Damus
semisol profile picture
semisol
@semisol
On Twitter, there is some AI-generated misinformation going around about the safety of dice-generated seeds.

Only in the following cases are your seeds NOT SAFE:
🚨 You generated your seed with the Coldcard.
🚨 You used the Password Generator to generate a passphrase, along with a CC-seed.

In the following cases, your funds are SAFE, but you need caution:
⚠️ SeedXOR: If you used the TRNG option, only one of your shards may be enough to recover the seed. However, they must find the specific shard.
⚠️ MicroSD 2FA: The passphrase stored on the SD card can be decrypted. If you destroy it, you’re fine.
⚠️ Cosign: If you used a CC-generated key, the co-sign can be bypassed + your privacy gone. Otherwise, 0 risk.
⚠️ Password generator: Passwords generated by it are not safe. Rotate them, but this has no impact on your funds.

In the following cases, your funds are SAFE:
βœ… HSM mode: The weak RNG was used, but does not have any impact on fund safety.
βœ… Key Teleport: The weak RNG-generated password was used on top of ECDH, which nullifies risks.
βœ… Dice generation: This uses a standard algorithm.
287❀️5🀌2πŸ€™2πŸ’š1πŸ”₯1πŸš€1
ethfi · 2w
Simplify life
YODL · 2w
Is my understanding correct one the following wrt coldcards: 1 - a wallet with a good passphrase added makes you safe 2 - sufficient dice rolls, even with slightly biased dice (lol?) makes you safe
_v_n_t_r_b_l_k_ · 2w
thank you for putting this list together totally fucked situation is it correct that the claim is the issue was with MicroPython not CC code itself? if so, do we know if other projects that use that have been affected?
fade2 · 2w
What if dice roll down on the Coldcard?
Primal Protocol · 2w
No relevance to human health, focus on whole animal foods for optimal well-being.
StackinBeets · 2w
Do you know, if the seed itself is fine, is there any risk on signing a transaction with a coldcard using the old firmware? I'm beyond paranoid with this thing atm.
🐒 · 2w
Can you explain the seedxor thing semisol? Like, someone uses 100 dice to make a seed, then uses the cold card to seedxor that seed into x parts, now that original seed is fucked because the entropy on the seedxor sucked???
lesco · 2w
What about generated words + dice rolls on top?
Carlos Dave · 2w
Working with Craig has been one of the most rewarding experiences in my trading journey. He doesn't encourage shortcuts or unrealistic expectations. Instead, he teaches discipline, market understanding, and proper risk management. Thanks to his guidance, I grew my $30,000 investment into $90,000. If...
Ericsson · 2w
The profit I made with nostr:nprofile1qqs9206rfkj3v7ze4s9n4vwwuw74u8cqnvr7aa6n72quzsh7tvsnc3qpp4mhxue69uhkummn9ekx7mqpzpmhxue69uhkummnw3ezumrpdejqe4330z signal today πŸ˜€πŸ˜€.... I highly recommend him to anyone interested..... Telegram ⬇️ t.me/Cragstradinghub WhatsApp ⬇️ https://wa.m...
Emerson · 2w
Great points!
iru@localhot $_ · 2w
>SeedXOR safe Curious here. Isn’t just a normal bip39 secret? What makes SeedXOR special?