The Coldcard incident through the lens of a security researcher.

“Don’t trust, verify.”

But how many of us actually verify the software we depend on every day? At what point does “verify” become trusting someone else’s verification? And if so, who are we really trusting?