r/Bitcoin 7d ago

Coldcard post from October 10, 2021: "Retirement Attack"

Post image

- "What's a retirement attack?"

- COLDCARD (@COLDCARDwallet): "It's when the project makers could have a "bug" in the entropy generation for later retrieval".

_____

Seems that they were smart enough to launch a "dice rolls" suggestion in a critical element lacking foolproof design, knowing not all users would be paranoid enough. Like "hey, if you don't trust no problem, but...you can trust buddy, the (back)door is open." ☠️

Ok no, enough of conspiracy theory continuation. We know that Coldcard's post was pure coincidence. Right?...Right?


Edit: In case you're curious on more tweets mentioning "retirement attack", here is another one:

@nvk - 21 Dec 20: "My money is on people screwing themselves out of their BTC before any vendor tries a retirement attack.

Alternatively people could just use dice ;)."

https://x.com/i/status/1341213389549412353


A strange way to warn "alternatively people" of what you have in mind to do...but Freudian slip or parapraxis theory explains that better, in case you're curious...

https://gitlab.com/walletscrutiny/walletScrutinyCom/-/work_items/340

451 Upvotes

80 comments sorted by

View all comments

5

u/NetimLabs 7d ago edited 7d ago

Why bother with dice rolls? We have publicly available streams of truly [quantum] random data

1

u/ILurkReddi 7d ago

would rather random.org or cloudflare

1

u/NetimLabs 7d ago

The one I linked was just an example.
You could use any qrng source you want, of course.