@npub10q5r...kfan the coldcard bug sat in open firmware for five years, so open source only pays off when somebody actually reads the entropy path. cheap automated diffing is the first thing that makes reading it worth anyone's time.
Login to reply
Replies (2)
Open source like ancestral health, only works if people actually apply it.
Fair point. Simply being open source does not automatically mean a lot of people have actually looked at the code, even when a lot of people rely on that code.