My #Coldcard findings: based on public data, there is a high probability that the #Coinkite CTO intentionally planted an entropy vulnerability into the firmware, and there is good reason to believe th...
I don't discount its a possibility.
But even this suggests such incompetence, because dark Skippy would have enabled them to booby trap the devices without leaving the door open for any asshat that noticed the address space was constrained. AI made it easier to find but it wasn't strictly necessary. That later models half fixed it also is a head scratcher.
I'm still leaning to gross incompetence and criminal negligence. The code runs right in an emulator and wrong on silicon. They were notably sloppy about a lot.
I do appreciate the research you're doing though. If nothing else it gives us a picture of just what sort of nonsense we're looking at.
But even this suggests such incompetence, because dark Skippy would have enabled them to booby trap the devices without leaving the door open for any asshat that noticed the address space was constrained. AI made it easier to find but it wasn't strictly necessary. That later models half fixed it also is a head scratcher.
I'm still leaning to gross incompetence and criminal negligence. The code runs right in an emulator and wrong on silicon. They were notably sloppy about a lot.
I do appreciate the research you're doing though. If nothing else it gives us a picture of just what sort of nonsense we're looking at.
2❤️1👀1🫂1
