TaxSlave

Anyone want to criticize this dice roll method from Blockstream? #bitcoin #asknostr
https://help.blockstream.com/blockstream-jade/add-more-security-functionality/create-a-recovery-phrase-using-dice

2026-08-09 16:42:49 GMT

- reply

@nprofile…vk44 @npub19ca…qj29

2026-08-07 18:46:00 GMT

Bitcoin’s “quick do XYZ or lose your funds” is not sustainable

2026-08-02 23:17:50 GMT

- reply

Imagine you’re @nprofile…wttc and you discover this “bug” before the “hack”. You realize you just fucked up years of seed generation and your business is dead. What do you do?
A) Do nothing, keep selling devices for as long as possible
B) Exploit the bug yourself
C) ???

2026-08-02 23:00:55 GMT

- reply

“Wizard-level developer” lol
Potential exit scammer

2026-08-02 20:19:20 GMT

- reply

Overall good idea. But Imagine the panic if he moves this himself & claims it was hacked

2026-08-02 20:10:09 GMT

- reply

“Believe none of what you hear and half of what you see”

2026-08-02 20:07:35 GMT

- reply

No one should care what’s been “Confirmed by Coinkite” at this point. Worthless.

2026-08-02 17:31:07 GMT

- reply

https://seedsticks.org/

2026-08-02 17:29:47 GMT

- reply

Sorry for your loss

2026-08-02 15:45:02 GMT

- reply

@nprofile…vysa when refunds?

2026-08-02 15:21:45 GMT

- reply

Fair point. I’m thinking @NVK deserves most of the blame for being a scammer & selling a product that didn’t function as advertised for years vs a podcaster making a recommendation

2026-08-02 14:32:38 GMT

- reply

Can’t rule out this “bug” being intentional

2026-08-02 14:29:00 GMT

- reply

Do you reallly expect podcasters to audit the code and find bugs?

2026-08-02 04:15:08 GMT

- reply

https://github.com/Coldcard/firmware/blob/621e808712464688584fdffad9eba132cc7c27cd/shared/seed.py#L276-L332

2026-08-02 04:02:05 GMT

- reply

wtf

2026-08-01 20:31:24 GMT

- reply

Thanks again. Unfortunately the TRNG + Dice method cannot be reproduced / verified in the same way that Dice Only can.
From CC website:
COLDCARD TRNGs Only: This method involves the most trust, as it is using the hardware of the COLDCARD to generate entropy (randomness) for your seed. This method is not reproducible, is low risk to users, and protects the user from any possible mistakes.
COLDCARD TRNGs + Dice: This method can be considered the middle ground as far as trust is concerned. It still uses the COLDCARD hardware to generate random data, but now adds in entropy that you can create via dice rolls. This method is not reproducible, and is low risk to users. Although not reproducible and involving some trust, it is minimized and users cannot produce worse entropy than using the COLDCARD's TRNGs only method.
Dice Only: This method can remove all trust in the COLDCARD's hardware, as all of your entropy is produced by your dice rolls. This method is fully reproducible using the Verifying Dice Roll Math document. However, if warnings are not heeded, it is possible to generate seeds that will be stolen immediately.
Still solid overall?

2026-08-01 19:55:02 GMT

- reply

Appreciate you. Since the RNG did not function as expected, one might wonder if the ‘Add Dice Rolls’ feature actually functions as expected. Any known verification or way to verify?

2026-08-01 19:11:42 GMT

- reply

Seed derived from CC’s RNG + 100 dice rolls. Move or don’t move?

2026-08-01 19:03:00 GMT

- reply

Anyone else waiting for all the @nprofile…h7k7 funded podcasters to defend this incompetence ?

2026-08-01 03:13:17 GMT

- reply

The code was open source and the code was the issue

2026-04-24 18:06:21 GMT

- reply

This dude sucks. 0/10