HAC

339. DIY Bitcoin with HAC

- DIY Bitcoin storage using generic hardware and open-source software (Linux, Bitcoin Core) is more secure than specialized hardware wallets because it avoids concentrated attack surfaces and supply-chain risks. - The Coldcard vulnerability exemplifies how Bitcoin-specific hardware becomes a high-value target for attackers; the flaw in its random number generator went undetected for five years because restrictive licensing discouraged expert code review. - Bitcoin Core and established cryptographic standards (OpenSSL, OpenSSH) benefit from decades of scrutiny by the world's best engineers, making them more trustworthy than bespoke hardware wallet implementations that "reinvent the wheel." - Multi-signature vaults on generic laptops running Bitcoin Core provide superior key management, redundancy, and protection compared to single-key solutions, mitigating both theft and loss risks. - Users should run their own full node on one computer and maintain an offline signing device on a second computer to eliminate reliance on third-party backends and maximize sovereignty. - BIP39 seed derivation was designed for low-power hardware devices and uses weak memory-hard algorithms, making passphrases vulnerable to brute-force attacks even on devices marketed as highly secure.