Replies (2)

By understanding that every piece of software and hardware is flawed and shouldn't be trusted to be a single point of failure for your life savings.
Ideally, independent research would have led someone to the conclusion that they should not be relying on a device to tell them what their seed words will be. (i.e. generate them for yourself with dice, coins, whatever you have complete control over to validate for yourself - and make sure to do the research on generating seed words from dice, coins, whatever to make sure you're doing it safely). That said, I think it's worth answering this question from the perspective of many of those who DIDN'T get burned by coldcard just because they happened to not like its creator: video from about 50:25 - I know that a hardware wallet should be required and expected to provide great randomness for seeds. But how do you validate that? So, you know what I mean? Like, if there's no way to validate it, then what's the point? What is the point? And so, this is again, if you're learning the wrong lessons, the wrong lesson would be, "Thank God I didn't trust NVK. That guy was a dickhead. You know, pat on the back. I was smart not to trust him and so I'm good." No, that's the wrong lesson. Or, this is, okay, you know, yeah, this is isolated to this one thing, and if you didn't get taken by this one thing, you're good. That's not the lesson. The lesson is, do you actually know that you're good? And how? And I'm sorry, but if you're trusting a hardware wallet, random number generator without seeing like a robust review, I think you're fooling yourself.