looks like there was a USB vuln between 4.0.0 and 4.0.1 that would be referenced to. given USB as the threat vector, an air gapped setup would not be affected. I don't believe he is complicit based on...
This is my reasoning:
If because of what Novak said to Matt about unreleased 4.0.0 resulted in
(A) Matt knew being below 4.0.0 was not vulnerable
+
(B) Matt knew his guide was not vulnerable ie dice rolls
+
(C) Matt says he can't say why and to not dissect why
Then
(D) Are we to believe he never reasoned why?
What else other than low entropy seeds fits A, B & C ?
Even if he thought 4.0.1 fixed "him being able to steal all your bitcoin" he knew coldcard had created a serious issue that meets A, B, C in 2021.
I don't see how the unreleased 4.0.0 usb issue meets these conditions.
If because of what Novak said to Matt about unreleased 4.0.0 resulted in
(A) Matt knew being below 4.0.0 was not vulnerable
+
(B) Matt knew his guide was not vulnerable ie dice rolls
+
(C) Matt says he can't say why and to not dissect why
Then
(D) Are we to believe he never reasoned why?
What else other than low entropy seeds fits A, B & C ?
Even if he thought 4.0.1 fixed "him being able to steal all your bitcoin" he knew coldcard had created a serious issue that meets A, B, C in 2021.
I don't see how the unreleased 4.0.0 usb issue meets these conditions.
1❤️1