{"id":7554,"date":"2026-08-04T22:40:32","date_gmt":"2026-08-04T19:40:32","guid":{"rendered":"https:\/\/fxknews.com\/?p=7554"},"modified":"2026-08-04T22:41:53","modified_gmt":"2026-08-04T19:41:53","slug":"coldcard-bitcoin-acigi-ile-yasanan-sorun-ve-soguk-cuzdanlarin-guvenilirligi","status":"publish","type":"post","link":"https:\/\/fxknews.com\/?p=7554","title":{"rendered":"Coldcard Bitcoin A\u00e7\u0131\u011f\u0131 ile Ya\u015fanan Sorun Ve So\u011fuk C\u00fczdanlar\u0131n G\u00fcvenilirli\u011fi"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Coldcard c\u00fczdanlar\u0131ndaki bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131, Bitcoin sahiplerine 100 milyon dolardan fazla zarar verdi ve zarlar\u0131n g\u00fcvenilir olup olmad\u0131\u011f\u0131na dair eski bir tart\u0131\u015fmay\u0131 yeniden alevlendirdi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00d6zetle:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Bir yaz\u0131l\u0131m hatas\u0131 nedeniyle Coldcard c\u00fczdanlar\u0131, tohum de\u011ferlerini donan\u0131m \u00e7ipi yerine yaz\u0131l\u0131m tabanl\u0131 bir s\u00f6zde rastgele say\u0131 \u00fcreteci kullanarak olu\u015fturuyordu.<\/li>\n\n\n\n<li>Bu hata, eski modellerde arama alan\u0131n\u0131 128 bitten yakla\u015f\u0131k 40 bite kadar k\u00fc\u00e7\u00fcltm\u00fc\u015ft\u00fc.<\/li>\n\n\n\n<li>\u0130\u015fte t\u00fcm bunlar\u0131n anlam\u0131 ve 130 milyon dolardan fazla Bitcoin&#8217;in \u00e7al\u0131nmas\u0131na nas\u0131l yol a\u00e7t\u0131\u011f\u0131.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Birileri, eri\u015filememesi gereken Bitcoin c\u00fczdanlar\u0131n\u0131 bo\u015falt\u0131yor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kripto paralar, Kanadal\u0131 \u00fcretici Coinkite&#8217;\u0131n donan\u0131m c\u00fczdanlar\u0131 olan Coldcard cihazlar\u0131nda saklan\u0131yordu; bu cihazlar internete asla ba\u011flanm\u0131yordu. Kimlik av\u0131 ba\u011flant\u0131s\u0131 yoktu. K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m yoktu. \u00c7al\u0131nm\u0131\u015f bir diz\u00fcst\u00fc bilgisayar da yoktu. Sald\u0131rganlar sadece \u00f6zel anahtarlar\u0131n ne oldu\u011funu \u00e7\u00f6zd\u00fcler.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Galaxy Research, \u00fc\u00e7 teyit edilmi\u015f dalgada 1.596 BTC&#8217;den fazla \u00e7al\u0131nan paran\u0131n izini s\u00fcrd\u00fc ve d\u00f6rd\u00fcnc\u00fc bir dalgan\u0131n da toplam miktar\u0131 yakla\u015f\u0131k 2.055 BTC&#8217;ye (mevcut fiyatlarla yakla\u015f\u0131k 130 milyon dolar) \u00e7\u0131karaca\u011f\u0131ndan \u015f\u00fcpheleniliyor. Bir sald\u0131r\u0131da 41 dakika i\u00e7inde 70 milyon dolar \u00e7al\u0131nd\u0131. Coinkite, en az 15 ayr\u0131 sald\u0131rgan\u0131n bu i\u015fe dahil oldu\u011funu s\u00f6yl\u00fcyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u015eirket, 1 A\u011fustos&#8217;ta ya\u015fanan sorunlar\u0131 a\u00e7\u0131klayan teknik bir bilgilendirme belgesi yay\u0131nlad\u0131 . Bu, al\u0131\u015f\u0131lmad\u0131k derecede a\u00e7\u0131k s\u00f6zl\u00fc bir belge ve k\u0131saca \u00f6zetlemek gerekirse, c\u00fczdan sekiz y\u0131l boyunca kimse fark etmeden hileli zarlar at\u0131yordu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">S\u0131f\u0131r hala bir \u015feydir.