pull down to refresh
I'm not blaming people for not doing the dice rolls. Most likely, I wouldn't have either. I'm certainly not blaming you for not catching the mistake, although I get why that might be weighing on you.
My point is pretty straightforward: it's not correct to say they did everything right. There were choices made during setup of their devices that both were the wrong choices and could be reasoned to be the wrong choices before hand.
I agree with your point. The problem is that people in influencial positions are saying they're doing everything right! I personally did the roll on my first initialization (and also the later ones) when I was just testing, despite it being optional.
But I seem to remember that at the time I wasn't a fan of it. It felt like a chore that, when taken into the perspective of the literal words "we're taking seeds from each secure element" when in reality that is not the case - goalpost shifting on what is and isn't a secure element, but that is the narrative all around bitcoin ever since block 2 - felt a bit like a tinfoil feature.
In retrospect, it was literally the most important feature. So I this is why I say that we are having a mindset issue. I too bought the bullshit. Fell for it. Didn't even spot a stupid vuln (that arguably is hard to detect, but still.) So when everyone is worried about normies being on bitcoin - something I personally don't even believe they should do unless they have a proper reason to use it as an MoE - then we have a real problem that I do not know how to address.
Yes to all of that
It's a false dichotomy to think either coinkite or the user must be entirely responsible.
It's possible for both to have not done everything they should have. Listing the dice rolls as an option still gave users an opportunity to look into why they might want to do that and they either chose not to look into the option or decided it wasn't worthwhile.