How does people not connecting their unlocked Coldcard to a computer prevent an attacker who obtains their unlocked Coldcard from simply plugging it into his computer to leverage the REPL to extract s...
An attacker with physical access to an unlocked Coldcard doesn't need any additional exploit to extract the seed. He can just use the Coldcard at that point.
The vulnerability being discussed may have allowed a *remote* attacker to extract the seed via the USB connection.
The vulnerability being discussed may have allowed a *remote* attacker to extract the seed via the USB connection.
❤️1