Why would you say this if you thought that the RNG was calling an external library? View quoted note →
Monero Dog
npub1039a...6vh8
Long live southbank
#CharlesDickens - considered the greatest writer of the Victorian era - left school at age 12 to work in a boot-blacking factory when his father John was incarcerated in a debtors' prison.
GM
Sheinbaum is a funny name for a Mexican.
So is Novak.
Dozens of credible reports of #Coldcard users having funds swept off of wallets, going back years.
Many of these people reported the loss, but were blocked, gaslit, ignored etc.
There needs to be a Class Action.
Getting a bit too big for his Size 7 Air Jordans.
View quoted note →
The Security Research organisation #WalletScrutiny were unable to reproduce #Coldcard firmware builds in 2023.
Rather than spending a few minutes to assist with a reproducible build, NVK mobbed them on Stacker News, attempting to trash their reputation with a very obvious torrent of muck-slinging.
It is possible that the firmware on peoples Coldcards does not correspond with the published source code.

Stacker News
Does anyone know why Wallet Scrutiny can't reproduce Coldcard builds? \ stacker news
Wallet Scrutiny claims they can't reproduce builds for the Mk3. nvk says Wallet Scrutiny is either incompetent or malicious. Does anyone know the f...
People moving Bitcoin off of a vulnerable Coldcard seed are exposed to a RBF sniping attack during the time between broadcasting the transaction, and the transaction being mined and added to the blockchain.
This attack can be mitigated:
- Wallets such as Electrum and Sparrow have a setting "Allow RBF / Replace By Fee". This should be set to OFF for extra protection.
- Consider paying a slighter higher fee for the transaction; but not so high that the transaction stands out to potential attackers.
- Consider submitting the transaction privately to a mining pool. This minimises exposuse of the vulnerable public key you are spending from. The MARA mining pool has a service called Slipstream; using this service will prevent your transaction from being more widely broadcast to mempools... but the tradeoff is that you will have to wait for the next MARA block. Also, your transaction will be visable to MARA pool members immediately.
#Coldcard #Coinkite #RBF #RBFATTACK #NVK #COLDCARDSCAM
This! And for the price of small USB stick (although the metal premium metal Samsung ones dissipate heat excellently).
View quoted note →
