I said conflict of interest, not bribe. Sponsorship doesn't need direct instructions to shape how you cover someone.

"The pseudonym hid nothing" isn't right either. The weak RNG code was committed as "Switck" on 2021-01-28, signed with the same key as Peter Gray's own commits going back to 2020. Coldcard pulled that library in as an external dependency five weeks later. That's at least curious.

I didn't want a true-crime episode, just one line: some think it was deliberate, unproven. An outside dev warned Coinkite about this exact bug 14 months earlier and was ignored. That alone is enough to mention it.

If you found a bug that would justify the noise around this, all black hats found it, too. A reason for full disclosure.

Generally, if your popular frontier model finds it, the only responsible disclosure is full disclosure.

Peter and Switck had back and forth conversations about using that library. Of course Peter tried to put a distance to Switck! That it later was undeniably his doing doesn't erase the beginnings! For all we know, that initial waves weren't Peter's neither. It might simply have become too hot for him to exploit and too hot to fix.

If you had said "More conspiratorially minded people are looking into the bug being deliberate and see circumstantial evidence for that" I would believe you that Rodolfo didn't buy you out but to not mention this at all is exactly what happened with all the other podcasts that were sponsored by Rodolfo. Never say anything bad about this narcissist cause then he lashes out.

I don't mean to say you should have done a deep dive into this but to completely not mention the suspicions of the bug being deliberately planted shows how bound you still are by that sponsoring.

I didn't like this episode at all!

"It happened to our sponsor"?!?

You got sponsored. You skip completely over all the details that hint at Switck aka Peter Gray being guilty. You don't need to own that claim but to say getting money from them didn't influence the way you saw or see them is awkward in combination with skipping this angle now.

I don't know how but nobody else does neither.

It looks like heavily vibe coded. Move fast and break things.

I am confused. So the already mentioned closed source update is not rolled out? I'm not running CLN. Just want to know if a fix is available or if they want all to switch off before they release the fix as it's trivial to figure out the bug.

... asks the master of engagement hacking

Looks like the opposite of "hardened" or privacy focused.

Sure, engagement hacker. You can easily mute the thread.