I don't believe that Matt's guide or comments can be in anyway taken to only refer to the bug mentioned below in this note ๐ Nothing about his guide seems to have anything to do with it. Also the "don't dissect my statement" can in no way be reffering to an onscure usb issue. No one could guess such a thing. But the guide does add dice rolls. Hence the bug being spoken of is the entropy bug. Either NVK was using Matt to push users to 4.0.1, NVK thought the entropy bug was fixed with 4.0.1 and willing to let users on 4.0.0 to create low entropy seeds hoping no one would ever find out. I don't see how else this can be taken.
Login to reply
Replies (2)
The bug in 4.0.0 is this which was fixed in 4.0.1. It had nothing to do with the entropy bug that already existed in 4.0.0
// 4.0.0
bool ckcc_vcp_enabled = true;
// 4.0.1
bool ckcc_vcp_enabled; // defaults false

View quoted note →

They were aware of their bug, thought they had it fixed in 4.0.1 and then opted to recklessly take the chance on the numbers.
1. Maybe they thought too few actually generated seeds with 4.0.0
2. Maybe they thought many of them used good pasphrases anyway
3. Maybe they thought most big hodlers already had established wallets and they could weather a few reports of lost funds (and they did)
4. Maybe they thought (as most shysters and criminals do) that they were technically astute and they had this
Strike 3 already but somehow they were allowed to stay at the plate to keep swinging.
Now that this is known to be said by Matt (in the presence of Marty) bullshit has to be ruled on their little Rabbit Hole Recap cry session.