y² = x³ + 7

Public Key

npub1nxzjcplexq4v239gv7ql54susyaawss7rlcg796fyq6emjcwe0yqc8fw3a

Profile Code

nprofile1qqsfnpfvqlunq2k9gj5x0q062cwgzw7hgg0pluy0zayjqdvaev8vhjqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxgctdw4eju6t0277gej

Publishing to

relay.primal.net

relay.damus.io

nos.lol

Author Public Key

npub1nxzjcplexq4v239gv7ql54susyaawss7rlcg796fyq6emjcwe0yqc8fw3a

Show more details

Last Notes

2026-08-06 19:56:55 UTC

- reply

As far as I understand:
The ColdCard has hardware random number generator. The bug caused the firmware to NOT use the HRNG (which provides quality entropy) and rather used the MicroPython's software RNG as a fallback. The software RNG was seeded with time and IDs because in an airgapped system, there's no way to get entropy from another sources like disk or network activity. The hardware RNG usually works by measuring noise in the hardware. The noise is unpredictable by physics so it's a great source of entropy by it self. It is not a deterministic mathematical function (PRNG/software RNG), so we don't need to seed it with anything.

2026-08-05 08:52:47 UTC

- reply

So just becoming emotional retard

2026-08-05 08:32:17 UTC

- reply

The force beyond his understanding is just human stupidy

2026-08-04 20:17:58 UTC

- reply

Why? Do you think he could somehow spend the stolen Bitcoin when everyone is watching and actively monitoring?

2026-08-04 18:14:12 UTC

- reply

Maybe, but I don't see a metric in which would ColdCard be the best one 🤷‍♂️

2026-08-04 15:56:49 UTC

- reply

I hope the BIP110cashjrs will grow some balls and won't come back to Bitcoin and use their new coin like Bcashers.

2026-08-04 15:49:59 UTC

- reply

Yeah, but ColdCard was never the best.

2026-08-04 13:25:04 UTC

- reply

Podcasters don't verify

2026-08-04 12:57:27 UTC

- reply

Wdym? He is deleting much more

2026-08-04 12:56:37 UTC

- reply

Trezor uses TROPIC01 as it's Secure Element (alongside Optiga Trust M). TROPIC01 is open, auditable and both SEs are without an NDA. This way you don't have to rely on Trezor (yes, you can self host the oracle server, but how many users will do that? You must have good defaults)

2026-08-02 19:47:03 UTC

- reply

I know what supply chain attack is, but Trezor implements some counter measures so I am asking you what type of attack you mean exactly. For example, Trezor devices have Trezor's public keys embedded directly in hardware, so if the firmware of the device was tempered, the device integrity check would fail.

2026-08-02 19:33:56 UTC

- reply

What do you mean by that exactly? Would they temper the manufacturing/shipment?

2026-08-02 07:33:00 UTC

- reply

It's not. More Bitcoin were lost due to people trying to outsmart the cryptography. This CC "hack" is nothing more than a stupid error that should have been caught by testing. The mistake is really simple and so is it's exploitation method. Literally the same thing already happened in Bitcoin's history many times (Libbitcoin explorer, Blockchain.info, Java's SecureRandom bug, ...). Using a hardware TRNG (for example thermal noise) and testing your implementation would prevent all of this.

2026-08-02 06:55:15 UTC

- reply

Extreme use cases are important, permissionless P2P networks are fragile and that's why we need to have a rock solid consensus rules. BIP110 is broken by design.

2026-08-02 06:48:43 UTC

- reply

With SLIP39, yes

2026-08-02 06:45:07 UTC

- reply

I don't think that's a good lesson since casual users should not have to do that for UX reasons and placing the entropy generation in the hands of casual users will end badly.

2026-08-01 20:22:37 UTC

- reply

Yeah, don't trust, verify, but at some point you have to trust something/somebody. Hardware wallets are the best way to securely store your sats and Trezor simply makes the best ones, they are not amateurs. The 12 years old Trezor One (without any secure element or ARM enclave) is still safe against overwhelming majority of attackers. 🤷‍♂️

2026-08-01 20:09:12 UTC

- reply

Just use Trezor

2026-07-25 20:35:06 UTC

- reply

Democracy?

2026-06-28 17:34:10 UTC

- reply

What was the prompt?

2026-06-28 07:31:23 UTC

- reply

Knotters lying as usual