Damus
Open in Damus
Laser · 2w
Matt Odell and Marty Bent discuss #Coldcard's 4.0.0 firmware shortly after it's release. This release is now known to have distributed the vulnerability Coinkite CTO authored under an alias that lat...
 . profile picture
. @.
I don't believe that Matt's guide or comments can be in anyway taken to only refer to the bug mentioned below in this note 👇 Nothing about his guide seems to have anything to do with it. Also the "don't dissect my statement" can in no way be reffering to an onscure usb issue. No one could guess such a thing. But the guide does add dice rolls. Hence the bug being spoken of is the entropy bug. Either NVK was using Matt to push users to 4.0.1, NVK thought the entropy bug was fixed with 4.0.1 and willing to let users on 4.0.0 to create low entropy seeds hoping no one would ever find out. I don't see how else this can be taken.
11❤️1🎯1
. · 2w
nostr:nevent1qqsvf8ltweycrwaw5f8n9gyryh4267mha0p7eh9th6sk9tstd82cmugpz4mhxue69uhkummnw3ezummcw3ezuer9wchsygy6wg6v0nwhctp5cjy9wps2pxre4udzzswtmgchkvadtnqarfq5aupsgqqqqqqsu6996l
acronym · 2w
They were aware of their bug, thought they had it fixed in 4.0.1 and then opted to recklessly take the chance on the numbers. 1. Maybe they thought too few actually generated seeds with 4.0.0 2. Maybe they thought many of them used good pasphrases anyway 3. Maybe they thought most big hodlers alrea...