4 years ago, I tried to make Coldcard honest
I was greeted with hostility and insults
If NVK merged my pull request, he would have signaled to his customers that he prefers profits over standard security practices in the space
If he reverted back to the GPL license, there would have been incentives to find the random number generator issue before today’s incident