I think when the discussion reaches this point where people claim "hardware wallets are not safe" we are just going in circles.
Is that denial that hardware wallets are somehow now really safe. A lot of attacks have taken place in the past on them
You are safe enough with a hardwallet.
Using an airgapped pc may be better if you know what you are doing and you are very careful. No one could insert a pen drive or connect it to the internet (wifi or ethernet). There are many other things that you must be aware, careful and paranoid to have something close to 99% security even using an air gapped pc.
Even using a bank account and visa you can lose money, as they are not 100%.
They are insured though in quite a few countries.
And yes it is best to use webcams as bob said but then you have to get two webcams that you use for only that and sometimes qr code scanner apps get a bit faulty (there's also the 1000 byte limit of QR codes).
As far as I know ledger nano vulnerabilities happen when the attacker gets physical access to your device.
If you bought from third party seller, you must consider it as a permanently compromised device. So always buy from the official retailer.
This is also reliant on your postal carriers and security officicals not changing anything on it's way to you.
These two aren't entirely safe though.
Thats definitely true. I never intended to claim they are
entirely safe. 100% safety and security does not exist.
I just wanted to point out that using the 'best AV software' is
not enough to keep funds safe, since OP seems to be wanting to secure his holdings.
You'd still then need an antivirus. I managed to store 1.25
BTC when the price per bitcoin was $16000 without any issues in electrum on an online computer.
Airgapping also means viruses can be transmitted through flash drives which can end up grabbing your code.
This is definitely a thinkable (but also less-probable) way of compromising an 'air-gapped' wallet.
But the question is also whether you would consider such a system as truly
air gapped. Replace the flash drives to transmit transactions with 2 webcams and you have one less attack vector.
I am not saying this would be a perfect solution. It may still be possible to compromise this system with a buffer overflow in the screen capturing software (using the TX QR's to transmit data).
The
chance of getting compromised does always exist.. it just gets really really small. It is about how low the probability has to be until you can sleep good at night
[/quote]
And the two webcams idea seems good, but there is a 1000 byte limit to a lot of qr code scanners. Another idea of doing this would be using DVDs that you can just throw away afterwards as they're really cheap.