Really sorry for everyone who lost coins, looking through a lot of losses between 5-20 BTC, probably people's entire life savings and thought they did everything right.
Its already autistic enough to have an air gapped bitcoin only device disguised as a calculator you can be forgiven for not ALSO rolling dice, only the truly paranoid go this far
Fucking sucks balls this is a dark day for self custody
Replies (22)
:(:( 😢😢😢
Even on a mk3 with dice rolls I don't think I'd sleep well.
Exactly, and well, maybe AI finds this with other wallets? Maybe we're never safe
darkest day i can remember in my time in bitcoin
100x more than that are gonna rage quit after getting rugged by the ColdLarp.
:(
No
When you setup a new seed on cold card you have the option to enter your own random numbers to generate the seed. Using dice is one way to use offline randomization. This bug in cold card is because their random numbers weren't random enough
Roll dice 100 times gives you a 100 digit random number, which is better than 50 rolls for a 50 digit random number. Sort of like password length, longer is harder to break
If you roll a D6 once, I have a 17% chance of guessing what you rolled. If you roll twice I have a 2.8% chance. Three times it's a 0.5% chance. Roll 100 times and it's 1/(6^100), which is very, very, very unlikely to be guessed.
No it’s 1 different number 100 times
Yes when you start fresh it has like a dice rolling wizard thing
It's wild that people said not to use dice rolls, wtf‽
Any.
Cryptographic.
Elements.
Have.
To.
Be.
Open.
Sourced.
Is 31337 examples of a fuckup not enough to understand that?
A reminder that WHATSAP IS NOT OPEN SOURCE.
In today's reality it's impossible to trust any closed-source software which includes cryptography. Period.
Yeah, thats the problem with stuff like this. People dont intuitively understand randomness, entropy, they get sloppy with the procedures, it takes too long, and they just want to yolo their life savings into shitcoins, who has time to care and learn?
Bro why are you sharing a http link to a client to show a nostr note, on nostr? Just quote the damn note. I'm looking at this in a nostr client right now, I don't want to open your fucking note in a web browser.
Autistic former COLDCARD Mk4 and Q owner here. This RNG failure is absolutely catastrophic, and users did everything they were told was secure. But “autistic enough” is still a shitty way to say overly technical or paranoid. Autism isn’t the punchline here—Coinkite’s failure is.
"Sleep well" is exactly what Coinkite advertised.
Bitcoin doomed
@utxo the webmaster 🧑💻🍁 the dice step costs one evening and then never again. we kept filing it under paranoid, and that is most of the reason so few people ever did it.
I moved mine to a sparrow seed for now, you reckon after upgrading the firmware AND rolling dice, that it would be ok to put the new seed in the coldcard? Problem is these people have been at the top of the food chain, i really do t k ow who to trust at this point anymore. I’m probably gonna keep my Q and just make my own dice roll seed
