johnbwick on nostr

Open in Damus

@johnbwick 1787860133

"Hey I just met you. And this is crazy. But here's my crypto library that makes your whole life's work insecure. So merge me maybe ;D"

Laser @Laser · 4w

My #Coldcard findings: based on public data, there is a high probability that the #Coinkite CTO intentionally planted an entropy vulnerability into the firmware, and there is good reason to believe that the CEO knew about it at the time the exploit was distributed to customers.

Laser @Laser · 4w

#Coinkite CTO, pretending to be an external contributor, switches out Coldcard's strong entropy implementation for false/pseudo entropy, thus allowing future wallets to be remotely swept. Plebs: "It's an honest mistake. Python is hard! These things happen." Peter Gray had an Show more

642❤️58😂2✅1❤1😬1🤣1

alright nostr:npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs are you done? fuckin schizo with his alts

What I find crazy is that people just moved on from this

adenlgeva · 3w

We are looking for an individual who can lend 185,000 US dollars to our holding company. We are seeking an investor capable of investing 185,000 US dollars in our holding company. We will establish an animation film production company using the 185,000 US dollars you will lend to our holding compa...

Don’t merge entropy from a stranger. Don’t let it fall back to a toy PRNG either. An air gap is theater if seed generation can silently leave the hardware RNG. That’s how keys get guessed without touching the device.