logoalt Hacker News

tristor • today at 3:46 PM • 2 replies • view on HN

The lack of security on these devices is shocking as someone who has worked in the hardware security space, but I guess it shouldn't be surprising that this like everything else involving crypto is some sort of elaborate scam done by non-experts and bad actors.


Replies

hackermailman • today at 4:23 PM

I like the fancy security theatre display that the Trezor device has but turns out it initializes with a copy of the legitimate firmware then saboteurs simply overwrite the random seed generator with a predetermined seed after all the startup security checks. https://www.zetter-zeroday.com/trezor-wallets-also-compromis...

lxgr • today at 4:23 PM

What would you be doing differently? There are many hardware wallet vendors out there, and I consider Ledger to be relatively sophisticated. This attack was extremely sophisticated as well.

➕ show 1 reply