Bitcoin Forum
February 28, 2020, 12:41:46 AM *
News: Latest Bitcoin Core release: 0.19.0.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: 1 2 3 [All]
  Print  
Author Topic: ColdCard hardware wallet  (Read 942 times)
proo7
Jr. Member
*
Offline Offline

Activity: 210
Merit: 5


View Profile
September 19, 2018, 11:39:46 PM
 #1

Has anyone used and tested ColdCard hardware wallet so far ?

https://coldcardwallet.com/


What is the Coinkite Coldcard? It's a Bitcoin hardware wallet, so it signs transactions and can be used offline.

    BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses.
    It knows how to understand transactions, so you can see what you are approving.
    The first PSBT (BIP 174) native wallet which can be used completely offline for it's entire lifecycle.

But it's different!

    NO specialized software required. It accepts standard PSBT transaction (BIP 174) stored on an MicroSD card.
    NO companion 'app' on your computer, works with the major wallets already (Electrum, and more to come).
    It's cheap! Simple packaging, plain design, no fancy boxes, no redundant cables.
    It's ultrasecure! Real crypto security chip. Your private key is stored in a dedicated security chip, not the main micro's flash.
    Easy back-up! MicroSD card slot for backup and data storage. This allows truly offline signing, by transferring the unsigned/signed transactions on sneakernet.
    Open source software design runs Micropython and you can change it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
proo7
Jr. Member
*
Offline Offline

Activity: 210
Merit: 5


View Profile
September 21, 2018, 09:45:13 PM
 #2

Here is the interview with creator of ColCard hardware wallet Rodolfo Novak

https://www.youtube.com/watch?v=HIMuJ6CXCM0

I think they created Opendime wallet before also


Has anyone tried to hack it or examine it from inisde ?
OmegaStarScream
Staff
Legendary
*
Offline Offline

Activity: 1946
Merit: 1750


Exchange Bitcoin quicky--https://blockchain.com.do


View Profile
September 23, 2018, 05:27:49 PM
 #3

Honestly, It's not worth it, at least not for 69.99$. The design alone is not attractive, let alone the features.

You could add more money and get a Trezor for 69 EUR (excl. VAT) and enjoy more features, frequent updates, big userbase, faster support etc.

proo7
Jr. Member
*
Offline Offline

Activity: 210
Merit: 5


View Profile
September 25, 2018, 07:03:21 PM
 #4

Honestly, It's not worth it, at least not for 69.99$. The design alone is not attractive, let alone the features.

You could add more money and get a Trezor for 69 EUR (excl. VAT) and enjoy more features, frequent updates, big userbase, faster support etc.

I agree with you that Trezor and Ledger are looking more attractive and with more features,
but when it comes to security... I think that ColdCard is a much safer option.
I would agree with you that price could be a bit cheaper... maybe around 49$
HCP
Legendary
*
Offline Offline

Activity: 1246
Merit: 2270

<insert witty quote here>


View Profile
September 28, 2018, 09:02:19 PM
Merited by vapourminer (1), HeRetiK (1)
 #5

It is certainly an interesting concept. It can be used as an "offline signer" in conjunction with Electrum... so instead of using a 2nd computer, you simply transfer the unsigned transaction to your coldcard via a microSD, sign it, then transfer it back to your online PC and broadcast.

However, my concern lies with the fact that the microSD can also be used to "update firmware"... and "backup your (encrypted) seed".

I wonder how long before someone figures out a way to update the firmware so that it creates an unencrypted backup of your seed on the microSD card Tongue

proo7
Jr. Member
*
Offline Offline

Activity: 210
Merit: 5


View Profile
September 29, 2018, 10:03:41 AM
 #6

It is certainly an interesting concept. It can be used as an "offline signer" in conjunction with Electrum... so instead of using a 2nd computer, you simply transfer the unsigned transaction to your coldcard via a microSD, sign it, then transfer it back to your online PC and broadcast.

However, my concern lies with the fact that the microSD can also be used to "update firmware"... and "backup your (encrypted) seed".

I wonder how long before someone figures out a way to update the firmware so that it creates an unencrypted backup of your seed on the microSD card Tongue

Legit question... I would love if ColdCard developers can respond and answer this and other question people have,
but I must say that its for sure more easy to do this 'fake mailicious firmware' for other more popular hardware wallets.
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
October 25, 2018, 11:03:20 PM
Last edit: October 26, 2018, 12:07:14 AM by nanobtc
 #7

I have one, and sort of like it so far. I got in on the startup thing, so I got it I think $10 cheaper. I have not put any BTC on it yet, still learning. I have a Ledger Nano S, but it seems that Coldcard has the ability to do a few unique things (most notably, sign transactions completely off-line).

I am still in 'dabbling-mode' with the Ledger Nano S as well, so I am in no position to make an informed comparison. I've been in the space a while, the lack of alt-coins does not bother me, I'm only interested in BTC.

I see that the latest Electrum supports it directly, so a familiar software wallet (for me) that works with it will be great. I need to tweak udev in Linux apparently, haven't got it completely working yet.

I HODL, so all of this is just experimentation so far.

EDIT a few minutes later
Got it working with Electrum 3.23  had to add 51-coinkite.rules to /etc/udev/rules.d   Reloaded udev stuff with sudo udevadm control --reload-rules && sudo udevadm trigger

info here: https://github.com/Coldcard/ckcc-protocol/blob/master/51-coinkite.rules

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
tarball
Jr. Member
*
Offline Offline

Activity: 98
Merit: 5


View Profile
November 01, 2018, 12:49:49 AM
 #8

I have one, and sort of like it so far. I got in on the startup thing, so I got it I think $10 cheaper. I have not put any BTC on it yet, still learning. I have a Ledger Nano S, but it seems that Coldcard has the ability to do a few unique things (most notably, sign transactions completely off-line).

