The single good things about this CC disaster is that it showed who has brains & balls and who is larping.

What is my crime? Rugging a low entropy seed? A succulent low entropy seed??

Everyone now is doing the opposite extreme of what they were doing before the CC hack and are overcompensating.

The main reason we are in this mess is because we allowed Bitcoin to be taken over by intellectual communism.

Most "bitcoin-only" companies are airbnb for air.

The emperor had no entropy.

If you ever recommended a ColdCard and don't know how a HWW works, how about you shut the fuck up and don't make recommendation for some time.

All these dumb takes about always multi-sig always dice rolls, always passphrases.

STUF up you are a moron that lost people money.

nvk is currently deleting tweets about the block clock "knock off"

This is upestting me so, I mean so fucking much.

There is not 1 single compelling evidence that this was a backdoor.

CoinKite fucked in a major way, and there are MANY red flags, but all are explained by sloppy practices and incompetence.

People who were not sucking off nvk are not surprise by the low standards.

I get that people are angry and want an explanation, and the backdoor explanation will make you feel better as coinkite conspired against you, but this is an emotional way to think.

The reality is you listened and trusted people who are clueless and don't have even a basic understanding of how Bitcoin works.

All the trust was strictly based on social dynamics and 0 verification.

It is easier to claim backdoor than to admit you are a bad judge of character, as that would mean you COULD have somehow avoided this somehow.

Backdoor makes it feel unavoidable, which sorry to say it was not.

1) there is no way to make a backdoor like this an get away with it. this adds permanent damage, and when it gets out you are done, reputation burned for life.

2) don't say they did this for money because the cost vs. benefit makes no sense, too much risk for not that much reward.
business was very successful, they had too much to lose.

3) if you do this for money when bug gets out others will also attack it so you are competing with other hackers

4) look at the fucking code, it a typical mistake that happens in this type of things. the lack of review and using social status to push away scrutiny from project is why it was not caught

You did absolutely NOTHING wrong in using single sig and not rolling dice.

The understanding between coinkite and user is that they provide secure key generation, which is industry standard and works if you have the right internal practices and correct way of doing business.