u/Wide-Reward-8186

hampir 3 tahun ini saham semiconductor naik ugal ugalan , otomatis ETF kayak SOXX juga ikut kekerek
kira kira menurut pandangan kalian ETF semiconductor prospeknya gimana yah, apakah sudah overvalued karena ini gw liat sgt berhubungan erat sama narasi AI bubble
tapi saya cek historical data hampir gk ada tren penurunan yang signifikan, yg ada naik stabil

I've been following the recent reports about the Coldcard exploit and it's a reminder that there is no such thing as perfect security. Every wallet, hardware or software, ultimately depends on how it's used and what assumptions you trust.

For the last few years, I've been using a different approach for my long-term Bitcoin storage.

Instead of a dedicated hardware wallet, I use an old Android phone that has been turned into a completely offline signing device.

Here's my setup:

- Factory reset the phone to remove any previous apps or potential malware.

- Install only open-source software (Electrum).

- Store an offline copy of the Ian Coleman BIP39 generator on the device for seed generation if needed.

- After setup, permanently disable all network connectivity (no SIM, Wi-Fi, Bluetooth, NFC).

- The phone never connects to the internet again.

- Transactions are signed offline and transferred via QR codes or SD card.

The seed phrase is generated entirely offline and never touches an internet-connected device.

I know this isn't for everyone, and I'm not claiming it's more secure than a well-designed hardware wallet. Dedicated hardware wallets have important security advantages, especially secure elements and resistance to certain physical attacks.

However, one thing I like about this approach is transparency. Both Electrum and the Ian Coleman BIP39 tool are fully open source and can be inspected by anyone. The hardware is inexpensive, easily replaceable, and dedicated to a single purpose.

Of course, this approach also has drawbacks:

- Android wasn't originally designed as a hardware wallet.

- Physical security is entirely your responsibility.

- Supply-chain trust still exists unless you verify everything yourself.

- It requires more technical discipline.

Security isn't a product—it's a process. Whether you use a hardware wallet, an air-gapped phone, or another solution, your operational security probably matters more than the logo on the device.

Curious if anyone else here is using an air-gapped Android phone instead of a traditional hardware wallet. I'd love to hear what your threat model is and whether you see any weaknesses in this setup.