Found 4 bugs in Coldcard Q firmware (seed, multisig, USB, QR paths) while looking at the dice-roll seed generation. Reported to @Coinkite, fixed in 5.6.1 / 1.5.1Q. Writeup:
Portspoof v2.0 — full rewrite of the connection engine. Epoll tarpit with mixed delivery modes and per-connection timing jitter.
A 5-second nmap scan becomes 10+ hours — and the result is still a haystack.