<br>2021&#8217;de Coinkite, Coldcard&#8217;\u0131n kriptografisini Bitcoin Core&#8217;un da kulland\u0131\u011f\u0131 libsecp256k1 k\u00fct\u00fcphanesine ta\u015f\u0131d\u0131. Do\u011fru bir karard\u0131. Ancak entegrasyon a\u015famas\u0131nda i\u015fler ters gitti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu ge\u00e7i\u015f i\u015flemi, tohum \u00fcretimini Coldcard&#8217;\u0131n kendi donan\u0131m rastgele say\u0131 \u00fcretecisinden uzakla\u015ft\u0131rarak MicroPython&#8217;\u0131n yaz\u0131l\u0131m yedekleme mekanizmas\u0131na, yani hi\u00e7 rastgele say\u0131 \u00fcreteci bulunmayan cihazlar i\u00e7in geli\u015ftirilmi\u015f Yasmarang adl\u0131 k\u00fc\u00e7\u00fck bir algoritmaya y\u00f6nlendirdi.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">\ud83d\udea8LOSSES FROM COLDCARD HACK EXCEED $100M <br><br>High confidence 1,596 BTC has been stolen from ~7300 addresses across 3 confirmed waves + more 14 smaller incidents. <br><br>If we add suspected (but unconfirmed), the total balloons to $130m (2k BTC).<br><br>More in the thread below \ud83d\udc47 <a href=\"https:\/\/t.co\/RAl3ib67qa\">pic.twitter.com\/RAl3ib67qa<\/a><\/p>&mdash; Galaxy Research (@glxyresearch) <a href=\"https:\/\/x.com\/glxyresearch\/status\/2084411904924045370?ref_src=twsrc%5Etfw\">August 3, 2026<\/a><\/blockquote><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Coldcard&#8217;da rastgelelik \u00e7ipi var. Art\u0131k bu \u00e7ipe ihtiya\u00e7 duyulmuyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sebebi inan\u0131lmas\u0131 g\u00fc\u00e7 derecede k\u00fc\u00e7\u00fck. Bir derleme koruyucusu, bir ayar\u0131n a\u00e7\u0131k olup olmad\u0131\u011f\u0131n\u0131 de\u011fil, var olup olmad\u0131\u011f\u0131n\u0131 kontrol eden <code>#ifndef<\/code> ifadesini kulland\u0131. Coinkite bu ayar\u0131 s\u0131f\u0131r olarak tan\u0131mlam\u0131\u015ft\u0131, yani &#8220;kapal\u0131&#8221;. S\u0131f\u0131r hala tan\u0131ml\u0131 say\u0131ld\u0131\u011f\u0131 i\u00e7in g\u00fcvenlik kontrol\u00fc ge\u00e7ti ve derleme tamamland\u0131. Fonksiyonun her iki s\u00fcr\u00fcm\u00fcn\u00fcn de imzalar\u0131 ayn\u0131yd\u0131, bu y\u00fczden hi\u00e7bir \u015fey yanl\u0131\u015f g\u00f6r\u00fcnm\u00fcyordu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Coinkite, &#8220;COLDCARD&#8217;daki rastgeleli\u011fin b\u00fcy\u00fck k\u0131sm\u0131, asl\u0131nda kaynak kod taban\u0131nda oldu\u011funu bilmedi\u011fim bir s\u00f6zde rastgele say\u0131 \u00fcreteci (PRNG) yaz\u0131l\u0131m\u0131ndan geliyordu,&#8221; diye yazd\u0131. Bu yaz\u0131l\u0131m, rastgele g\u00f6r\u00fcnen ancak ba\u015flang\u0131\u00e7 \u200b\u200bde\u011ferinden sabit bir form\u00fcl\u00fc izleyen say\u0131lar \u00fcretir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tarife her seferinde ayn\u0131 ba\u015flang\u0131\u00e7 \u200b\u200bde\u011ferini verirseniz, ayn\u0131 sonucu al\u0131rs\u0131n\u0131z.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4.0.1 ile 4.1.9 aras\u0131ndaki bellenim s\u00fcr\u00fcmlerini \u00e7al\u0131\u015ft\u0131ran Mk2 ve Mk3 cihazlarda, bu ba\u015flang\u0131\u00e7 \u200b\u200bde\u011feri \u00e7ipin seri numaras\u0131ndan ve saatinden geliyordu. Coinkite, ortaya \u00e7\u0131kan arama alan\u0131n\u0131 yakla\u015f\u0131k 40 bit olarak tahmin ediyor. Daha yeni modeller biraz g\u00fcvenli eleman entropisi ekleyerek bunu yakla\u015f\u0131k 72 bite \u00e7\u0131kar\u0131yor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hedef olan 128 de \u00f6yle de\u011fil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Aradaki fark g\u00f6r\u00fcnd\u00fc\u011f\u00fcnden daha \u00f6nemlidir. Bitler \u00fcslerdir. 