Thought experiment: assume in an alternate reality that coldcard found this bug before the hackers did. How do you handle it? As soon as you announce that a seed generation bug is fixed to the general public, you are going to have the same race conditions as right now. The bug is just too trivial to find once you know it exists. And just getting everyone on the latest firmware doesn’t fix it. So you can’t just slide the fix in unannounced.

Not sure I would have thought these two would be related before this week. Had to go dig it out of the kids game closet.

Don’t want to be the guy that says this is good for Bitcoin. But it is better to have the entire industry focused on the hardware wallets RNG code for the next few months and work out these bugs now. We will have better products at the end of this madness.

https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/

Love it.

Also - when ? 😁

It’s still boggles my mind that this is coming from China and not the west.

I’m not sure attack is the right word. But I will agree that it was probably the least well understood possibility scope and had the most side effects.

This England - France game is nuts.