Don't let the Coinkite crew gaslight you.
Coldcard had a silent fallback to false/pseudo entropy IN THE MOST CRITICAL PATH of their firmware.
This was not a "sophisticated AI attack", but (best case) morons larping as edward snowden and succesfully fooling the entire #Bitcoin space.
The real attack was social.
Login to reply
Replies (8)
AI can discover projects with false/pseudo entropy, but AI cannot cause projects to ship false/pseudo entropy.
Coinkite did that all by themselves.
Why the fuck would a fallback even exist.
Like if it fails why force it through?!
TOS may be void if Gross Negligence and Willful Misconduct can be proven.
Yes. Why?
Reasons not to write life or death firmware in a scripting language.
Sure seems to be the case. 😥
Using dynamic scripting languages like Python/JavaScript for do or die cryprography... 🪦🪦🪦
