@noobvestorCZ Za mě nejhorší UX i UI u IB ze všech běžnějších bank v ČR... když si vezmu, že je to de facto Commerzbank, začne to v tomto směru do sebe zapadat 😆
@hodler_investor Naštěstí Trezor nabízí už dlouho dobu pro ČR Zásilkovnu, takže Franta Novák s fake/temp adresama a poslat do boxu je řešení pro všechny.
@nikkizitkova Jsem jedině pro nezvyšovat daň z nemo a znížit zdanění práce. Já vím, praxe bude zcela opačná, pokud by došlo ke změně, zvedne se oboje 😆
@MProchazka007 Jednotné nízké DPH ok, ale když mě stát míň okrade druhou sazbou, tak jde o sociální podporu? Ten státní newspeak je čím dál zajímavější...
Important note:
If you generated your seed on an affected Coldcard and later moved it to a Trezor, you are still affected. The seed was created with weak randomness on the Coldcard, restoring it elsewhere does not fix that. Please generate a fresh seed on your Trezor and carefully move your funds.
Trezor users: your funds are safe.
The recent Coldcard issue is limited to their own custom firmware and how some of their devices generated randomness. Trezor does not share that code.
We have always mixed multiple independent sources of randomness together (device hardware + host + secure elements on newer models).
We are truly sorry for everyone who has lost bitcoin.
Stay safe.
Read more on how Trezor generates entropy here: https://t.co/Nj6xveBQJk
@618p5@Trezor@grok Air-gap wallets are mostly overhyped. USB wallets don't expose private keys anyway, so switching to QR codes or SD cards doesn't add real security - usually just extra hassle. This bug really shows that it still doesn't solve some of the most crucial problems.
Regarding the Coldcard entropy bug – many folks are explaining what happened but I wanted to take a minute to explain why it may have happened.
It's a disastrous situation and our heart goes out to all the Bitcoiners affected.
Here's a timeline of events:
On July 28 2020: @FoundationHQ announced our first Passport hardware wallet and noted that we were building on Coldcard firmware which at the time was GPLv3 licensed (FOSS license).
On July 30 2020: NVK publicly said he regretted choosing GPL because Coldcard now had a “clone” and that they would change things in future updates. https://t.co/iH4LxH1i3i
On November 18 2020: Coldcard added its MIT + Commons Clause license, prohibiting commercial products substantially derived from the software. https://t.co/OtBGLdeFTH
On January 8, 2021: Coldcard firmware 3.2.1 formally announced, “License changed from GPL to MIT+CC on files for which the GPL doesn’t apply.” CC is the "Commons Clause" license addendum which is "source available" instead of FOSS.
On March 1, 2021: The “First pass w/ libNgU” commit removed the GPL @Trezor-derived crypto libraries and replaced them with libNgU. That same 120-file commit changed seed generation code. libNgU was licensed with a novel “Licensed for Bitcoin Only” license.
On March 17, 2021: Version 4.0.0 announced that all crypto and BIP39 code had been replaced and that the “last remaining GPL code” was removed. https://t.co/40xchCMOMx
https://t.co/UBdezpgvDC
Our best understanding right now is that the entropy bug was collateral damage from this major overhaul of the codebase.
To be clear, this overhaul was not solely about licensing. Coldcard also cited technical goals including adopting Bitcoin Core’s libsecp256k1, faster AES and SHA implementations, and reproducible builds.
But the timeline establishes two things:
(1) Foundation’s launch was the obvious impetus for Coldcard’s licensing change, and
(2) removing the remaining GPL code was an explicit goal of the subsequent v4 rewrite.
We don't know by how much the licensing pressure affected the scope or timeline of the rewrite. All we can determine is that the entropy bug was introduced inside the same 120-file commit that removed the old GPL code dependencies.
@UW_Phoenix Komunitní poznámky jsou největší zlo, co bylo na twitterxku vymyšleno... tedy apoň pro europropagandu. Poslední dobou docela docela dostávají 😆
@MarekVyborny@kducsl@hladikpe@TalirFrantisek Spíš je důležité, co chtějí zaměstnanci obchodů, ne co chcete vy. To absolutně nikoho nezajímá. Já bych byl taky rád, kdybyste radši trávil čas s rodinou, místo setrvalého škodění a nekecám vám do toho.