"But the researchers say that the secret phrase and salt can be extracted, allowing private keys to be generated and the funds stolen."
Not sure how much clearer it can be stated.
Not sure how much clearer it can be stated.
Just because something CAN be done, that doesn't mean it's trivial. Someone's PK "can" be guessed, it's just incredibly unlikely. So for people, like myself, not 100% knowledgable on this type of tech, if someone goes through all the trouble to get the keys, but doesn't complete the final step of actually removing coins, it looks like either for some reason they can't or they are just completely naive and assuming everyone else knows exactly what they've done.