Dice sales up!

Quick summary of the CoinKite issue. The Coldcard Mk3 hardware wallet has a critical firmware vulnerability that results in weak, predictable seed phrase generation, which has actively been exploited to drain over $70 million worth of Bitcoin from affected wallets. The Root Cause: Flawed Entropy According to a security advisory by Coinkite and independent analysis by security researchers, the flaw stems from a programming mistake introduced in March 2021. The Bug: A code update switched the device's seed-generation function from using the hardware's True Random Number Generator (TRNG) to a broken software-based library. The Result: Instead of using absolute cryptographic randomness, the device fell back on predictable, non-secret data, like the chip's internal serial number and system clock, to seed the wallet. The Impact: This drastically reduced the wallet's security from a virtually uncrackable 128 bits of entropy down to an incredibly weak 40 to 72 bits. Attackers discovered this flaw and used automated scripts to brute-force and predict the exact seed phrases generated by these devices. Who is Affected? You are at high risk if you meet all of the following conditions: You generated your wallet's seed phrase directly on a Coldcard Mk2 or Mk3 device. The seed phrase was generated while the device was running firmware versions 4.0.0 through 5.0.3 (released between 2021 and 2023). You used a single-signature configuration without an added BIP-39 passphrase. You relied purely on the device's internal system to create the seed, rather than performing manually randomized dice rolls. Note: If you subsequently imported a weak seed phrase generated by a compromised Mk3 into a newer device (like an Mk4 or a software wallet), the funds remain fully exposed because the underlying seed itself is mathematically predictable.

Folks piling on with heaps of “I told you so” isn’t exactly helpful for those in a bind. Everyone’s an expert - after the fact…

Starting my day in the fiat mines with a very acceptable 400 ppm CO2.

GM my Nostr frens. Get off Coldcard. Keep stacking and mining those sats, be kind and zap each other, and stay safe out there. ☕️⚡️

July has been a difficult month, need to get back on target, get consistent. #proofofwork

I can’t help wondering, what would Satoshi do? #wwsd View quoted note →

Poor guy missing an antenna 🙁

A question for my #beekeeping friends... I have several hive bodies and frames that were infected by wax moth larvae. It was BAD! On advice, I cleaned them as best I could wrapped them in black plastic bags (threw in a good amount of mothballs) and sealed them up for a year. The wax moths and all their larvae are dead - but the hive bodies and frames all smell of mothballs! Question: Can I still use these hive bodies and frames next year? If I let them air out will they be usable, or will they forever be toxic or repelling to the bees? I have time now to make all new hardware, but would really like to reuse what I have. Appreciate any experienced feedback and guidance I can get. #beekeeper #asknostr #reshare #pollenators #bees | @Green Bees

Filled up my car with old beehive hardware and cranked a bunch of new frames for my boxes. Not a bad morning. #woodwork #beekeeping

GM! If you like #woodwork or beautifully made #tools - here is your Sunday morning moment of #zen !

GM my Nostr frens. Rainy morning here. Keep stacking and mining those sats, be kind and zap each other, and stay safe out there. ☕️⚡️

Current homepage toolkit.