If the country turns into a totalitarian state, a very few math nerds will still have access to their Bitcoin, which will be far less valuable because everyone else’s will be locked up and can’t trade. We’ll probably see that situation coming, though, and can make a change before it hits. In the meantime, one should avoid getting rekt through janky, questionable cold custody setups.
quotingas i anticipated, it was simple user error. Jade device needs an internet connection while connecting with Sparrow as it needs to connect to the Blockstream server to make sure the PIN is not being brute forced! helpful! but it makes my idea of an offline Sparrow instance impossible
nevent1q…wqey
nevent1q…w65g
---chatgpt---
The Jade oracle communication is a security mechanism used by Blockstream Jade hardware wallets to protect your PIN without storing enough information on the device for an attacker to brute-force it.
In simple terms:
Your Jade does not store your PIN in a way that lets someone extract it and try guesses offline.
Instead, Jade uses a blind oracle (a remote server) as part of the PIN verification process.
When you enter your PIN, Jade performs a cryptographic exchange involving:
the PIN you entered,
secrets stored on the Jade,
and a response from the oracle server.
The oracle can help verify that the PIN attempt is valid without learning your PIN or your wallet seed.
The "blind" part means the server is designed so it does not know the sensitive information it is helping verify.
In your case, the relevant part of the Sparrow log was:
Error calling https://j8d.io/get_pin
j8d.io is the endpoint Sparrow uses for Jade's PIN authentication flow. Your laptop being offline prevented that exchange from completing.
Why does Jade do this?
The goal is to make a stolen Jade much harder to attack.
Without an oracle-style design, an attacker who physically obtains a hardware wallet might try:
guess PIN → check result → repeat
over and over offline.
With Jade's design, the device uses a mechanism that limits guessing attempts and involves the oracle so that brute forcing is much less practical.
Does this mean Blockstream knows my PIN or seed?
No. The oracle is not supposed to receive:
your PIN,
your recovery phrase,
your private keys.
It participates in the cryptographic protocol rather than simply saying "PIN correct" or "PIN incorrect" to a server.
