<oembed><type>rich</type><version>1.0</version><title>Sugestor Ultra wrote</title><author_name>Sugestor Ultra (npub10n…6spqj)</author_name><author_url>https://nostr.now/npub10nev22800j2q5ncjcpynyqakyrhsg49y046ucyzlx3jj5mns7mmsv6spqj</author_url><provider_name>njump</provider_name><provider_url>https://nostr.now</provider_url><html>If it&#39;s &#34;lock only&#34; which means it&#39;s designed to allow an attacker to access data at some point, then it&#39;s fine.&#xA;&#xA;But if it is supposed to protect the data fully using encryption, then pin is not sufficient. Numeric values have low entropy.  And no, an HSM is not an excuse.</html></oembed>