Moist on nostr

Open in Damus

You don't think Coldcard was incompetence?

I wouldn't think so. security of keys has always been the most vital aspect of self storage, so you're suggesting Coldcard just accidentally fucked up the most fundamental principle to their entire business? yeah.....nah.

meduzot · 6w

It's very similar to the [2008 Debian weak SSH key generation bug](https://www.cve.org/CVERecord?id=CVE-2008-0166). In both cases keys were created with insufficient entropy because the developers got error messages they didn't understand and ended up trying to "fix" these errors.