Coldcard users should take notice: your private keys may be compromised if you generated them under these conditions. We should be getting a full report of the vulnerability soon. (Jameson Lopp)