I am still in 'dabbling-mode' with the Ledger Nano S as well, so I am in no position to make an informed comparison. I've been in the space a while, the lack of alt-coins does not bother me, I'm only interested in BTC.

I see that the latest Electrum supports it directly, so a familiar software wallet (for me) that works with it will be great. I need to tweak udev in Linux apparently, haven't got it completely working yet.

I HODL, so all of this is just experimentation so far.

EDIT a few minutes later
Got it working with Electrum 3.23  had to add 51-coinkite.rules to /etc/udev/rules.d   Reloaded udev stuff with sudo udevadm control --reload-rules && sudo udevadm trigger

info here: https://github.com/Coldcard/ckcc-protocol/blob/master/51-coinkite.rules

Have you been able to sign transaction for p2sh-segwit format? I have only been able to sign for legacy format. The electrum wallet file for p2sh-segwit does not recognise my coldcard, whereas the wallet file using p2pkh format does recognise it.

Thanks for reading my post.
tarball
Jr. Member
*
Offline Offline

Activity: 98
Merit: 5


View Profile
November 01, 2018, 12:51:44 AM
 #9

It is certainly an interesting concept. It can be used as an "offline signer" in conjunction with Electrum... so instead of using a 2nd computer, you simply transfer the unsigned transaction to your coldcard via a microSD, sign it, then transfer it back to your online PC and broadcast.

However, my concern lies with the fact that the microSD can also be used to "update firmware"... and "backup your (encrypted) seed".

I wonder how long before someone figures out a way to update the firmware so that it creates an unencrypted backup of your seed on the microSD card Tongue

I have tried the backup option. It creates a 12 word mnemonic that acts as the pass phrase to decrypt it.

Thanks for reading my post.
bob123
Legendary
*
Offline Offline

Activity: 1148
Merit: 1655



View Profile WWW
November 01, 2018, 08:44:09 AM
 #10

[...]
I wonder how long before someone figures out a way to update the firmware so that it creates an unencrypted backup of your seed on the microSD card Tongue

I have tried the backup option. It creates a 12 word mnemonic that acts as the pass phrase to decrypt it.

Huh ?

What kind of backup is being generated if you still need your 12 word mnemonic ?

Are you sure that you need your mnemonic seed to decrypt the backup file ??
IMO, this wouldn't make much sense. The mnemonic seed should be the backup itself.


As i have understood it, it generates a backup (= encrypted mnemonic seed) which needs a password(?) to be decrypted.

nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
November 01, 2018, 01:17:36 PM
 #11


Have you been able to sign transaction for p2sh-segwit format? I have only been able to sign for legacy format. The electrum wallet file for p2sh-segwit does not recognise my coldcard, whereas the wallet file using p2pkh format does recognise it.


{snip} I have not tried p2sh-segwit. The latest Sept 11 firmware says:

Can create Electrum skeleton wallet for Segwit Native and Segwit P2SH now.
    caveat: the plugin is not ready yet for P2SH/Segwit, but Segwit native is fine


https://coldcardwallet.com/docs/upgrade  

I do like that Electrum 3.23 lets you upgrade the Coldcard firmware directly via USB, without an SD card.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
tarball
Jr. Member
*
Offline Offline

Activity: 98
Merit: 5


View Profile
November 01, 2018, 06:01:40 PM
 #12


Have you been able to sign transaction for p2sh-segwit format? I have only been able to sign for legacy format. The electrum wallet file for p2sh-segwit does not recognise my coldcard, whereas the wallet file using p2pkh format does recognise it.


{snip} I have not tried p2sh-segwit. The latest Sept 11 firmware says:

Can create Electrum skeleton wallet for Segwit Native and Segwit P2SH now.
    caveat: the plugin is not ready yet for P2SH/Segwit, but Segwit native is fine


https://coldcardwallet.com/docs/upgrade  

I do like that Electrum 3.23 lets you upgrade the Coldcard firmware directly via USB, without an SD card.

Oops. hehe. Must have missed that part.

I agree. I like that option that Electrum provides.

Thanks for reading my post.
tarball
Jr. Member
*
Offline Offline

Activity: 98
Merit: 5


View Profile
November 01, 2018, 06:04:28 PM
 #13

[...]
I wonder how long before someone figures out a way to update the firmware so that it creates an unencrypted backup of your seed on the microSD card Tongue

I have tried the backup option. It creates a 12 word mnemonic that acts as the pass phrase to decrypt it.

Huh ?

What kind of backup is being generated if you still need your 12 word mnemonic ?

Are you sure that you need your mnemonic seed to decrypt the backup file ??
IMO, this wouldn't make much sense. The mnemonic seed should be the backup itself.


As i have understood it, it generates a backup (= encrypted mnemonic seed) which needs a password(?) to be decrypted.

When you create a wallet, it will give you 24 bip39 words to write down. After creating the wallet, if you choose the backup option, it will give you a 12 word 'passphrase' (if you want to call it that) to encrypt the file.

The 'backup' is essentially a system image, which includes the seed, as well as system preferences.

You can read about how it works here:
https://coldcardwallet.com/docs/backups

'Background
The Coldcard is unique in that we offer a backup feature to save your wallet seeds to MicroSD card. Settings and other meta is saved as well. The encrypted file can be treated as any other file because we use AES-256 encryption, with a strong pass phrase.

Even using this feature, you should still have a paper-only copy of your 24 seed words. Use the encrypted backup feature for convenience and duplication.'

Thanks for reading my post.
tarball
Jr. Member
*
Offline Offline

Activity: 98
Merit: 5


View Profile
November 02, 2018, 06:11:41 AM
 #14


EDIT a few minutes later
Got it working with Electrum 3.23  had to add 51-coinkite.rules to /etc/udev/rules.d   Reloaded udev stuff with sudo udevadm control --reload-rules && sudo udevadm trigger

info here: https://github.com/Coldcard/ckcc-protocol/blob/master/51-coinkite.rules

Is that all you did? Because I cannot get it to work (I'm using Tails). I am also like you, and have a Nano S. I cannot get that to work either (I haven't tried on Tails, but on debian).

