Damus
Benking profile picture
Benking
Rodolfo (@N ) built #ColdCard from the open source code of Trezor.

The Foundation forked the ColdCard code to create the Passport hardware wallet. (This is perfectly legal and common practice in the open source space.)

Rodolfo took the plunge and changed the license of ColdCard so that competitors could no longer use his code.

But since he couldn’t change the GPL license he had obtained from #Trezor, he had to remove that code and write new code in its place.

In the process of rewriting it, he introduced the RNG bug into the code.

(It was around this time that I started listening to Citadel Dispatch Podcast @ODELL and @MartyBent , and Matt Odell and Matt were also fairly good at getting away with NVK's embarrassment and spent a significant amount of time nagging NVK about it every time he was invited on his show. But NVK had no logical reason and continued with his childish excuses. He was really just fed up that another company had taken and used his code without permission!)


This problem had been in the code for 5 years and no one noticed, because when others can't use a code in their own commercial products, there's no economic justification for spending time reviewing and evaluating that code.

This greed led to Rudolph's downfall.

(Taken from this tweet (https://x.com/gegelsmr4/status/2083716607977967622) with added bread)
812❤️14🤙2❤️1🌼1🎯1👀1
₿itcoin Makueni 🇰🇪 · 4w
Perfectly explained 🙌
Captain Anarchy aka Major Love | BIP-110 · 4w
nostr:nevent1qqs00dgpagf238qrypuymgu8xn55gvt0992qcw2g5sqfumuyafs7argpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3camnwvaz7tmwdaehgu3wvf5hgcm0d9hx2u3wwdhkx6tpdsq3yamnwvaz7tm0venxx6rpd9hzuur4vgqs6amnwvaz7tmwdaejumr0dspzqyh25h9r6yxgjkl2fyr2k5q45l6ekt7vrwt2y3pxefnap8qxluakqvzqqqqqqycxv7pu
Johnny · 4w
nostr:nprofile1qqsx5vjeglm8m6aveagzwj4ckfvf96q696hllqjd7sfy3fkz8r4mu6snxsaz0 the license change forcing a rewrite is the part most people are skipping past. new code with no second implementation left to diff against is exactly where a bug like that survives review. open source only protects you whe...
Momo · 4w
یه کم یه جاهاییش رو بد خراب کرده، اما به طور کلی ٨٠ درصدش رو خوب ترجمه کرده.
cornman · 4w
i remember that, nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqyv8wumn8ghj7urjv4kkjatd9ec8y6tdv9kzumn9wsqzqpxfzhdwlm3cx9l6wdzyft8w8y9gy607tqgtyfq7tekaxs7lhmxf5dcd8v was giving him mad shit about it. People should be pulling those clips instead of just that context lacking clip of him advising against dice...
shredder · 4w
nostr:nprofile1qqszf3hhqnhtssez2zkx6vnvxdjg5l06dt6kumsq75vpf2l6aaj84pcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhszythwden5te0dehhxarj9ekxzmny9uq3zamnwvaz7tmwdaehgu3wwa5kuef00fvce5 nostr:nprofile1qqstkqt54cs6djkp5z5u3d9vd6la54kw29s9cv2mrqjfwz7zwhmj8xsppemhxue69uhkummn9ekx7mp0qyg8wumn8ghj7mn0wd68ytnddakj7re...