32032141

7 ms·

1. 31.▲
   by 32032141 8y ago

   Even if the firmware on both firmwares are completely virgin, this doesn't say much about the safety of the device. I agree that security is not all or nothing, protection in layers is always the goal of secure products. I do however c
2. 32.▲
   by 32032141 8y ago

   This is true. Many of these devices are using effectively joke crypto libraries however, theres a world of difference between something that needs a sophisticated setup, and the python crypto library that was transliterated into C and make
3. 33.▲
   by 32032141 8y ago

   Agreed. Researchers owe the companies absolutely nothing.
4. 34.▲
   by 32032141 8y ago

   Ledger has for a long time been grossly inept in security, there's really nothing absurd about this attack at all. In the Bitcoin industry we frequently see very detailed setup for long timeframe attacks and substantial effort going in
5. 35.▲
   by 32032141 8y ago

   I've been doing security research in this industry for a while and it's effectively not worth anybodies time to attempt to report hardware wallet, or software bugs 'responsibly'. I've found that by far the most comm
6. 36.▲
   by 32032141 8y ago

   This is largely the issue with 'hardware wallets', the security models aren't particularly well defined and this leads to ambiguity like this. You're absolutely correct in that the concern is the device is not genuine, w