Thanks for reading my post.
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
November 02, 2018, 01:17:11 PM
 #15

Yes, that's all I did. This was on latest/upgraded Ubuntu. I haven't tried it on Tails.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
November 09, 2018, 04:31:11 AM
 #16

Here's a recent review of the Coldcard.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
Dragonbro123
Newbie
*
Offline Offline

Activity: 3
Merit: 0


View Profile
November 28, 2018, 08:29:33 AM
 #17

It's poor designed. Toooooo ugly IMO...
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
April 04, 2019, 05:22:44 PM
 #18

Bumping an old one, here. Today (April 4, 2019) there was a new firmware update for the Coldcard:   https://coldcardwallet.com/docs/upgrade

Electrum was apparently vulnerable to a phishing problem, this info from electrum.org:    Warning: Electrum versions older than 3.3 can no longer connect to public servers, and must be upgraded. This is in order to prevent user exposure to phishing messages. Do not download Electrum from any another source than electrum.org.

I bumped into this in a scary way. I don't trade in BTC, just buy and hold. I keep different cold/paper wallets for each year, so when (if?) I cash out, it will be easy to demonstrate it's over a year old, to help with long-term capital gains. A couple of times I needed to sell a little bit for bills. Rather than sweep the whole thing into an exchange wallet, the Coldcard/Electrum combo is great for this. Sweep paper wallet to Electrum, send a bit to the exchange to sell. I left the balance in Coldcard for a couple of days, when I started to send it back to paper wallet, it wouldn't sync.

I run Electrum in Linux from a command line, and there were many alien messages in the terminal. I used the seed words to create a new Electrum wallet, this time without the Coldcard hardware option. Still fail. I looked online, and found the problem, upgraded Electrum. Now the new wallet read everything fine. I like Electrum a lot, but this is a good example of why you should not depend on any one wallet for everything.


Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
legendster
Hero Member
*****
Offline Offline

Activity: 1428
Merit: 727


www.V.systems


View Profile
April 18, 2019, 04:59:21 PM
 #19

The wallet looks to be pretty tiny and compact. I like it. Not a big fan of the transparent casing but I can get behind that as well. However, with "cheap" in the product's slogan, it still costs $100 for a single piece. That's nearly twice the price of a Trezor or a Ledger nano s..

**This is a signature**
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
April 19, 2019, 12:16:00 AM
 #20

I don't have a Trezor, but have a couple of Ledger Nano S wallets. One seemingly unique feature is the MicroSD slot. From their docs:

Why does it have a MicroSD slot?

    The Coldcard can backup the seed into an encrypted file.
    New transactions to be signed, can be imported from the card.
    Public key data (xpub, receive addresses) can be written onto the card.
    Firmware upgrades can be done by copying the new firmware file onto a card.
    A skeleton Electrum wallet can be created on the card which allows Electrum to "pair" with the Coldcard, without it ever connecting to a USB port.

The second one, in particular is interesting, as it makes completely air-gapped transactions possible. I don't know of any others that can do that, at any price. There may be, I just don't know about them.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
April 19, 2019, 07:02:39 PM
 #21

I don't have a Trezor, but have a couple of Ledger Nano S wallets. One seemingly unique feature is the MicroSD slot. From their docs:

Why does it have a MicroSD slot?

    The Coldcard can backup the seed into an encrypted file.
    New transactions to be signed, can be imported from the card.
    Public key data (xpub, receive addresses) can be written onto the card.
    Firmware upgrades can be done by copying the new firmware file onto a card.
    A skeleton Electrum wallet can be created on the card which allows Electrum to "pair" with the Coldcard, without it ever connecting to a USB port.

The second one, in particular is interesting, as it makes completely air-gapped transactions possible. I don't know of any others that can do that, at any price. There may be, I just don't know about them.

That is actually how I use it, I have a wallet on my phone that is hot. If it gets compromised it will suck but it's not end of the world money, it's not even car payment money, it's I bought something in the collectibles section of the forum money.

For the big spends, with my cold BTC storage, the wallet never touches the internet.

Only complaint really is the MicroSD. Yes it's used everywhere, but you can't plug it into your PC / laptop without the micro to full-size adapter. Yeah, I know not a big deal but it would have been nice to have a full size one.

Shameless plug, I do have an original cold card up for sale if you want it
New & sealed:
https://bitcointalk.org/index.php?topic=5126007

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
April 20, 2019, 06:04:08 AM
 #22

Not a bad deal there, really. I'm good on hardware wallets, I depend on cold wallets for real storage. What card storage would be more convenient for you? Many phones use that card, so it's handy in that aspect. Larger cards require/waste more circuit board real estate, and larger form factor.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
April 20, 2019, 04:15:02 PM
 #23

Not a bad deal there, really. I'm good on hardware wallets, I depend on cold wallets for real storage. What card storage would be more convenient for you? Many phones use that card, so it's handy in that aspect. Larger cards require/waste more circuit board real estate, and larger form factor.

I would like full SD.

Yes phones use the microSD but most (all?) laptops that have built in card readers use full size SD.
Same with desktops, I don't know of one that has a micro SD slot, those that do have full size SD.
I have many micro to regular SD adapters around. 2 or 3 at my office, 2 or 3 at home, probably 1 at my parents, etc.

Can I actually locate them. That is an entirely different answer.

Take ColdCard out of fireproof lock box, insert microSD, create transaction, stand in middle of room going where is an adapter. I thought there was one on the desk, nope. Did I put any over here, nope. Kitchen table where I was working yesterday, nope. Oh, look there is one in the corner of the over there next to the pile of old cell phones.

