c6ace2599bbb"
],
[
"client",
"Nostur",
"31990:9be0be0fc079548233231614e4e1efc9f28b0db398011efeecf05fe570e5dd33:1685868693432"
]
],
"content": "Foundation is ran by good people but I can’t trust their products.\n\nMany of their statements, including:\n- calling the SAMA5D2, which lacks security features found on many security-oriented processors, a “security processor”\n- using the ATECC secure element, when it is known to be insecure and was designed by a defunct company\n- calling smart cards, which are the most secure way to protect your keys and are constantly evolving, “ancient and dated technology”\n- *forking* Xous instead of using a well known kernel like seL4 or Linux or even writing their own (from their marketing, it seems they want to associate with the good reputation of Xous)\n\nmake me strongly think that they do not have significant knowledge with security.\n\nAs with any HWW company, they have to prove that they can be trusted to make security products. I am not convinced at all.",
"sig": "f04ed655122444145b184234374f96902761a480f233618c51fc90b45ab338574fb1b41354a6e11272f7c2ba644055c4b0f4f025d1d81e9bed99a18a9f2bccc6"
}