Hi again...
Bad news after checking furthermore, the qrcodes can not really be decoded (thus said they does not contain nor private nor public key IN PLAIN text)... they theoretically contains public key in an encrypted manner, Check this official answer ->
https://safepalsupport.zendesk.com/hc/en-us/articles/360054745351-Is-it-possible-to-pair-the-SafePal-S1-hardware-wallet-with-other-apps- - On the "Pro" side: this is a secure way to communicate and as we somehow trust Binance, we can then trust Safepal.
- On the "Con" side: users/developers can not check what the device is broadcasting on its Qrcodes, and everything is closed source, so no simple decoding possible, and no other application can use Safepal S1 (this is intended by Safepal).
In a business perspective I can understand such move, but this is not a licensed bank this is cryptocurrency and
trust need to be proven not just obtained by reputation.
I really really loved this device, its conception, its price...
BUT it's not worth of trust at 100% level I really hope that Safepal will release some documentations, sources code or the used encryption to let the users/developer just be 100% sure of this device. this is not the case right now...
So for those of us that are really maniac about security, Safepal S1 is a
strong NO! until Binance/Safepal release something that can proof what's the content of those qrcodes.Note that I am not against Safepal S1 nor Binance nor did I find an exploit or a bug BUT I am on the side of a 100% proven security not just reputation.