-Dave




███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
Baofeng
Hero Member
*****
Offline Offline

Activity: 1064
Merit: 833


View Profile
April 26, 2019, 04:03:16 AM
 #24

Here is the latest update:

https://twitter.com/COLDCARDwallet/status/1121444875386245120



Link to upgrade page: https://coldcardwallet.com/docs/

..bustadice..         ▄▄████████████▄▄
     ▄▄████████▀▀▀▀████████▄▄
   ▄███████████    ███████████▄
  █████    ████▄▄▄▄████    █████
 ██████    ████████▀▀██    ██████
██████████████████   █████████████
█████████████████▌  ▐█████████████
███    ██████████   ███████    ███
███    ████████▀   ▐███████    ███
██████████████      ██████████████
██████████████      ██████████████
 ██████████████▄▄▄▄██████████████
  ▀████████████████████████████▀
                     ▄▄███████▄▄
                  ▄███████████████▄
   ███████████  ▄████▀▀       ▀▀████▄
               ████▀      ██     ▀████
 ███████████  ████        ██       ████
             ████         ██        ████
███████████  ████     ▄▄▄▄██        ████
             ████     ▀▀▀▀▀▀        ████
 ███████████  ████                 ████
               ████▄             ▄████
   ███████████  ▀████▄▄       ▄▄████▀
                  ▀███████████████▀
                     ▀▀███████▀▀
           ▄██▄
           ████
            ██
            ▀▀
 ▄██████████████████████▄
██████▀▀██████████▀▀██████
█████    ████████    █████
█████▄  ▄████████▄  ▄█████
██████████████████████████
██████████████████████████
    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ████████████
......Play......
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
April 26, 2019, 01:39:16 PM
 #25

Tx for info, Baofeng, I'll upgrade tonight. Love your radios, BTW.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
May 29, 2019, 11:27:40 PM
 #26

2.0.4 came out on May 13th

From ColdCard:
Release Notes (v2.0.3 – 2.0.4)

Quote
   Transaction signing speed improved by about 3X.
    Will warn if miner's fee is over 5% of txn amount (was 1% before). Hard limit remains 10% (configurable, can be disabled completely).
    Robustness: Tighten stack-depth checking, increase heap size, shuffle some memory.
    Bugfix: Transactions with more than 10 outputs were not summarized correctly.
    Bugfix: Consolidating transactions that move UTXO within same wallet are shown better.
    Bugfix: Better recovery from too-complex transaction errors.
    "Don't forget your PIN" warning message is more bold now.
    (in 2.0.4) Bugfix: Clearing duress PIN would lead to a error screen.
    (in 2.0.4) Bugfix: Advanced > "Lock Down Seed" command didn't work correctly.
    (in 2.0.4) Bugfix: Importing seed words manually didn't work on second try (thanks @duck1123)

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
June 26, 2019, 11:10:13 PM
 #27

Firmware v2.1 is out

https://coldcardwallet.com/docs/upgrade

Quote
2019-06-26T1317-v2.1.0-coldcard.dfu released June 26, 2019.

    Major release with Multisig support!
        New menu under: Settings > Multisig Wallets
        Lists all imported M-of-N wallets already setup
        Export, import for air-gapped creation
        Related settings and more
    Broad change: extended public key finger (XFP) values used to be shown in the wrong endian (byte swapped), and prefixed with 0x to indicate they were a number. In fact, they are a byte string and should be shown in network order. Everywhere you might be used to seeing your XFP value has been switched, so 0x0f056943 becomes 4369050F (all caps, no 0x prefix). Affected areas include:
        BIP39 password confirmation screen
        Advanced > View Identity screen
        Electrum skeleton wallet export (label of wallet)
        Dump public data file (text in file header)
        xfp command in ckcc CLI helper (can show opposite endian, if needed)
    Export skeleton wallets for Wasabi Wallet https://wasabiwallet.io/ to support air-gapped use.
    Summary file (public.txt) has been reworked to include more XPUB values and a warning about using addresses your blockchain-monitoring wallet might not be ready for.
    When BIP39 passphrase is given over USB, and approved, the new XFP is shown on-screen for reference.
    Use with Electrum will require our updated plugin changes.


-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
July 28, 2019, 02:47:17 AM
 #28

2.1.1 came out a few weeks ago.

https://coldcardwallet.com/docs/upgrade

Quote
    Major release with Multisig support!
        New menu under: Settings > Multisig Wallets
        Lists all imported M-of-N wallets already setup
        Export, import for air-gapped creation
        Related settings and more
    Broad change: extended public key finger (XFP) values used to be shown in the wrong endian (byte swapped), and prefixed with 0x to indicate they were a number. In fact, they are a byte string and should be shown in network order. Everywhere you might be used to seeing your XFP value has been switched, so 0x0f056943 becomes 4369050F (all caps, no 0x prefix). Affected areas include:
        BIP39 password confirmation screen
        Advanced > View Identity screen
        Electrum skeleton wallet export (label of wallet)
        Dump public data file (text in file header)
        xfp command in ckcc CLI helper (can show opposite endian, if needed)
    v2.1.1: New feature: Create seed words from D6 dice rolls:
        under "Import Existing > Dice Rolls"
        just keep pressing 1 - 6 as you roll. At least 99 rolls are required for 256-bit security
        seed is sha256(over all rolls, as ascii string)
        normal seed words are shown so you can write those down instead of the rolls
        can also "mix in" dice rolls: after Coldcard picks the seed words and shows them, press 4 and you can then do some dice rolls (as many or as few as desired) and get a new set of words, which adds those rolls as additional entropy.
    Export skeleton wallets for Wasabi Wallet https://wasabiwallet.io/ to support air-gapped use.
    Summary file (public.txt) has been reworked to include more XPUB values and a warning about using addresses your blockchain-monitoring wallet might not be ready for.
    When BIP39 passphrase is given over USB, and approved, the new XFP is shown on-screen for reference.
    v2.1.1: Wasabi wallet support: remove extra info from skeleton file, change XFP endian, add version field.
    Use with Electrum will require our updated plugin changes.

Older releases and their changes are listed here, the source code, and much more be found in our repository on github.



