BTW, they are giving huge discounts now on all their Coldcard devices, does anyone want to buy it?
I wouldn't call 10% a huge discount. Whoever still buys that thing can't be helped.
I dunno. The hardware is still, in my opinion and with limited analysis, the 'best in class'. In my (somewhat limited) view, they had a lot of terrific ideas about security, and a knack for making the UI quite intuitive. The documentation is fantastic, and the source code is available. I just wouldn't be super confident that the binary actually represents the totality of the source code and it could be the case that they have some 'special patches'...I doubt that very many people availed of the feature of being able to build it oneself vs. just scoring one of Coinkit's release binaries.
Actually, I had some suspicions based on the observation that the product was almost 'too good.' At least based on the common understanding of the size of their development team.
After a thorough analysis of their hardware, some care in sourcing, and a well structured and well know open source development team, the kit would be pretty compelling to me. At least the Q.
ColdCard just caused the most catastrophic loss in the entire history of Bitcoin hardware wallets due to shockingly shoddy code, and the firmware fix for that caused some people's devices to brick, and the CEO spent the last 2 weeks deleting old posts on twitter as the company basically went into radio silence.... but other than that, Mrs. Lincoln, how was the play?
There's nothing special about ColdCard's hardware. It's cheap plastic. And some aspects of the design weren't even thought through, like the fact that the camera for the QR reader faces up, so you can't even see the screen while you try to scan a QR code. What the whut?
If you already own one and you want to accept the risks that come with staying with Coinkite... do what you think is best. Self custody comes with self-responsibility, so be honest with yourself about the risks. I have trouble imagining that company will even exist in a year, and there's no way I'd ever trust them. I wouldn't trust their hardware. I wouldn't trust their code. I wouldn't trust anything they say.
