3 ms·
> The bootloader checks the digital signature of the firmware and, if an anomaly is detected, displays an unoriginal firmware message and deletes all the data i
by munificent 3y ago
> The bootloader checks the digital signature of the firmware and, if an anomaly is detected, displays an unoriginal firmware message and deletes all the data in the wallet.
This seems like a horrendous design, like a safe that burns the money inside if you try to tamper with it. Sure, it might protect a malicious thief from absconding with the funds, but it is also an attack vector for any bad actor that simply wishes to cause you harm.
- derefr 3y agoIf the attacker's goal was to erase the user's data, and the firmware _didn't_ erase data on invalidation, then the attacker could simply write a firmware that erases the user's data.
- Forbo 3y agoWhy complicate things? Just smash the device. This is only effective if the user doesn't have their seed phrase. Edit: Looks like I was beaten to this down thread.
- derefr 3y agoI think in this case the idea is that the attacker isn't physically in possession of the device, but rather has tricked the user into running a malicious firmware updater for the device.
- Forbo 3y agoAh, yeah,that makes sense. Hadn't considered that angle. Would track with the user behavior exposed here, namely getting their stuff from an unofficial source (be it the device itself or the firmware).
- phire 3y agoThe user is meant to keep a backup copy of the seed written down somewhere safe. If the firmware had been tampered with, there is no safe way to extract the key. Better that the user uses the recovery seed on a fresh device. Which means the weakest link of your fancy hardware wallet is how well you hide that bit of paper with your seed phrase.
- StingyJelly 3y agoThus the importance of backing up the seed phrase. Bad actor that wishes to cause harm can use a hammer.
- lxgr 3y agoIf an attacker succeeds in tampering with the firmware on a crypto wallet (and more generally any secure authentication/transaction confirmation device), losing authentication/signature capabilities is very likely the second worst outcome.
- munificent 3y agoGood point.
- quickthrower2 3y agoSame design as the HDD on your laptop. The solution is a backup.
- ibz 3y agoUnlike a safe, a hardware wallet doesn't store money, it stores private keys. These keys are derived from a seed phrase you are supposed to back up offline.