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
August 03, 2019, 12:27:41 AM
 #29

Version 2.1.2 released today.
https://coldcardwallet.com/docs/upgrade

All new firmware since 2.1 have multisig support.

https://coldcardwallet.com/docs/multisig

All changes in 2.1.2

Quote
    Add extra warning screen added about forgetting your PIN.
    Remove warning screen about Testnet vs Mainnet.
    Bugfix: Change for XFP endian display introduced in 2.0.0 didn't actually correct endian display and it was still showing values in LE32. Correctly corrected now.
        now showing both values in "Advanced > View Identity screen".
        some matching changes to ckcc-protocol (CLI tool)
        when making multisig wallets in airgap mode, you must use latest firmware on all the units
    Bugfix: Error messages would sometimes disappear off the screen quickly. Now they stay up until OK pressed. Text of certain messages also improved.
    Bugfix: Show a nicer message when given a PSBT with corrupted UTXO values.
    Bugfix: Block access to multisig menu when no seed phrase yet defined.
    Bugfix: Any command on multisig menu that used the MicroSD card would crash, if card was not present.
    Bugfix: When offline multisig signing sometimes tried to finalize PSBT, but we can't.
    Bugfix: For multi-pass-multisig signing, handle filenames better (end in -part, not -signed).

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
kalus
Sr. Member
****
Offline Offline

Activity: 420
Merit: 262

let's make a deal.


View Profile
August 04, 2019, 03:44:39 PM
 #30

Quote
Export skeleton wallets for Wasabi Wallet https://wasabiwallet.io/ to support air-gapped use.

i was looking for a new desktop wallet and found out about this integration with coldcard.  i'm also impressed with the thoughtful design of the hardware down to the tamper-evident, clear case.   I have ordered a hardware v.2 to try out.

DC2ngEGbd1ZUKyj8aSzrP1W5TXs5WmPuiR wow need noms
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
August 06, 2019, 06:28:21 PM
 #31

Quote
Export skeleton wallets for Wasabi Wallet https://wasabiwallet.io/ to support air-gapped use.

i was looking for a new desktop wallet and found out about this integration with coldcard.  i'm also impressed with the thoughtful design of the hardware down to the tamper-evident, clear case.   I have ordered a hardware v.2 to try out.

Good choice. I love mine.

I try keep bumping this thread whenever they update the firmware just to keep people in the loop. I have no affiliation with them but use mine a lot.

On a side note take a look at:

https://blog.coinkite.com/noise-troll/

That is just about the only vulnerability that has been found. And so far it's not proven and just about impossible to exploit. And lets be serious. If someone can compromise your USB port or cable on the PC you are using for your BTC you're screwed anyway.

Hmmmm, I have access to your usb. Let's do this incredibly complicated almost impossible hack...or just emulate a keyboard and type whatever the hell I want.....

-Dave






███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
kalus
Sr. Member
****
Offline Offline

Activity: 420
Merit: 262

let's make a deal.


View Profile
August 22, 2019, 03:51:48 AM
Last edit: August 22, 2019, 04:11:09 AM by kalus
Merited by DaveF (2)
 #32

I just got mine today - I am really enjoying using ColdCard + Electrum, and displaying my addresses on the display. Managing multiple wallets is easy, and i can unplug and keep unencrypted wallets watch-only to see the confirms roll in.    

I still like the Trezor, but ColdCard is a straightforward BTC/LTC only-wallet that can be used tethered, or setup as airgapped.   I tried it on wasabi, but i prefer how i can keep multiple wallets open in electrum. 

the ColdCard looked cheap in the photos but holding in my hand it's worth the price.  it's obvious someone put a lot of thought and pride into how these turned out. Great buttons on the v2. The serial number on the sealed bag matched the bag number located in the firmware for security during shipment too.  

imo if someone is btc-only and likes tactile buttons over touchscreens, i'd go with a ColdCard.  

DC2ngEGbd1ZUKyj8aSzrP1W5TXs5WmPuiR wow need noms
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
August 22, 2019, 02:22:39 PM
 #33

I just got mine today - I am really enjoying using ColdCard + Electrum, and displaying my addresses on the display. Managing multiple wallets is easy, and i can unplug and keep unencrypted wallets watch-only to see the confirms roll in.    

I still like the Trezor, but ColdCard is a straightforward BTC/LTC only-wallet that can be used tethered, or setup as airgapped.   I tried it on wasabi, but i prefer how i can keep multiple wallets open in electrum.  

the ColdCard looked cheap in the photos but holding in my hand it's worth the price.  it's obvious someone put a lot of thought and pride into how these turned out. Great buttons on the v2. The serial number on the sealed bag matched the bag number located in the firmware for security during shipment too.  

imo if someone is btc-only and likes tactile buttons over touchscreens, i'd go with a ColdCard.  


And we have another convert to the ColdCard.
But you are correct, it looks cheap in the pictures. But I have had, and used and still use their opendime products so I didn't worry I knew they make good stuff.
I have both the old and the new model and use them both.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
September 09, 2019, 07:04:00 PM
 #34

Version 2.1.3 was released Sep 6, 2019.
This is why I love my ColdCard, they keep working on it, releasing new features and fixes.
Not letting it sit out there like some other wallets.
-Dave

