Replies (40)
π
So sorry you are going through this. Wish there was something we could do
Not sure I would trust that open dime either thoughβ¦
kyle-moore
If anyone is looking to sell there cold card q I will buy it for $30
View quoted note →
π«π§‘
Truly sorry to hear that. π
Fuck! Sorry to hear
I don't even know what to think about Coinkite as a company anymore. I really liked my ColdCard and was convinced Novak was the most paranoid person on the planet about security. I don't think that company survives this.
As of last night I don't use ColdCards and will never recommend them to anyone ever again.
Nothing about this is right. Lives were destroyed and all Novak did was essentially say, "I'm sorry".
Yeah, at this point, reading the extent to which Coinkite was owned I wouldn't trust the Blockclock. It is true that the Opendimes generate entropy differently than the other products but the more I look at this thing the more convinced I am that Coinkite is simply unsafe.
what else can he say, though?
Yeah, this is a nightmare scenario for them. As I have said elsewhere, and maintain, the hardware wallet has one job: to protect your seed material during use.
It is not your hardware walletβs job to generate entropy. It is not your hardware walletβs job to resist an attacker long-term with physical access.
But, I accept that my stance is unconventional.
People get into this field with the βdonβt trust, verifyβ mentality, but then they place all their trust in the single most important thing that must not fail. The generation of their seed.
Sorry is an obvious one, followed by some sort of step to try and make things right- probably impossible though. Would have been better if his first response hadn't been to dismiss it.
itβs really hard to even read all of this, let alone go through it.
View quoted note βπ«π
So sorry friend. Loss of words here. π
He didn't even do that.
They're also downplaying/misstating the threat.
I stopped recommending ColdCards a little while ago. Something irked me about NVK's reliance on IP. That's bad philosophy. That's evil.
I'm so sorry. Seedsigner is a good option for next steps. At least you have some left. And you've got yourself.
Pablo, hes been saying plenty for years. He went to war with Foundation because they decided to provide an alternative to his product.
Itβs not what he can say now, itβs would he should have done then (ie foster an ecosystem, something which he couldnβt comprehend)
Now itβs too late.
You might like him, maybe hes a friend, but hes fucked Bitcoiners here who wonβt come back from this and NVK is gonna get ZERO sympathy against that cohort.
Literally Zero.
He said plenty already. Now the chickens come home to roost and people suffer for this guys ego.
I donβt think youβre being unconventional at all. You are, in fact, correct.
A rare post that actually says what I've been saying. I still think the need to sell hardware wallets has caused of what a hardware wallet is supposed to be and how useful it is and is not supposed to be all in the name of sales.
In hindsight, we should push for it to be common practice for devices to warn users that generating keys on device is not guaranteed to be 100% secure and to propose rolling your own entropy.
By the way, even supplying dice rolls to a device is not good enough. If you can take that entropy and turn it into 11 words yourself then when the device gives you your 12 seed words, at least you can compare notes and know that the computer is using the entropy you provided.
thank you all its just to much at the moment i will try to sleep again and reassess tomorrow
Mine havenβt been hacked yet but they will be swept either tonight or this weekend
Thank you! I hope that more people will adopt the mindset that they really do need to be in charge of their own entropy production. Everything depends on that.
Or back up even further if they had left seed signer alone. Karma is a btch they say.
The ColdCard problem is bad entropy generation.
The OpenDIME doesnβt even try to generate entropy. It leaves that entirely up to you.
So this current problem does not apply to the OpenDIME. You could choose not to use it for other reasons, but itβs not vulnerable to the same problem.
Fair! Thank you for the honest answer. Satscard the same?
Regardless I do not think I can trust any product from coinkite anymore
The lesson of this whole debacle is that the only way to KNOW that no one else has your seed is to generate it yourself.
Therefore, any device that does not allow you to supply your own seed is unsuitable for use. Full stop.
So I would NEVER put serious amounts of coin secured by Bitkey, Ballet, Satscard, etc. because I canβt verify that their seed material has not been compromised.
I admit that my opinion in this matter is a bit of an outlier here.
Bro, not Ballet! Come on man! Donβt bring Ballet into this now!
What? Ballet, Bitkey, Satscardβ¦ whatβs the difference?
All of them generate seed material that you cannot observe nor override. So from your perspective, theyβre all vulnerable.
π« Iβm sorry for your loss π₯
Godspeed brother. Iβve been in a daze since found my wallet liquidated last night..
Dude I can relate.
Ego. Ultimately led to his downfall. The signs were always there though.
Fucks sake. Man, hope it turned out well enough!
Is activity on nostr tracks with the downfall.
I can't thank myself enough for getting started. Despite the economic situation, I'm so happy to see β¬78,000 in returns from a β¬15,000 short-term investment with pjtradinghub. His videos are top-notch and highly educational, giving you real insights to achieve your goals and come out from debt! For a guide to a professional trader, I highly recommend everyone check out his Telegram π "pjtradinghub"
Full nightmare mode π
Brother talk to me if i can help you in some way.
i have one available and though about generating a key with it and importing it to the Q.
