Coinkite Coldcard cold wallets hacked and millions stolen in ongoing attack

Standard problem of ant small device PRNG, in that often it is used to generate randomness shortly after power on, and with such a short interval that it is possible to simply get all the inputs, and step through each cycle of the PRNG to get all the possible outputs for the first few minutes, and greatly reduce the amount of data that you have to sift through to get a matching key. nothing you can do about it, except that when you start a device from new, you wait at least a day before you even think about even starting to trust the PRNG, as it would have had time to get more entropy available in the pool. Most commonly seen on IOT devices, where many of them, because of underpowered and lowest cost processors, and predictable timing for the device to want to make a random number for say identity or a key, they will often find many use the same small number of keys, and thus they are less than secure. often used as a way to compromise devices, as they often have no security beyond this.
 
Justanotherguybythesea said:
Standard problem of ant small device PRNG, in that often it is used to generate randomness shortly after power on, and with such a short interval that it is possible to simply get all the inputs, and step through each cycle of the PRNG to get all the possible outputs for the first few minutes, and greatly reduce the amount of data that you have to sift through to get a matching key. nothing you can do about it, except that when you start a device from new, you wait at least a day before you even think about even starting to trust the PRNG, as it would have had time to get more entropy available in the pool. Most commonly seen on IOT devices, where many of them, because of underpowered and lowest cost processors, and predictable timing for the device to want to make a random number for say identity or a key, they will often find many use the same small number of keys, and thus they are less than secure. often used as a way to compromise devices, as they often have no security beyond this.
Click to expand...
It also doesn't help when the programmer intentionally disables the hardware RNG path.

Coinkite did this on purpose because they had written their own wrapper around the hardware RNG and wanted to use that instead of MicroPython’s version.

The problem was in how the supporting library (libngu) checked the flag. It used a preprocessor guard of the form #ifndef MICROPY_HW_ENABLE_RNG which only tests whether the macro is defined, not whether its value is actually non-zero (i.e., enabled).

So the far bigger problem belongs to someone who has not been having a great weekend.
 
They were warned about this but chose to ignore it. Nothing fishy here at all.
 
Nothing like stealing the wealth from a Pyramid scheme.

Isnt it ironic that the guy that created didnt make money from Bitcoin up to now, yet other companies has made a fortune from something that they neither invented or owned.

Has anyone else ever watched that Madoff: The Monster of Wallstreet on Netflix. Where he kept getting money from all over, and yet made up his own system with statements etc, telling the people that made huge profits yet they didnt make anything. $64.8 billion total scam. European royalty and aristocrats lost a fortune. Karma really.
 
And the pseudo random number god strikes again.
I'm wondering if the scammers perhaps know something. The number of attacks usually coincide with how well bitcoin is doing.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X