128 bitlik bir arama alan\u0131, g\u00f6zlemlenebilir evrendeki atom say\u0131s\u0131ndan daha fazla kombinasyon bar\u0131nd\u0131r\u0131r ve kimse bunu aram\u0131yor. K\u0131rk bit yakla\u015f\u0131k bir trilyondur; bu say\u0131, iyi bir diz\u00fcst\u00fc bilgisayar\u0131n i\u015fleyebilece\u011fi bir rakamd\u0131r. Kaybetti\u011finiz her bit, i\u015fi yar\u0131ya indirir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Block&#8217;un kendi analizini yay\u0131nlayan m\u00fchendislik ekibi , yeni cihazlar\u0131n etkili g\u00fcvenli eleman arama alan\u0131n\u0131 2^32 aday olarak belirledi ve ortalama olarak 2^31 deneme yap\u0131ld\u0131\u011f\u0131n\u0131 belirtti. Eski kartlar i\u00e7in de\u011ferlendirmeleri daha net: bilinen bir cihaz kimli\u011fi, zamanlay\u0131c\u0131 durumu ve arama ge\u00e7mi\u015fi i\u00e7in c\u00fczdan olu\u015fturma i\u015flemi kesindir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Deterministik ise rastgeleli\u011fin tam tersidir ve bu da kriptografi i\u00e7in hayati \u00f6nem ta\u015f\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Zay\u0131f&#8221; de\u011fil. Tahmin edilebilir.<br>Coinkite, sorunun bir makine taraf\u0131ndan ke\u015ffedildi\u011finden \u015f\u00fcpheleniyor. \u015eirket, &#8220;Birinin yapay zeka kullanarak \u00fcr\u00fcn yaz\u0131l\u0131m\u0131m\u0131z\u0131n \u00f6nceki s\u00fcr\u00fcmlerini inceledi\u011fini ve bu soruna rastlad\u0131\u011f\u0131n\u0131 varsaymak zorunday\u0131z&#8221; diye yazd\u0131 ve yak\u0131n zamanda ayn\u0131 kod \u00fczerinde mevcut en iyi yapay zeka modellerinden birini \u00e7al\u0131\u015ft\u0131rd\u0131klar\u0131n\u0131 ve hi\u00e7bir \u015fey bulamad\u0131klar\u0131n\u0131 ekledi. &#8220;Hem sald\u0131rganlar hem de savunucular ayn\u0131 yapay zeka ara\u00e7lar\u0131na sahip, ancak bug\u00fcn bu ara\u00e7lar bize yard\u0131mc\u0131 olmad\u0131, sadece k\u00f6t\u00fc adamlara yard\u0131mc\u0131 oldu.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Etkilenen t\u00fcm modeller i\u00e7in d\u00fczeltilmi\u015f yaz\u0131l\u0131m yay\u0131nland\u0131. Mevcut kurtarma anahtarlar\u0131n\u0131 onarm\u0131yor; bu c\u00fczdanlar\u0131n yeniden olu\u015fturulmas\u0131 ve fonlar\u0131n ta\u015f\u0131nmas\u0131 gerekiyor. Decrypt, bu t\u00fcr bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 sonras\u0131nda fiziksel olarak izole edilmi\u015f depolaman\u0131n nas\u0131l de\u011fi\u015fti\u011fini ve kay\u0131plar\u0131n 114 milyon dolar\u0131 nas\u0131l a\u015ft\u0131\u011f\u0131n\u0131 ele ald\u0131 .<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Entropi asl\u0131nda nedir?<br>Entropi, bir sald\u0131rgan\u0131n ne kadar az \u015fey bildi\u011finin \u00f6l\u00e7\u00fcs\u00fcd\u00fcr.