Your signal. Your price.
Developer GG built a MiniScript fork of SeedSigner along with a standalone bridge tool for Liana. The bridge allows users to scan QR codes and load file based PSBTs without requiring a complete rewrite of Liana desktop software.
Seed argues that users who manually generated private keys by rolling dice were unaffected by the Coldcard random number generator exploit. Thomas Susanka cautions that manual dice rolls introduce human error, citing instances of non-technical users entering repetitive numbers.
Thomas Susanka argues that excessive security measures destroy usability, which ultimately degrades actual security by confusing users. Conversely, Seed suggests making self-custody intentionally harder to force users to understand their key-generation processes.
Thomas Susanka and Seed advocate for multi-vendor multi-signature setups to protect assets against vendor-specific bugs. Thomas Susanka emphasizes that using multiple devices from the same manufacturer fails to mitigate systemic software vulnerabilities.
Drew Fisher and Zach Herbert recommend using burner emails, PO boxes, or buying hardware with cash at conferences to avoid tracking. Seed suggests local Bitcoin meetup organizers act as purchasing buffers by bulk-ordering devices for their members.
The Coinkite founder NVK faced backlash and deletion of tweets following a major Cold Card vulnerability. Keon notes NVK was promptly removed from the Open Sats board after historically attacking competitors like Foundation and SeedSigner.
Orange Surf recommends that users who generated seeds via dice rolls verify them on a separate device, such as SeedSigner. Using a minimum of 100 manual dice rolls provides strong security even on affected hardware.
SeedSigner released version 0.87 with BBQR PSBT coding, a feature NVK publicly opposed, but included due to contributions from 20 different developers.