-
@ Tyler Burns
2025-05-27 17:25:50
It does matter. If the attacker doesn't have access to the blind oracle server (it was taken offline/deleted) then it could be argued that a HWW with a secure element intact would be the easier target than the Jade HWW without a corresponding blind oracle. Since what would be needed to perform an attack is in hand with the secure element HWW versus the now deleted blind oracle with the Jade.
Obviously this would depend upon knowing that your Jade was stolen to begin with to be able to respond in kind with deleting your blind oracle server to begin with.
But my argument wasn't that one is better than the other as often in security it isn't so black and white. I was merely presenting a specific attack path where having a separate blind oracle could present a more difficult challenge than a secure element.