3 ms·
It might be, and it might not be. It's hard to say. If your device can receive OTA updates via Bluetooth, no. If your device has a "developer" API, almost ce
by pclmulqdq 4y ago
It might be, and it might not be. It's hard to say.
If your device can receive OTA updates via Bluetooth, no. If your device has a "developer" API, almost certainly no. If the two chips share a power rail, possibly not. Without serious thought to security of requests and responses (such that MITMs are impossible), no.
There are a lot of ways this can go wrong even with separate chips.
- popol12 4y agoAs OTA updates would be signed just like regular updates, can you detail how they would make Bluetooth less secure than USB ?
- pclmulqdq 4y agoYes, a compromised Bluetooth chip may be able to replay an old update or simply block a new one and leave you with a vulnerable version of your software.
- popol12 4y agoFirst case you describe is not possible, there’s no downgrading possible on ledger ‘s OS, it’s up only Second case would be obvious to user, he would see the failing attempts at updating.