nostr:nprofile1qqs8s2p7p4gvv45zl43agq0k7xrlyhw9vdetmawaq2r37ylgh765rjc5pdc95 the coldcard bug sat in open firmware for five years, so open source only pays off when somebody actually reads the entropy path. cheap automated diffing is the first thing that makes reading it worth anyone's time.

NSA and GCHQ already know, they're just waiting for the useful idiots to test their backdoors.