The author said the latest update on the website was also inaccurate, claiming that many people had issued certificates and that millions of devices remained vulnerable to man-in-the-middle attacks because of them.
stacksmashing
@ghidraninja
wrld.org
German information technology security researcher
@ghidraninja
· 49.2K
The author wrote that the private key for eMudhra’s revoked intermediate certificate was apparently “4”. They questioned why the root certificate remained trusted, criticized the processes that allowed this to happen and asked why the industry had not noticed sooner.
If there's one hardware wallet I always told people not to trust it's COLDCARD. Not surprised in the slightest by the recent events. (They messed up their RNG in multiple ways, leading to - so far - user losses above $38 million USD.) #COLDCARD #CryptoSecurity #HardwareWallets #Nospecificcountrycodesarementionedinthetweet.