mooltipass
Paranoid Pin Entry with scrambling will lockout the user
Helping someone out who enabled "Paranoid Pin Entry" and had PIN scrambling enabled too (for the BLE model).
The result is that nothing is displayed when scrolling/clicking on the wheel, so the user cannot possibly know which digits/code she is entering at all. Since the scrambling changes the ordering, there is no way to unlock the device.
Seems like a pretty huge oversight when rolling out this feature.
Are settings also supposed to be configurable with the device still locked? I just tested and it is possible to do so, which does not make a lot of sense from a security perspective.
hello there! We're actually about to release a bug fix for that feature. To display the digits, please press and scroll the wheel :)
