piotr on Nostr: Please read this and dig deeper. ...

Please read this and dig deeper.

quoting
nevent1q…yws9

Peter's Switck = Switch from Matrix.

It was a tell. 🚩🚩🚩

The core of the #Coldcard vulnerability was a silent switch in the source of randomness. The intended path used the device’s hardware true random number generator. A defective preprocessor check in the `libngu` library instead allowed (and in practice forced) a fallback to a weak software PRNG (Yasmarang) whose output was far more predictable. Seeds created under the affected firmware therefore contained dramatically less entropy than expected—enough that offline brute-force became feasible years later. The switch was not loud; it was a quiet change in the code path that left the rest of the system appearing to function normally while the foundational randomness was compromised.

In The Matrix, Switch was designed as a character who could rewrite residual self-image—appearing one way in the real world and another inside the simulation. The name itself encoded the act of changing identity and presentation at will. Even after the dual-gender concept was removed, the androgynous figure in white remained a symbol of someone who understood that the system’s rules about what is “real” could be altered by those who controlled the underlying code.

Under the handle switck, the same developer who publicly maintained Coldcard’s cryptographic stack as DocHex introduced the library that quietly switched the entropy source. Where hardware randomness was supposed to flow, the defective guard selected the weak software path instead. The rest of the firmware continued as if nothing had changed, just as the Matrix continued to present a coherent world while its deeper rules had been rewritten. Years later the reduced entropy space was exploited, and the wallets whose seeds had been generated under that switched implementation were emptied.

nevent1q…prgj