wip's avatar
wip bitpanter@hodl.ar 2 weeks ago
image Hi guys, i built an offline BIP39 lab after the Coldcard incident. You can try it :
BIP39 Visual — Experiment
 If you can’t see the path from entropy → checksum → 12/24 words, you’re trusting a black box. BIP39 Visual (single HTML, no server) • Coin / dice / binary input • Standard: phrase + SeedQR • Pro: full pipeline (bits, SHA-256, groups) • Time to crack • Browser “Generate” flagged as unsafe on purpose Not a wallet. Learning tool only. Never use a web seed for real funds. I would appreciate the feedback. Thank you!

Replies (18)

exist270's avatar
exist270 _@exist270.com 2 weeks ago
Did #ColdCard just open-source #WEaaS ; *Weak Entropy as a Service*? 😏😂 I see ***SO*** much malware shipping from here on out. 🤙
wip's avatar
wip bitpanter@hodl.ar 2 weeks ago
Hi, b'TC.py ,repo isn’t public yet — I shipped the demo first out of impatience. I’ll post the source soon so you can audit and run it offline.
wip's avatar
wip bitpanter@hodl.ar 2 weeks ago
hi renato, everything runs right in your browser, nothing gets sent anywhere. For full offline mode just download the HTML and open it on an air-gapped machine (Tails works great). Once the file’s local, you don’t need the network at all.
exist270's avatar
exist270 _@exist270.com 2 weeks ago
I'm just saying in general; now that the concept of the entropy bug has mass awareness & #AI keeps getting better, the barrier to entry for attackers shipping intentionally compromised software is near zero. 💁‍♂️ I wasn't referring to your project specifically. 🤙
Default avatar
libertyPleb 2 weeks ago
Facts. Bitcoin fixes this. Every. Single. Time.
Row's avatar
Row row@alephia.tech 2 weeks ago
Ok, now that it has calmed down I can say it: > Chadpanter posts single-page html goodness with embedded JS, clearly stating “no server”. > You: SooUuUrce? SoURcE? sOURcE? Just right click the damn thing and pick “View Source”.
1 replies ↓
↑