Quote from: noisyturtle on Thu, 16 May 2024, 15:08:39

a 1.25:1 ratio

This is what I use.

I'm not worried that the software or the scripts themselves would be malicious in terms of trying to get into wallets per se. And I say per se because being worried about literally everything is always the safest of course.

But as Im understanding in order for Karabiner to work on your Mac, you have to basically allow it to act like a keylogger.
And I think the real question is, is permitting one software to log your keyboard activity something that malware could escalate into permissions for keylogging other software in this case a software wallet? Or, would it be just as hard for malware to try and hack the wallet if you had permissions for Karabiner or not?

Quote from: F eq ma on Mon, 30 August 2021, 21:55:40

Personally, I use KeePass with a yubi key token for some auto login functions.    I basically open the keepass db with an auto lock after x minutes.   I have mapped alt-cntrl-? key combo to allow auto type credentials into web pages and other portals.   It works for my use cases.   I use AutoHotKey for controlling iTunes… but that is probably a different topic.  Also, I am Windows user.

That could answer my question if form what you say yubi key allows to bypass pressing keys and therefore keylogging.

Quote from: suicidal_orange on Mon, 30 August 2021, 16:40:22

AHK watches every keystroke to see if it needs to intercept and change it to something else - it could log anything.  On the other hand it's open source and very well known so if it did anything dodgy someone would have noticed.

Karabiner Elements is also open source, not as well known as it's for Mac but I'd still say it's big enough to be trustworthy.

Saving passwords into scripts (or however Karabiner works) probably means saving them in plain text somewhere on your computer - that is not a good idea.

Agreed not a good idea. I personally save passwords in bitwarden. Except my wallet stuff, I just write down. So it's not necessarily in the storing, or even Karabiner logging something it shouldn't. More the permissions for logging itself.

I was pretty set on getting QMK for the exact reason that Volny said; once you're paranoid there's no saving you. While Im still open to a suggestion that
Also, QMK is going to be enough for now I think. Just have my arrow keys as jkli and numpad around homerow would be grand. But I would love to not have to rely on QMK compatible keyboards.

Anyways Im starting to ramble. But you get my point by now I guess.

a 1.25:1 ratio