Damus
Johnny · 6w
nostr:nprofile1qqs0jjykgl6kfaupk4ek4p2vchjx0qdcdzqlt7a2ctsj87q7hxtn08qqne20t i have. coldcard's build is reproducible in docker, so you compile the firmware yourself and compare the checksum against w...
Barkskin profile picture
That language i don't understand. Not sure if you meant you did/can any hww or also the cc?
My question on checking the code/firmware i'm asking, is if one would recognize that the entropy was not as it should have been or if any other code is corrupted. Even if this firmware is offered via the official hww's website/app.

1❤️1🤙1
Johnny · 6w
nostr:nprofile1qqs0jjykgl6kfaupk4ek4p2vchjx0qdcdzqlt7a2ctsj87q7hxtn08qqne20t reproducible builds only prove the binary matches the published source. they can't tell you the source is sound, and this bug was in the source, so every checksum matched perfectly the whole time. catching weak entropy take...