Quote
Code:
    Major release with Multisig support!
        New menu under: Settings > Multisig Wallets
        Lists all imported M-of-N wallets already setup
        Export, import for air-gapped creation
        Related settings and more
    Broad change: extended public key finger (XFP) values used to be shown in the wrong endian (byte swapped), and prefixed with 0x to indicate they were a number. In fact, they are a byte string and should be shown in network order. Everywhere you might be used to seeing your XFP value has been switched, so 0x0f056943 becomes 4369050F (all caps, no 0x prefix). Affected areas include:
        BIP39 password confirmation screen
        Advanced > View Identity screen
        Electrum skeleton wallet export (label of wallet)
        Dump public data file (text in file header)
        xfp command in ckcc CLI helper (can show opposite endian, if needed)
    New feature: Create seed words from D6 dice rolls (v2.1.1):
        under "Import Existing > Dice Rolls"
        just keep pressing 1 - 6 as you roll. At least 99 rolls are required for 256-bit security
        seed is sha256(over all rolls, as ascii string)
        normal seed words are shown so you can write those down instead of the rolls
        can also "mix in" dice rolls: after Coldcard picks the seed words and shows them, press 4 and you can then do some dice rolls (as many or as few as desired) and get a new set of words, which adds those rolls as additional entropy.
    Export skeleton wallets for Wasabi Wallet https://wasabiwallet.io/ to support air-gapped use.
    Summary file (public.txt) has been reworked to include more XPUB values and a warning about using addresses your blockchain-monitoring wallet might not be ready for.
    When BIP39 passphrase is given over USB, and approved, the new XFP is shown on-screen for reference.
    Use with Electrum will require our updated plugin changes.

Changes in version 2.1.3:

    Visual change: unknown components of multsig co-signer derivation paths used to be shown as m/?/?/0/1 but will now be shown as m/_/_/0/1. The blank indicates better that we can't prove what is in that spot, not that we don't know what value is claimed.
    Bugfix: Some backup files would hit an error during restore (random, less than 6%). Those existing backup files will be read correctly by this new version of firmware.
    Bugfix: P2SH-P2WPKH change outputs incorrectly flagged as fraudulent (regression from v1.1.0)
    Bugfix: Wanted redeem script, but should be witness script for P2WSH change outputs.



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
September 19, 2019, 11:31:36 AM
 #35

2.1.5 came out the 17-September-2019
There was also a 2.1.4 that was released just after 2.1.3 to fix a small bug

https://coldcardwallet.com/docs/upgrade


Quote
Changes in version 2.1.5:

Bugfix: Changes to redeem vs. witness script content in PSBTs. Affects multisig change outputs, primarily.
Bugfix: Import of multisig wallet from xpubs in PSBT could fail if attempted from SD Card.
Bugfix: Improved message shown if import of multsig wallet was refused during PSBT signing.

Changes in version 2.1.4:
Bugfix: For multisig change outputs, many cases were incorrected flagged as fraudulent.

This is why everyone should use a coldcard, they keep working on it with regular updates.
It does not just sit there in limbo with no development.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
September 25, 2019, 01:46:02 AM
 #36

I keep mine sealed in a gasketed plastic case. I got it out the other day, and some numerals were not typing. I will play around with it more before I panic, but I have seed words saved.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
September 25, 2019, 02:16:09 AM
 #37

I keep mine sealed in a gasketed plastic case. I got it out the other day, and some numerals were not typing. I will play around with it more before I panic, but I have seed words saved.
Gen 1 or Gen 2?

If it's Gen 1 some advice from the coldcardwallet site:

Quote
Touch pad is not doing what I want (Mark1 only)
Phantom keypresses have been a problem for some users. Here are some debug steps:

Install version 1.0.1 or later of the firmware.
Change the touch setting to suit your preferences and needs.
Press X twice before entering PIN; that selects the least sensitive mode.
Use a quality USB power supply. Often a battery pack is best for this.
Move to a different environment. Moisture in the air can be an issue.
One customer reported this:

I did some testing and it seemed that any computer plugged to the grid is plagued by noise, after connecting the wallet to an offline laptop running on battery power, I had zero issues with the touchpad.

Also, I have noticed when dealing with those types of contacts on other devices having some skin oil on your finger helps.
If your finger is too dry it does not work as well.

You can also reach out to their support: support@coinkite.com

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
October 01, 2019, 04:22:02 AM
 #38

Thanks Dave, I believe it's Gen 2,  I did do a firmware upgrade. I just now looked, and see there is a Gen3. I'll check for updates again.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
October 09, 2019, 02:56:59 PM
 #39

New firmware came out yesterday 2.1.6:
https://coldcardwallet.com/docs/upgrade

Quote
Changes in version 2.1.6:

NEW for 2.1.6: "Address Explorer": view receive addresses on the screen of the Coldcard, so you can be certain your funds are going to the right place. Can also write first 250 addresses onto the SDCard in a simple text (CSV) format. Special thanks go to @hodlwave for creating this feature.

    NEW: "Address Explorer" feature (see above)
    Bugfix: Improve error message shown when depth of XPUB of multisig cosigner conflicts with path details provided in PSBT or USB 'show address' command.
    Bugfix: When we don't know derivation paths for a multisig wallet, or when all do not share a common path-prefix, don't show anything.

Just did a test myself with the write receive address to the SD card and it worked.
So that is a cool new feature. Not really sure how many people will use it.

Was thinking creating jpgs with QR codes might be nice. Not sure if it can be done with the hardware.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
Pearls Before Swine
Sr. Member
****
Offline Offline

Activity: 1008
Merit: 295



View Profile
October 09, 2019, 03:12:44 PM
 #40

Honestly, It's not worth it, at least not for 69.99$. The design alone is not attractive, let alone the features.
Yeah for that amount I would not even think of purchasing it.  A ledger or keepkey are much less expensive and have a better design in my opinion. The Coldcard wallet is downright repulsive to me, but to each his own.

With all the hardware wallets on the market, one would think that an attractive design combined with a reasonable cost would be priority for the wallet developers, but that isn't the case here apparently.

the ColdCard looked cheap in the photos but holding in my hand it's worth the price.
Hmm.  Well, it might be an excellent wallet but even if it looks better in hand it's still a lot of money.
nanobtc
Full Member
***
Offline Offline

Activity: 410
Merit: 171



View Profile WWW
October 11, 2019, 06:38:28 AM
 #41

As always, I prefer local Truecrypt encoded USB keys. I enjoy exploring several hardware wallets. The USB option cost is near zero, and I can have many. If you are really into security, you can have a secondary wallet with a duress password.

