17 years of #Bitcoin Core, animated.
48,700 commits, 800+ contributors, ~3M lines of code, all growing from a single genesis commit.
And the orange strip at the bottom? That's Satoshi ~111k lines, the foundation everything else was built on. 🟠
I spent today reviewing and manually testing the latest
@COLDCARDwallet firmware, v5.6.1, including a code review assisted by Kimi K3.
My tests focused specifically on entropy generation using standard six-sided dice:
- Tested the fairness of my dice using the salt-water method: https://t.co/Tbr2YtdEQJ
- Ran additional fairness tests with https://t.co/s9HfxxOWKm
- Generated a new 24-word mnemonic using 100 dice rolls
- Verified the derived addresses
- Added a passphrase and generated additional addresses
Everything appears solid and to be working as expected. I found no issues in the areas I tested.
100 dice rolls for the seed.
50 more rolls for 12 extra words.
Pick 6 of those as your passphrase.
Do that, and a Coldcard is fine, just like any other hardware wallet, because the device never generated your keys.
https://t.co/uO1RUdwVgm
Watching the BIP110 crowd complain about their fork is getting embarrassing.
Lads, nobody cares. Go activate your fork today, switch the PoW as soon as you can, and move on.
Nobody is going to follow you.
The rest of us have more important things to do.
I am wondering how a company that makes money securing bitcoins, did not run a stupid LLM against their hardware wallet firmware to look for bugs.
Also, why the hell do ColdCards have a fallback insicure element that generates entropy wtf.
The Coldcard seed bug, and the XZ Utils backdoor are two more reminders: open source is excellent in theory, rarely audited in practice.
We trusted. We did not verify.
Mechanic banned from r/Bitcoin for referring to bip110 miner signaling.
The very same people framing individual node operator policy as censorship, are fully censoring any mention of bip110.
That signals two things: hypocrisy and weakness
Tweets like this still make me smile :)
Storing encoded images is one of the least harmful effects of spam.
People like him actually spent #bitcoin to 'buy' an encoded image that isn’t even theirs, and they’re so clueless they flaunt it like a trophy 🤣🤣