When random.bytes() runs but doesn't work
Summary
A detailed analysis of a Coldcard firmware bug where disabling hardware RNG and overriding pyb_rng_get led to the use of a weak random number generator, risking wallet entropy. The piece examines commit messages, code changes, and the cascade of decisions that allowed a security flaw to slip into production, ending with a strong call for secure, well-documented firmware practices.