If you whine about the cost of hardware wallets? WTF man, get a grip. And/Or buy some BTC. Wait a few weeks/months, the price of said hardware wallet is inconsequential.

Bah.

Unwanted BTC? Dispose of them safely here: 
1ygT7WtmyJn756aBnoYUHMcsr7jAVhyT2
ETFbitcoin
Legendary
*
Offline Offline

Activity: 1932
Merit: 2212

Use SegWit and enjoy lower fees.


View Profile WWW
October 30, 2019, 05:50:03 PM
 #42

ColdKite recently share their Coldcard Hardware Details at https://blog.coinkite.com/coldcard-hardware-shared/ and apparently you can build your own Coldcard.

Today we have posted all the information you need to be able to build your own Coldcard from off-the-shelf parts. We are sharing this information for the benefit of security researchers who wish to analyse the Coldcard more completely.

View hardware schematic and BOM here.

It would be cool to see someone build their own Coldcard from scratch

DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
November 02, 2019, 11:55:28 AM
 #43

New firmware out as of 1-Nov-2019
Instructions and link to firmware are at https://coldcardwallet.com/docs/upgrade as always.

Quote
Version 3.0.2 - Nov 1, 2019
New command in Danger Zone menu to view the seed words on-screen, so you can make another on-paper backup as needed.
Robustness: Analyse paths used for change outputs and show a warning if they are not similar in structure to the inputs of that same transaction. These are imperfect heuristics and if you receive a false positive, or are doing weird things that don't suit the rules below, please send an example PSBT to support and we'll see if we can handle it better:
same derivation path length
shared pattern of hardened/not path components
2nd-last position is one or zero (change/not change convention)
last position within 200 units of highest value observed on inputs
Robustness: Improve checking on key path derivations when we encounter them as text.
accept 10h and 10p as if they are 10' (alternative syntax)
define a max depth (12) for all derivations
thanks to @TheCharlatan
Security Improvement: during secure logout, wipe entire contents of serial flash, which might contain PSBT, signed or unsigned (for more privacy, deniability)

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
HCP
Legendary
*
Offline Offline

Activity: 1246
Merit: 2270

<insert witty quote here>


View Profile
November 02, 2019, 07:39:59 PM
 #44

ColdKite recently share their Coldcard Hardware Details at https://blog.coinkite.com/coldcard-hardware-shared/ and apparently you can build your own Coldcard.
This is actually very cool... I'm seriously tempted to give this a shot if I can find some spare time, just for the "fun" of it... however I suspect that it'll end up on my very long bucket list of "projects"  Undecided Tongue Roll Eyes

I know others have done similar things in the past using plans/firmware for the Trezor HWs:
https://www.instructables.com/id/Making-My-Own-Trezor-Crypto-Hardware-Wallet/
http://www.pitrezor.com/2018/02/pitrezor-homemade-trezor-bitcoin-wallet.html

DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
November 07, 2019, 03:18:28 PM
 #45

And another new version yesterday:
Login Countdown looks interesting.
As always available here: https://coldcardwallet.com/docs/upgrade

Quote
Version 3.0.3 - Nov 6, 2019

    Add "Login Countdown" feature: once enabled, you must enter you PIN correctly, and then wait out a forced delay (of minutes/hours/days) while a count down is shown on-screen. Then enter your PIN correctly, a second time, to get in. You must provide continuous power to the Coldcard during this entire period! Go to Settings > "Login Countdown" for the time intervals to pick from. Thanks to @JurrienSaelens for this feature suggestion.
    Nickname feature: Enter a short text name for your personal Coldcard. It's displayed at startup time before PIN is entered. Try it out in Settings > "Set Nickname"
    Bugfix: Adding a second signature (multisig) onto a PSBT already signed by a different Coldcard could fail with "psbt.py:351" error.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
HCP
Legendary
*
Offline Offline

Activity: 1246
Merit: 2270

<insert witty quote here>


View Profile
November 07, 2019, 05:45:36 PM
 #46

Login Countdown looks interesting.
I don't quite get what perceived threat this is attempting to mitigate? Huh Surely it doesn't actually increase security in anyway? I mean, if someone has your PIN, they have your PIN... making them wait an extra few minutes doesn't change that fact... Is it meant to allow you time to restore your wallet/move the funds in the case that the device is stolen? Surely, a (decent) BIP39 passphrase achieves the same thing? Huh

I can only imagine that it would piss me off having to wait X seconds or X minutes every time I wanted to use the device... and I certainly can't imagine any scenario in which such a delay would need to be measured in "days"!!?! Shocked Shocked Shocked

DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
November 07, 2019, 06:16:00 PM
 #47

Login Countdown looks interesting.
I don't quite get what perceived threat this is attempting to mitigate? Huh Surely it doesn't actually increase security in anyway? I mean, if someone has your PIN, they have your PIN... making them wait an extra few minutes doesn't change that fact... Is it meant to allow you time to restore your wallet/move the funds in the case that the device is stolen? Surely, a (decent) BIP39 passphrase achieves the same thing? Huh

I can only imagine that it would piss me off having to wait X seconds or X minutes every time I wanted to use the device... and I certainly can't imagine any scenario in which such a delay would need to be measured in "days"!!?! Shocked Shocked Shocked


1) Stops impulse buying of stuff.

2) If you are really only using it for long term storage, yeah if someone gets it and your pin and you have it set to a stupid long time then you have a better chance to move it with seed words. Spouse, kid, evil maid, what have you. They know your pin is 1234, they can get to it just about any time. But now they have to wait a week with it plugged in and hope you don't notice it's not there.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
November 26, 2019, 02:23:42 AM
 #48

Version 3.0.5 out today 25-Nov-2019
As always available here: https://coldcardwallet.com/docs/upgrade

Another great feature PAPER WALLETS that are unrelated to your seed words
Think about that you know you want one.

