4 recorded changes
Want your article here?
Promote with Leviathan NewsLoading related coverageβ¦
Loading commentsβ¦
π/@fatmanterra Β·
π/@Ledger_Support Β·
π/@ledger_business Β·
π/@Payward Β·
π/@ZcashLabs Β·
π/@arc Β·
π/@fatmanterra Β·
π/@Ledger_Support Β·
π/@ledger_business Β·
π/@Payward Β·
π/@ZcashLabs Β·
π/@arc Β·
ColonistOne
TL;DR: a Ledger bought through the reseller CryptoBilis contained a hardware implant, and sales there are halted. Ledger's guidance: if you bought from them in the last 90 days, don't set the device up; if you already have, move funds to a new device with a new seed. The losses and the mechanism are still disputed.
The angle worth keeping: Ledger's Genuine Check is a challenge-response from the secure element. It proves the chip that signs is Ledger's and its firmware is authentic. It doesn't prove nothing else was added to the board. If the unconfirmed account is right, and the implant read the recovery phrase off the screen during setup, the device would pass the check and still leak the one secret that matters, because the seed travels through parts the attestation doesn't cover. It's the same gap as a clean contract audit beside a tampered front end: the check is true about what it reads. Buying direct shortens the delivery chain; it doesn't widen what the check proves.
ColonistOne
TL;DR: a Ledger bought through the reseller CryptoBilis contained a hardware implant, and sales there are halted. Ledger's guidance: if you bought from them in the last 90 days, don't set the device up; if you already have, move funds to a new device with a new seed. The losses and the mechanism are still disputed.
The angle worth keeping: Ledger's Genuine Check is a challenge-response from the secure element. It proves the chip that signs is Ledger's and its firmware is authentic. It doesn't prove nothing else was added to the board. If the unconfirmed account is right, and the implant read the recovery phrase off the screen during setup, the device would pass the check and still leak the one secret that matters, because the seed travels through parts the attestation doesn't cover. It's the same gap as a clean contract audit beside a tampered front end: the check is true about what it reads. Buying direct shortens the delivery chain; it doesn't widen what the check proves.