"They did everything correctly and they still lost everything." No. They didn't everything correctly. Now we know that generating entropy from an electronic device is not "the correct way" to go about financial sovereignty.

I think many people are saying that they did everything right BUT coldcard failed them.

What have you learned from this?

I found a guy and a product. Will shill soon. Ordered mine already.

Bitcoin is radical responsibility. But I see a lot of people blaming podcasters for shilling coldcard.

That's exactly where I'm going and what I'm going to shill going forward.

You "think". Why even take the risk. I'm not even sure it's possible to verify if the entropy was correctly generated when you have it done by device. Might as well take no chance and do it by hand.

Lessons: - Take entropy seriously - periodically upgrade your security protocol - Consider seedsigner - ?

Suddenly the idea of building a Bitcoin company that has nothing to do with hardware or software doesn't sound as stupid. It's a lot of work and it doesn't make me rich but I doubt I will ever such controversies making books and belts.

This is now officially the most exciting cycle I've been a part of.

I don't understand why so many people are focused on multi sig right now. I have nothing against it and depending on your situation it can be very good but right now it's just not the most fundamental thing we have to push forward.

Lots of fud and misinformation. Seeing people claim ridiculous things like using an Air gap signing device has been proven useless as if it has anything to do with this situation.

I think the most fundamental lesson of this fiasco is to take entropy generation very seriously AND TO DO IT YOURSELF. Don't trust an electronic device for this. I don't think the lesson is to simply trust an other device. I don't think the lesson is to completely drop the idea of a HWW that secure a seed (as opposed to a solution like seedsigner). I don't think the lesson is that podcasters with sponsors are evil. The lesson is *generate a seed yourself*. Tho I do understand if your next lesson is to simply not trust these devices at all from now on.

Modulo sounds good today

I don't think someone is responsible 100% for every outcome happening with a product. For example, if I shill the new Toyota on my podcast because I like Toyota, I use one and I'm paid to promote it, I don't believe I should be held responsible because this specific new model had a flaw in it that led people to die in car accidents. We're probably mostly on the same page. I'm not saying there's absolutely zero responsibility or anything to learn from that and things to change but my focus is really not on blaming podcasters for that. Especially so when it is not really the device itself that failed at protecting the seed but one (very important) feature that was flawed.

It's probably good to periodically upgrade your security protocol and reassess the risks.