3 ms·
If there is no firmware update process that may be even more reason to avoid buying a used Trezor. No process to authenticate a device of untrusted provenance,
by jzwinck 13y ago
If there is no firmware update process that may be even more reason to avoid buying a used Trezor. No process to authenticate a device of untrusted provenance, yet bad actors could still figure out a way to tamper with the firmware (see the photo on the site of the unit in development with the cover off and an extra cable attached), or replace the board entirely.
A well-documented, well-understood firmware update process with mutual authentication (firmware and device must both be validated) might improve things for secondhand Trezor buyers.
- marssaxman 13y agoA validation process is a good idea but I'd still feel safer if the device were frozen with no way to update firmware. Many microcontrollers have "e-fuses" which you can blow post-manufacturing to render the program flash read-only, for example. One can also pot the board in epoxy to make tampering more difficult.
- finnw 13y agoWhat if the current firmware has a bug that allows an attacker to steal your keys?