Thanks for the suggestions. My idea is a little different from simply running a portable SkySigner binary from a USB drive. I am building a bootable SkySigner USB OS so the computer starts in a separate environment instead of using the host operating system.
SkySigner already supports NIP-07 and NIP-46. I want to keep both options available in the USB version rather than limiting it to local signing.
The goal is to keep the encrypted vault on the USB drive and require a password for signing permissions. I am also working on what happens when the USB drive is removed. The signer should stop and sensitive information should not remain accessible in RAM.
I have already managed to boot the system but I am still dealing with some startup problems. So right now I am trying to get the basic USB OS working properly before moving on to more security tests.
I know an ordinary USB drive cannot offer the same protection as a dedicated hardware signer. But I want to see how far I can take SkySigner with hardware people already have at home.
SkyLords
npub16n…ty8ka
2026-10-23 16:12:07 UTC
in reply to nevent1q…ggv8
Author Public Key
npub16ntyfte9h8u2pjpc90su57gcw2f9c7yzsjx6uyfpmaq3tfuxk7lq8ty8kaSeen on
wss://nostr-01.yakihonne.comPublished at
2026-10-23 16:12:07 UTCEvent JSON
{
"id": "677fa4be21bd976100ef53560196707d309fe71c795000486ea2370a6cc8751e",
"pubkey": "d4d644af25b9f8a0c8382be1ca791872925c7882848dae1121df4115a786b7be",
"created_at": 1792771927,
"kind": 1,
"tags": [
[
"e",
"25810ff9daf7b9dfb578d5e6992f3c874e5e68b91507c0527d54ade68fe8105d",
"",
"root"
],
[
"e",
"cdec5056d6e14ea5d04a6fa7466ae41dfc3c19b108ce64f26138c78113a55ae5",
"",
"reply",
"49557a69c4d2ce9246198acb275b4dbec2c3dc419e8fdf80d94f5d169e4fe972"
],
[
"p",
"49557a69c4d2ce9246198acb275b4dbec2c3dc419e8fdf80d94f5d169e4fe972"
],
[
"p",
"d4d644af25b9f8a0c8382be1ca791872925c7882848dae1121df4115a786b7be"
],
[
"client",
"Nostrich"
]
],
"content": "Thanks for the suggestions. My idea is a little different from simply running a portable SkySigner binary from a USB drive. I am building a bootable SkySigner USB OS so the computer starts in a separate environment instead of using the host operating system.\n\nSkySigner already supports NIP-07 and NIP-46. I want to keep both options available in the USB version rather than limiting it to local signing.\n\nThe goal is to keep the encrypted vault on the USB drive and require a password for signing permissions. I am also working on what happens when the USB drive is removed. The signer should stop and sensitive information should not remain accessible in RAM.\n\nI have already managed to boot the system but I am still dealing with some startup problems. So right now I am trying to get the basic USB OS working properly before moving on to more security tests.\n\nI know an ordinary USB drive cannot offer the same protection as a dedicated hardware signer. But I want to see how far I can take SkySigner with hardware people already have at home.",
"sig": "03ebfef451ec63527ecc33dc3e940da81a079ee5ddcacb5c24d723782c2d98a5a682624bfbb485ad0b3775daab5a751a054ae2398d16224bb22a5e5f45d500c1"
}