The code wouldn't compile, so the Coldcard dev DISABLED THE HARDWARE RNG (Random Number Generation) to make the error go away.
"From here, I assume in a bout of frustration, he set
Sometimes when developers are flailing, they’ll try random things to see if it helps. Setting
"Simply put: the firmware change overwrites functions that aren’t used when creating a new wallet while, as a side effect of including the python method overrides, turns off the hardware RNG usage in every case, instead using a very weak random number generator.
The final bit of evidence is the commit message itself. It was simply the message “runs.”
Developers, if you are ever in this scenario, please stop. Whatever you’re getting paid is not worth the devastation you might potentially cause for others.
Do not ship code you do not understand."
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
"From here, I assume in a bout of frustration, he set
MICROPY_HW_ENABLE_RNG to 0, which would have resolved the compiler error.Sometimes when developers are flailing, they’ll try random things to see if it helps. Setting
MICROPY_HW_ENABLE_RNG to 0 would have made the compiler error go away ***for the wrong reason***."
"The compiler error was begging the programmer to reconsider his logic. Instead of that happening, the compiler error was just silenced. The compiler was giving the developer one last chance to reconsider what he was about to do, but the alarm was ignored and silenced.
Now everything is lining up. It looks like the developer tried to override the variable, but ran into conflicting definitions. When confronted with a “duplicate symbol” error, tried changing random things to get the code to run.
He discovered that changing MICROPY_HW_ENABLE_RNG` to 0 made it compile. He probably had no idea why but came up with a theory.""Simply put: the firmware change overwrites functions that aren’t used when creating a new wallet while, as a side effect of including the python method overrides, turns off the hardware RNG usage in every case, instead using a very weak random number generator.
The final bit of evidence is the commit message itself. It was simply the message “runs.”
Developers, if you are ever in this scenario, please stop. Whatever you’re getting paid is not worth the devastation you might potentially cause for others.
Do not ship code you do not understand."
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
🤬4😁1😭1
In US data over the past decade, a tenth of men accounted for 60% of female sexual partnerships.
The obvious problem is that most women will not be able to have a long-term relationship with these few men and so end up single. 3/5
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
The obvious problem is that most women will not be able to have a long-term relationship with these few men and so end up single. 3/5
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
💯2🥰1
A naked guy jumped off the Brooklyn Bridge and somehow lived
Man climbed all the way up the north tower, planted a bunch of flags like he was claiming the place, then got fully naked in front of everyone watching below.
Cops came to talk him down. He looked at them and just sent it straight into the East River.
Here's the kicker: you watch this entire circus and figure there's no way this guy is stable... then the hospital goes and lists him in stable condition
Peak New York, and nobody even knows what the flags said.
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
Man climbed all the way up the north tower, planted a bunch of flags like he was claiming the place, then got fully naked in front of everyone watching below.
Cops came to talk him down. He looked at them and just sent it straight into the East River.
Here's the kicker: you watch this entire circus and figure there's no way this guy is stable... then the hospital goes and lists him in stable condition
Peak New York, and nobody even knows what the flags said.
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
🫡6
Media is too big
VIEW IN TELEGRAM
They’re selling US ALL the fairy tale that 48,000 already “voluntarily” went back to Morocco!
Meanwhile, illegal invaders are jumping out of military trucks mid-convoy and bolting into the hills to hide.
60,000 poured in and now we’re supposed to clap for the press releases?
I don't believe Sánchez's theater for a second!
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
Meanwhile, illegal invaders are jumping out of military trucks mid-convoy and bolting into the hills to hide.
60,000 poured in and now we’re supposed to clap for the press releases?
I don't believe Sánchez's theater for a second!
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
💯5👀2
This media is not supported in your browser
VIEW IN TELEGRAM
A huge warehouse blaze just tore through Shandong, China.
Officials say no casualties so far, but crews are still fighting the flames at a major supply-chain site!
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
Officials say no casualties so far, but crews are still fighting the flames at a major supply-chain site!
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
Weak random number generation is THE most obvious and common problem in cryptography products, since the dawn of cryptography
So obvious, so common
Incredible that many of these were vulnerable to this most obvious problem for years before word got out
Really no one looks at open source code, even if they steal it
Humans just refuse
Huge W for AI — Finally something will be doing these most basic checks for the most common vulnerabilities
🄳🄾🄾🄼🄿🄾🅂🅃🄸🄽🄶
So obvious, so common
Incredible that many of these were vulnerable to this most obvious problem for years before word got out
Really no one looks at open source code, even if they steal it
Humans just refuse
Huge W for AI — Finally something will be doing these most basic checks for the most common vulnerabilities
🄳🄾🄾🄼🄿🄾🅂🅃🄸🄽🄶
💯3
Media is too big
VIEW IN TELEGRAM
Trans activists & doctors tell families the lie that if they don’t transition their son or daughter, their child will k—ll themselves.
Perhaps what they should be telling parents is that they may be the ones who end up dead from m—rder.
Order my book:
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
Perhaps what they should be telling parents is that they may be the ones who end up dead from m—rder.
Order my book:
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
💯1
🥰3
This media is not supported in your browser
VIEW IN TELEGRAM
South Africa is the only country that built nuclear weapons and then deliberately destroyed them before a new demographic majority took power.
By 1989, they had 6 assembled warheads and a working intermediate range missile that also launched satellites, all developed alone under total embargo.
>1990: de Klerk ordered the arsenal dismantled
>1991: every gram of enriched uranium was melted down
1994: the missile program was cancelled
It was all finished before the ANC inherited the state.
France and the UK will sooner or later have to face similar difficult decisions.
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
By 1989, they had 6 assembled warheads and a working intermediate range missile that also launched satellites, all developed alone under total embargo.
>1990: de Klerk ordered the arsenal dismantled
>1991: every gram of enriched uranium was melted down
1994: the missile program was cancelled
It was all finished before the ANC inherited the state.
France and the UK will sooner or later have to face similar difficult decisions.
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
💯10🔥3
Media is too big
VIEW IN TELEGRAM
HEARTBREAKING.
The Coldcard attackers largest wallet address.
562 bitcoin.
Look at all the people who have been stolen from.
We must pray for all of them.
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
The Coldcard attackers largest wallet address.
562 bitcoin.
Look at all the people who have been stolen from.
We must pray for all of them.
🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶
💔8