eldorado on Nostr: It has to be extreme malice. Its hard to consider extreme incompetence for a security ...

It has to be extreme malice. Its hard to consider extreme incompetence for a security product of this kind. And then you have to factor in the fact that the code change was authored anonymously and merge by the CTO as shown by Laser (nprofile…cuaj). Sounds dodgy as fuck.

quoting
nevent1q…csjr

Gm the Coinkite CTO authored the Coldcard vulnerability under an alias then merged it into the Coldcard repo as the CTO. ☕