pull down to refresh
Nvk's attitude has a lot to do with this vulnerability because its a governance fail.
His ego, attitude and cronies doing his bidding are the reason that security researchers and others stayed as far away as possible.
He is a ceo of a company providing most critical services to the user and as such has responsibilities that dont include bullying, alienating and terrorizing everyone else in this space. And using his buddies (who are absolutely to blame for tolerating this fuckery for so long) to influence events, prop him up, give him even more visibility and make the blast radius of this shitshow even bigger.
his behavior is not a shock, the shitshow he was doing for years is not news to people around him yet american bitcoin mafia carried him as the second coming of jesus.
This was a complete failure and exposes the reality of bitcoin ecosystem - it is as rotten as anything else if not worse.
Exactly!
NVK talks a lot about AI one would think an AI system must of reviewed the code but just missed it.
But Coinkite is destroyed now as a company. All the good will and trust they built over the years is all gone in a few days. No one is coming to bail them out and thus the market corrects accordingly. They go bankrupt new companies will come to fill their void and learn from their mistakes.
You are correct. The dunking always comes back. NVK has set himself up for this with his whole attitude and persona he puts forward.
NVK's attitude really has nothing to do with this vulnerability. I mean... maybe you could say he's arrogant and should have been more diligent but I would say that this is just a mistake. I don't think NVK is negligent in general. Maybe in this case but not in general. That said, I have never bought any of their products and probably never will.
To me the mistake is mostly not making it very clear that trusting hardware entropy is a major risk. Everyone should be doing dice rolls, 24 seed words, and pass phrases at least. If I had this kind of bitcoin in my stash I'd be doing mulit-sig as well.
None of that is an excuse but the dunking on Coinkite kinda misses the point to me. This will not be the last even like this and other projects/companies will be affected.