Damus
note1vkgcg...
nostrich profile picture
It looks like a rookie mistake to me that should have been discovered by a code review before shipping the code.

Someone at Coinkite #defined a value as zero, but the code looking for the value only cared if it was defined or not. They had ASSUMED that defining it as zero was the right thing to do but didn’t check what effect that would have on THE MOST CRITICAL functionality in a wallet.
2
nostrich · 1w
https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware
AENEAS · 1w
It's VERY instructive that, while everyone spent the whole year worrying about this or that bogeyman, what ended up really hurting them was a basic bitch coding mistake in their favorite HWW. https://static.wikia.nocookie.net/evilbabes/images/7/7a/Hllhjklkhkhjlhkl.gif/revision/latest/scale-to-widt...