Not sure if this is it.
I watched the video and the danger he points out is not the ColdCard's onboard entropy generation, but the ability to create a wallet using dice rolls alone and people creating wallets with too low an amout of dice rolls (less than 50). His problem is that the UI doesn't prevent people from creating wallets with that few dice rolls, and that it can appear that the dice rolls are being added to onboard RNG, when that is not the case when the user selects dice only.
In fact, his advice is the same as what got us into this mess: "Just trust the onboard RNG if you don't know what you're doing. Maybe add a passphrase, but even that can be dangerous because the more you complicate your setup, the more likely you will forget how to access your funds and lose all your money."
From what I could tell, he had no warning in the video about the onboard RNG for creating adequate entropy whatsoever.
Login to reply
Replies (3)
No. That was the video presenter's opinion at the time, but the latest ColdCard vulnerability has proven him wrong.
The issue we know now is that the onboard RNG was also not sufficient. People just believed it was at the time, including this video presenter, and advised users against complicating their setup by adding their own dice rolls or adding a passphrase they might lose.
The speed with which you responded makes me think you're a bot, but replying was still necessary to keep others from being confused.
given away by the use of em dashes in a reply ๐
That too, but the response was immediate., A human wouldn't have had enough time to read it.