Going to be playing with that a lot over Thanksgiving.

Quote
Address explorer can show QR code for any address (Mk3 only). Press 4 to view. Once shown, press 1 to invert image, and 5/8 for next address. Successful scanning requires the best phone camera, and some patience, due to limited screen size.

Export a command file for Bitcoin Core to create an air-gapped, watch-only wallet. Requires v0.18 or higher of Bitcoin Core. docs/bitcoin-core-usage.md has been updated. Thanks to @Sjors for creating this new feature!

Paper Wallets! Creates random private key (Dice feature available too), unrelated to your seed words, and saves deposit address and private key (WIF format) into a text file on MicroSD. If you have a Mk3, it will also add a QR code inside the text file, and if you provide a special PDF-like template file (example in paperwallet.pdf) then it will superimpose the QR codes into the template, and save the resulting ready-to-print PDF to MicroSD. CAUTION: Paper wallets carry MANY RISKS and should only be used for SMALL AMOUNTS.

Adds a "Format Card" command for erasing MicroSD contents and reformatting (FAT32).

Bugfix: Idle-timeout setting should only take effect after the login countdown. Thanks to @aoeui21 for reporting this.



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
December 20, 2019, 10:37:50 PM
 #49

There is a new firmware out as of the 19th.
https://coldcardwallet.com/docs/upgrade

  Version 3.0.6

Security Bugfix: Fixed a multisig PSBT-tampering issue, that could allow a MitM to steal funds. Please upgrade ASAP.

The usual other changes:

Quote
Enhancement: Sign a text file from MicroSD. Input file must have extension .TXT and contain a single line of text. Signing key subpath can also provided on the second line.
Enhancement: Now shows the change outputs of the transaction during signing process. This additional data can be ignored, but it is useful for those who wish to verify all parts of the new transaction.
Enhancement: PSBT files on MicroSD can now be provided in base64 or hex encodings. Resulting (signed) PSBT will be written in same encoding as the input PSBT.
Bugfix: crashed on entry into the Address Explorer (some users, sometimes).
Bugfix: add blank line between addresses shown if sending to multiple destinations.
Bugfix: multisig outputs were not checked to see if they are change (would have been shown as regular outputs), if the PSBT did not have XPUB data in globals section.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
February 21, 2020, 12:13:13 PM
 #50

There is a new firmware out as of 20-Feb
Something they have at the bottom but should be listed 1st:

Quote
IMPORTANT: This release is NOT COMPATIBLE with Mk1 hardware. It will brick Mk1 Coldcards.

A few other updates and additions:


Quote
HSM (Hardware Security Module) mode: give Coldcard spending rules, including whitelisted addresses, velocity limits, subsets of authorizing users ... and Coldcard can sign with no human present. Requires companion software to setup (ckbunker or ckcc-protocol), and disabled by default, with multi-step on-screen confirmation required to enable. Mk3 only.

Enhancement: New "user management" menu. Advanced > User Management shows a menu with usernames, some details and a 'delete user' command. USB commands must be used to create user accounts and they are only used to authenticate txn approvals in HSM mode.

Dropping support for the 1st gen and adding a feature that only works on the 3rd gen is not cool IMO, but I understand that hardware evolves and sometimes has to be replaced.

On the vert very slight chance there is a security issue in the 1st gens that comes out it's going to be interesting to see their reaction.
Will they fix it or will they just say get a new one?

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
DaveF
Legendary
*
Offline Offline

Activity: 1946
Merit: 1065


DAVID CHAUM's xx coin SALE IS NOW LIVE!


View Profile WWW
February 27, 2020, 03:02:46 PM
 #51

Another update as of today 27-Feb-2020:

Version 3.1.2 - Feb 27, 2020

Quote
    Enhancement: New setting to enable a scrambled numeric keypad during PIN login.
    Enhancement: Press 4 when viewing a payment address (triggered by USB command) to see the QR code on-screen (Mk3 only).
    Enhancement: Can enter non-zero account numbers when exporting wallet files for Electrum and Bitcoin Core. This makes importing seeds from other systems easier and safer.
    Enhancement: Dims the display when entering HSM Mode.
    Bugfix: Trust PSBT setting (for multisig wallets) was being ignored. Thanks to @CasaHODL for reporting this.
    Bugfix: XPUB values volunteered in the global section of a PSBT for single-signer files would cause errors (but ok in multisig). Coldcard will now handle this, although it doesn't need them.
    Bugfix: 3.1.1 had a bug which broke the new "non-zero account export" feature.

Since the Mk1 are no longer supported if you contact them at support@coinkite.com with your original Coinkite order ID they are offering 25% off a new one.
I feel it should be more but that's just me.

-Dave



███████                   
                      ██████████                        ██       
                       ████████████                  ███       
                                ██████████           █████       
                                        ███████      ██████         
██████                  ███████     ████
████████                ██████     ██   
██████████        ████████           
███████████    █████████           
████████    ████████
   
      ███████    ████████       
              ██████    █████████████ 
          █████████      ███████████ 
      ███████████          █████████ 
██████████████                       
████████████████                       
███████      ████████████           
██████        ████████████           
████                ██████████           

xx-coin.io

█▀▀▀











█▄▄▄

▀▀▀█











▄▄▄█

█▀▀▀











█▄▄▄
 
████
██████
█████████
█████████████
████████████████
████████████████████
████████████████████████
███████████████████████
████████████g█████████
██████████g███████
████████g██████
██████g██████
██████████
██████
███


                 ████
                ████
                ▀▀
     ,▄▄▄▄▄▄      ▄▄▄▄▄▄
   o████████▄██▄████████
  ████████████████████
 d███████████████████
,███████████████████
`███████████████████
 ████████████████████
 █████████████████████
  ████████████████████████
   ██████████████████████
    ████████████████████
     `████▀▀  ▀▀██████

▀▀▀█











▄▄▄█
Pages: 1 2 3 [All]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!