5 ms·
Maybe not the best timing for a launch of a device that's basically the Nano S + Bluetooth after the 25C3 presentation which showed what security issues the Nan
by eis 8y ago
Maybe not the best timing for a launch of a device that's basically the Nano S + Bluetooth after the 25C3 presentation which showed what security issues the Nano S is facing. I doubt they had time to address those.
I'd prefer the "old" model with USB connection because it doesn't give much up in terms of usability but has a considerable upside for security. With Bluetooth all that's needed is a firmware exploit (which is a realistic assumption, we've been there) and an attacker only has to be within range of a few meters. He wont be able to steal the private keys but he'll be able to completely empty any wallets.
Note: the following paragraph might not be true anymore, see below comments.
Keep in mind: all the bluetooth, screen and button IO goes through an unsecure processor which then asks the secure chip to sign something. So exploiting the unsecure part pretty much defeats the whole thing.
- mortalkastor 8y agoDisclosure: I'm a dev at Ledger working on the desktop and mobile apps. I'm not in the hardware team nor the security team. > all the bluetooth, screen and button IO goes through an unsecure processor On the new device, the screen and buttons are now directly wired to the ST33 secure element
- eis 8y agoThis is great to hear. The website did not contain this information from what I could see. Just to clarify: does that mean that the screen and buttons are 100% controlled by the ST33 and do not go through the unsecure chip?
- mortalkastor 8y agoAbsolutely.
- pello 8y agohttps://www.ledger.fr/2018/12/28/chaos-communication-congress-in-response-to-wallet-fails-presentation/ https://www.ledger.fr/2018/12/28/chaos-communication-congres...
- xek6ae 8y ago35C3 ... https://wallet.fail/ https://wallet.fail/