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ba\u015fka bir deyi\u015fle, bu temelde bitlerle say\u0131lan bir belirsizliktir. Bir bit, bir madeni para at\u0131\u015f\u0131na e\u015fittir: iki sonu\u00e7 ve tahmin eden ki\u015fi bunu yar\u0131 yar\u0131ya do\u011fru tahmin eder. On bit, 1024 sonu\u00e7 demektir. Her bit, tahmin edenin i\u015f y\u00fck\u00fcn\u00fc ikiye katlar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bitcoin c\u00fczdan\u0131, gizli tutulan \u00e7ok b\u00fcy\u00fck bir say\u0131d\u0131r. \u0130nsanlar\u0131n para g\u00f6nderdi\u011fi adres, bu say\u0131dan matematiksel olarak t\u00fcretilir ve t\u00fcretme i\u015flemi yaln\u0131zca tek y\u00f6nl\u00fcd\u00fcr; anahtardan adrese gidebilirsiniz, ancak asla tersine gidemezsiniz.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dolay\u0131s\u0131yla her c\u00fczdan\u0131n g\u00fcvenli\u011fi tek bir soruya dayan\u0131r: Bir sald\u0131rgan\u0131n ka\u00e7 rakam\u0131 denemesi gerekir?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">E\u011fer say\u0131 128 bit entropiyle se\u00e7ilmi\u015fse, cevap &#8220;fizi\u011fin izin verdi\u011finden daha fazla&#8221;d\u0131r. E\u011fer 40 bit entropiyle se\u00e7ilmi\u015fse, cevap &#8220;bana biraz zaman verin&#8221;dir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu , kuantum hesaplama tehdidini tart\u0131\u015fmaya de\u011fer k\u0131lan ayn\u0131 \u00f6zelliktir : bir kuantum makinesi, anahtar\u0131 adrese ba\u011flayan matemati\u011fe sald\u0131r\u0131r. Coldcard hatas\u0131n\u0131n buna hi\u00e7 ihtiyac\u0131 olmad\u0131. Matematik devreye girmeden \u00f6nce anahtarlar\u0131 tahmin edilebilir hale getirdi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0130\u015fte burada terminoloji biraz karma\u015f\u0131kla\u015f\u0131yor. S\u00f6zde rastgele say\u0131 \u00fcreteci, rastgelelik a\u00e7\u0131s\u0131ndan istatistiksel testlerden ge\u00e7en \u00e7\u0131kt\u0131lar \u00fcretir; yani temelde bir elektronik tablo program\u0131n\u0131n i\u015faretleyece\u011fi hi\u00e7bir \u015fey \u00fcretmez. Bu \u00e7\u0131kt\u0131 yine de tamamen ba\u015flang\u0131\u00e7 \u200b\u200bde\u011ferine ba\u011fl\u0131d\u0131r. Rastgele g\u00f6r\u00fcn\u00fcr ama de\u011fildir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0130statistiksel rastgelelik ve kriptografik \u00f6ng\u00f6r\u00fclemezlik farkl\u0131 \u00f6zelliklerdir ve Coldcard&#8217;\u0131n \u00e7\u0131kt\u0131s\u0131 ilk testi sorunsuz bir \u015fekilde ge\u00e7erken ikinci testi tamamen ge\u00e7emezdi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ger\u00e7ek rastgelelik fiziksel g\u00fcr\u00fclt\u00fcden kaynaklanmal\u0131d\u0131r: bir devredeki elektriksel titre\u015fim, termal dalgalanma, radyoaktif bozunma. Coldcard&#8217;daki donan\u0131m \u00e7ipi bunun i\u00e7indi. Yap\u0131 bayra\u011f\u0131n\u0131n ba\u011flant\u0131s\u0131n\u0131 kesti\u011fi \u00e7ip buydu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ard\u0131ndan Luke Dashjr zarlar\u0131 getirdi.<br>Kullan\u0131c\u0131lar tohumlar\u0131 yeniden olu\u015fturmak i\u00e7in \u00e7abalarken, bir\u00e7o\u011fu bariz d\u00fc\u015f\u00fck teknolojili \u00e7\u00f6z\u00fcme y\u00f6neldi. Coldcard&#8217;lar, fiziksel zarlar\u0131 atman\u0131za ve sonu\u00e7lar\u0131 entropi olarak beslemenize olanak tan\u0131r. Coinkite&#8217;\u0131n kendi k\u0131lavuzu, en az 50 ba\u011f\u0131ms\u0131z, \u00f6zel zar at\u0131\u015f\u0131yla olu\u015fturulan tohumlar\u0131n bu hatadan etkilenmeyece\u011fini belirtiyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kula\u011fa aptalca gelebilir ama \u015firket, t\u00fcm s\u00fcreci sizin i\u00e7in kolayla\u015ft\u0131rmak amac\u0131yla &#8220;100 adet sevimli ve minik zar&#8221; i\u00e7eren bir \u00e7anta sat\u0131yor .