The crazy thing about the Coldcard bug is that it's almost identical to the libbitcoin issue with bx from 2023 known as "Milk Sad". How many more will rely on an RNG to generate keys? People using Bitbox, Jade, Trezor etc should all be taking a hint if they relied on an RNG too. You don't get time to fix it when a bug is found. Assume your seed is compromiseable unless you can prove otherwise.

Milk Sad: /home

GM Anyone wondering if ”Have fun PLAYING with your bitcoins” was Trump's way of covertly telling us to use dice rolls? Okay probably too soon. The more I learn about covert patching of systems where a lot is on the line and responsible disclosure starts a race between attackers and victims the more I think we really need to just get shit right the first time. Dice rolls seemed inconvenient, so they gave us RNG, but it turns out RNG vulnerabilities are a lot less fucking convenient. Keep your set up simple anon, and understand every block you build it with.

For everyone panicking about the Coldcard vulnerability and who is now exploring methods of generating a new seed, just remember there's a lot of flawed ways to use dice – especially d6's. Coinflips are hard to fuck up. You can flip a coin 128 times for a 12 word key or 256 times for 24. Dice can work but there are pitfalls to avoid that aren't.t obvious.

Wen lambo?

GM Made some scrambled eggs with shallots and garlic and ham and sundried tomatoes and gochujang and cottage cheese with shallots on top because breakfast. Totally pumped for Bitdevs tonight too, even if my brain is more swimming in FIPS.