DaPangDun
@dapangdun
Joined September 2020
0 Following 0 Followers
这篇推文提出了一个新的可能：
Coldcard的固件问题可能是“监守自盗”！
核心论据是：
漏洞依赖的外部库libngu由GitHub账号 @switck 编写，通过GPG签名验证， @switck 的提交与Coinkite联合创始人/CTO Peter Gray（X账号 @DocHex ）的个人密钥匹配（同一人）
现在没有定论，但是如果真是这样，那么会是一个极其无语的事情！
#BTC#
Show more
I did my own investigation because I obviously don't trust them.
What I found is that the external dependency of the firmware with the critical vulnerability hidden in it was written by CoinKite's CTO @DocHex pretending to be someone else.
All of the following can be verified:
Show more
