4 ms·
From 2018: https://blog.trezor.io/psa-non-genuine-trezor-devices-979b64e359a7 https://blog.trezor.io/psa-non-genuine-trezor-devices-979b64... From their forum
by grumple 3y ago
From 2018: https://blog.trezor.io/psa-non-genuine-trezor-devices-979b64e359a7 https://blog.trezor.io/psa-non-genuine-trezor-devices-979b64...
From their forum earlier this year: https://forum.trezor.io/t/protect-from-getting-a-fake-trezor-device/5891 https://forum.trezor.io/t/protect-from-getting-a-fake-trezor...
- lxgr 3y agoNone of the methods proposed by Trezor would frustrate the attack mentioned in the article: Validate the holograms: Most users aren't forensic experts and don't have an authentic physical sample to compare their evaluation target to, only photos of one. Only buy from authorized resellers such as the official Amazon shop: Fake products have been introduced into Amazon's supply chain before [1]. The bootloader validates the firmware and displays a warning otherwise: Sure, but so does the fraudsters' bootloader. [1] https://www.redpoints.com/blog/amazon-commingled-inventory-management/ https://www.redpoints.com/blog/amazon-commingled-inventory-m...
- grumple 3y agoFrom that article, it sounds like this wouldn't be commingled inventory, as it's both private label and an opt in process. That said the obvious way to avoid amazon commingling conclusively is to buy it directly from the Trezor shop.