<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">31 Temmuz&#8217;da Bitcoin Core geli\u015ftiricisi Luke Dashjr bir uyar\u0131 yay\u0131nlad\u0131 : &#8220;Bir\u00e7ok ki\u015fi Coldcard g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 gidermek i\u00e7in zar kullanmay\u0131 \u00f6neriyor\/kullan\u0131yor. Unutmay\u0131n ki, s\u0131radan zarlar kriptografik olarak g\u00fcvenli olacak \u015fekilde tasarlanmam\u0131\u015ft\u0131r. Bunu yapacaksan\u0131z, muhtemelen hassas kumarhane zarlar\u0131 sat\u0131n almal\u0131s\u0131n\u0131z. Ve hatta o zaman bile, ba\u015fka bir entropi kayna\u011f\u0131n\u0131z olsun.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bitcoin Twitter kullan\u0131c\u0131lar\u0131 bu durumu sakin kar\u015f\u0131lamad\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Haha, art\u0131k zar bile atam\u0131yorsun,&#8221; diye yazd\u0131 bir kullan\u0131c\u0131 . &#8220;Kendi velayetin bitti\u2026&#8221; Ba\u015fka bir kullan\u0131c\u0131 ise Parkinson hastas\u0131 birini zar atmas\u0131 i\u00e7in tutmas\u0131 gerekip gerekmedi\u011fini sordu. (Hi\u00e7 ho\u015f de\u011fil.)<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">Quite a few people suggesting\/using dice to mitigate the Coldcard vulnerability.<br><br>Note that common dice are not designed to be cryptographically secure.<br><br>If you are going to do this, you probably should buy precision casino dice. And even then, have another source of entropy.<\/p>&mdash; Luke Dashjr (@LukeDashjr) <a href=\"https:\/\/x.com\/LukeDashjr\/status\/2083063324334248075?ref_src=twsrc%5Etfw\">July 31, 2026<\/a><\/blockquote><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Muhtemelen en faydal\u0131 yan\u0131t aritmetik hesaplamalardan geldi. Geli\u015ftirici Justin Sharp, ar\u0131zal\u0131 bir zar\u0131n size tam olarak ne kadara mal oldu\u011funu hesaplad\u0131:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;A\u015f\u0131r\u0131ya ka\u00e7mak. M\u00fckemmel bir d6 zar\u0131, at\u0131\u015f ba\u015f\u0131na 2,585 bit verir. \u00d6rne\u011fin, bir y\u00fcz\u00fcn %16,7 yerine %20 oran\u0131nda gelmesi gibi belirgin \u015fekilde sapma g\u00f6steren bir zar bile yakla\u015f\u0131k 2,55 bit verir. 99 at\u0131\u015f boyunca bu, ~256 bit ile ~252 bit entropi aras\u0131ndaki farkt\u0131r.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">256 bitten sadece 4 bit. Bu, apa\u00e7\u0131k adaletsiz bir zar i\u00e7in verilen cezan\u0131n tamam\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dashjr, ucuz zarlar\u0131n \u00f6l\u00e7\u00fclebilir bir sapmaya sahip oldu\u011fu konusunda hakl\u0131; enjeksiyon kal\u0131plama y\u00f6ntemiyle \u00fcretilen noktalar, her y\u00fczeyden biraz farkl\u0131 miktarda plastik \u00e7\u0131kar\u0131yor ve kumarhanelerin tam olarak bu nedenle hassas, tam dolu zarlar kulland\u0131\u011f\u0131 da tam olarak bu. Fizik konusunda hakl\u0131, ancak riskler konusunda yan\u0131l\u0131yor. 256&#8217;dan d\u00f6rt bit kaybetmek sizi 252&#8217;de b\u0131rak\u0131r. Coldcard&#8217;\u0131n hatas\u0131 kullan\u0131c\u0131lar\u0131 40&#8217;ta b\u0131rakt\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ancak