Comment by m3kw9

They should only use a computer that is air gapped to go online only when signing something. This is an op sec failure to not have this procedure