3 ms·
One of the noteworthy things changed in this edition was the removal of instructions to use bx from libbitcoin to generate keys, since it only uses a fixed 32 b
by lrvick 2y ago
One of the noteworthy things changed in this edition was the removal of instructions to use bx from libbitcoin to generate keys, since it only uses a fixed 32 bits of entropy seeded from system time by design no matter how many bits you request.
The bx maintainer Eric Voskull (who added these instructions to the book in the first place) insisted this was not a bug.
His side of the story is he crippled entropy intentionally, expecting users would read the related source and doc changes, and instinctively understand this as advice to switch to using dice.
This choice has resulted in the loss of millions of dollars in value across many chains.
Interpret that as you will.
It is possibly the first example of a supply chain attack targeting a book.
Details: https://milksad.info https://milksad.info