tavsiyesinin i\u00e7inde daha keskin bir arg\u00fcman gizli ve bu, \u00fcretim tolerans\u0131yla ilgili de\u011fil. Bu, tek bir kayna\u011fa g\u00fcvenmemekle ilgili. Coldcard&#8217;\u0131n ba\u015far\u0131s\u0131zl\u0131\u011f\u0131, entropisinin biraz sapmal\u0131 olmas\u0131ndan kaynaklanmad\u0131; bir bile\u015fenin sessizce katk\u0131da bulunmay\u0131 b\u0131rakmas\u0131 ve hi\u00e7bir \u015feyin bunu fark etmemesinden kaynakland\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu konuda ne yap\u0131lmal\u0131?<br>E\u011fer etkilenen bir Coldcard \u00fczerinde zar atmadan (ger\u00e7ekten) veya g\u00fc\u00e7l\u00fc bir BIP-39 parolas\u0131 kullanmadan bir seed olu\u015fturduysan\u0131z, bu seed tehlikeye girmi\u015ftir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Firmware&#8217;i g\u00fcncelleyin, yeni bir seed olu\u015fturun, parmak izini do\u011frulay\u0131n, bir test i\u015flemi g\u00f6nderin, ard\u0131ndan her \u015feyi ta\u015f\u0131y\u0131n. Coinkite&#8217;\u0131n dan\u0131\u015fmanl\u0131\u011f\u0131 bunu model model a\u00e7\u0131kl\u0131yor. D\u0131\u015fa aktar\u0131lan seed&#8217;ler kusuru da beraberinde ta\u015f\u0131yor; hatal\u0131 bir seed&#8217;i farkl\u0131 bir c\u00fczdan uygulamas\u0131na ta\u015f\u0131mak hi\u00e7bir \u015feyi \u00e7\u00f6zm\u00fcyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Di\u011fer herkes i\u00e7in \u00e7\u0131kar\u0131lacak ders, donan\u0131m c\u00fczdanlar\u0131n\u0131n bozuk oldu\u011fu veya zarlar\u0131n bir tuzak oldu\u011fu de\u011fil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Rastgele&#8221; bir iddiad\u0131r ve iddialar\u0131n do\u011frulanmas\u0131 gerekir. Coldcard&#8217;\u0131n kaynak kodu ba\u015ftan beri herkese a\u00e7\u0131kt\u0131. Ama\u00e7lanan donan\u0131m rastgele say\u0131 \u00fcreteci (RNG) ikili dosyada zaten mevcuttu. \u0130ncelemeciler bunun var oldu\u011funu do\u011frulad\u0131lar, ancak tohum \u00fcretecinin ger\u00e7ekten onu \u00e7a\u011f\u0131rd\u0131\u011f\u0131n\u0131 asla do\u011frulamad\u0131lar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sekiz y\u0131l boyunca yap\u0131lan denetimlerde do\u011fru kod incelendi. Ama \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131 kontrol edilmedi.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Coldcard c\u00fczdanlar\u0131ndaki bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131, Bitcoin sahiplerine 100 milyon dolardan fazla zarar verdi ve zarlar\u0131n g\u00fcvenilir olup olmad\u0131\u011f\u0131na dair eski<\/p>\n","protected":false},"author":1,"featured_media":7555,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[7],"tags":[23,346,24],"class_list":["post-7554","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kripto-paralar","tag-bitcoin","tag-coldcard","tag-kripto-para"],"_links":{"self":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/7554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7554"}],"version-history":[{"count":2,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/7554\/revisions"}],"predecessor-version":[{"id":7557,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/7554\/revisions\/7557"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/media\/7555"}],"wp:attachment":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}