Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.
Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
No external sample loaded yet.
A verified GitHub handle is needed before external discovery.Message quality and risk characterize commits, never the person.
This commit is a minor formatting edit to the README.md file. It changes a 'Security Advisory' heading from being displayed as a code block (with diff-style coloring) to a normal Markdown heading, and adds a horizontal rule. There are no c…
c849c4e0by Peter D. Gray+3−31 fileThis commit adds a security advisory to the COLDCARD firmware README. Coinkite states that firmware releases from 2021 through July 2026 contained a bug that produced weak randomness (poor entropy) when generating secrets such as wallet se…
266f581aby Peter D. Gray+18−01 fileThis commit only updates the release signature file. It adds two new firmware file hashes for recently built releases and refreshes the PGP signature that covers the file. There is no code change and no indication of a security fix or vuln…
9a88e1a5by Peter D. Gray+10−81 fileThis commit only updates a signed release manifest file (signatures.txt). It refreshes cryptographic hashes for release notes and adds a new firmware file entry, then re-signs the file with PGP. There is no code change and no security vuln…
f32e0579by Peter D. Gray+11−101 fileThis commit updates Coldcard's release notes to announce that a previously disclosed limited-entropy bug in seed generation now also affects Mk3 hardware, and that a new Mk3 firmware version 4.2.0 has been released as a hotfix. The earlier…
50fceee9by Peter D. Gray+10−82 filesThis commit simply updates a hardcoded Bitcoin blockchain height number in a file that is automatically generated. There is no security issue here.
1f03a52fby Peter D. Gray+2−21 fileThis commit only updates the release signature file. It adds two new file hashes for a COLDCARD Mk firmware release and refreshes the PGP signature that covers the file. There is no code change, no bug fix, and no security patch in the dif…
f7945e0bby Peter D. Gray+10−81 fileThis commit only updates an auto-generated timestamp and version number in a firmware build file. It does not change any executable code, logic, or security behavior. There is no security issue here.
217b794fby Peter D. Gray+3−31 fileThis commit simply updates a hardcoded Bitcoin block height number in a single file by one block, along with its timestamp. There is no code logic change and no apparent security relevance.
85b1fe56by Peter D. Gray+2−21 fileThis commit only updates a signed release manifest file (signatures.txt). It records new cryptographic hashes for firmware release files and their PGP signature. There is no code change, no bug fix, and no security patch in the commit itse…
47deea23by Peter D. Gray+16−141 fileThis commit only updates an auto-generated timestamp and version string used by the COLDCARD Q1 hardware wallet's FAT filesystem driver. The change is cosmetic/build-metadata only and does not alter any executable logic, security boundary,…
2183c2f0by Peter D. Gray+3−31 fileThis commit simply updates a recorded Bitcoin block height number in a generated file, moving it from block 960,344 to 960,347. There is no code logic change, no user-facing behavior change, and no security relevance.
e1fd9b85by Peter D. Gray+2−21 fileThis commit only updates two automatically generated files that store a fixed build date and firmware version number used for timestamps on files written to SD cards. The actual code logic did not change; only the hardcoded date and versio…
9b80afccby Peter D. Gray+6−62 filesThis commit simply updates a hardcoded Bitcoin block height number in a firmware file, moving it forward by two blocks. There is no code change that affects security, user funds, or device behavior beyond reflecting a slightly later point …
6691ba63by Peter D. Gray+2−21 fileThis commit only removes a period at the end of one changelog sentence. It is a trivial punctuation/typography fix with no code or security behavior change.
4ba45bc9by Peter D. Gray+1−11 fileThis commit simply updates a stored Bitcoin blockchain height number and its timestamp in a generated data file. It is a routine data refresh with no code changes and no apparent security relevance.
ea19aeefby Peter D. Gray+2−21 fileThis commit is only a wording edit to the COLDCARD firmware changelog, but the changelog text itself discloses a serious security problem: some COLDCARD devices generated wallet seeds with far less randomness than intended. Mk3 devices run…
d9be4503by Peter D. Gray+8−81 fileThis commit updates Coldcard's release notes to announce an urgent security fix for a 'limited entropy' bug in how the device generates wallet seeds. On older Mk3 hardware, seeds created after firmware 4.0.1 may have only about 40 bits of …
c3f7529aby Peter D. Gray+148−844 filesThis commit fixes a critical random-number bug in COLDCARD hardware wallets. The device was accidentally using a weak, software-based fallback random generator instead of its secure hardware one when creating Bitcoin seed phrases. Because …
ca724637by Peter D. Gray+60−711 filesThis commit only changes version numbers in the changelog and two build makefiles. It does not modify any code, fix any bug, or alter any behavior. The actual security-relevant fix for the 'limited entropy bug' is not present in this diff.
ee36d35aby Peter D. Gray+3−33 files