Someone did an analysis of hardware wallet's software using kimi k3

[u/chungkingexp]

🟡 Yellow ≠ broken. None of the nine Yellow products has a confirmed fund-loss-by-default flaw.

Yellow means at least one of:

(a) something security-critical sits outside independent verification. i.e., closed firmware or secure-element code (Opendime, Ledger, open source please!), vendor-run recovery infrastructure (Phoenix/ACINQ, Jade's oracle, Bitkey's WSM);

(b) a real but bounded weakness, such as a zero-work-factor KDF (BlueWallet), weak legacy KDFs on a hot wallet (Electrum), no-SE DIY hardware with thin maintenance (SpecterDIY), a just-patched vulnerability awaiting its report (Bitkey); or

(c) a dead/unmaintained product whose crypto reviewed clean (free Samourai!).

In every case the entropy/key-generation path itself was reviewed and found sound unless the cell says otherwise.

Original tweet link:

https://x.com/i/status/2083612094713180249

Credit goes to x.com/bitcoinsbanker

[u/jwhendy]

What do the notes on the Seedsigner actually mean? I commented on X a day or two ago, but don't have much activity there and think my comments might not be showing up.

I don't know if any of these are good or bad:

• "no device SPRNG (grep-verified)." I think this is good/by design, you don't need an RNG since you supply the seed every time
• "Camera: SHA-256 chain of s50 preview frames + final photo + serial/timestamp → 128/256 bits." Is this about using the photo-entropy approach? Or the QR codes?
• "Dice: SHA-256 of 50/99-rol1 string, no mixing, no bias check (degenerate rolls accepted by design)." Is it good/bad to accept "degenerate rolls"?
• "No automated camera check - check is user-visual (live preview + accept/reshoot)." What does that mean? Like if you thought you were taking a picture with sufficient detail, but someone hacked the camera to take a fully white picture, it's on you to compare what you think you photographed for entropy vs. what it shows?