Ledger confirms spy chip implant behind wallet crypto thefts
30 points by csomar
30 points by csomar
Video showing an implanted device: https://www.youtube.com/watch?v=Nf4FEFlgv3Q
Can only commend the perps for a pretty sophisticated supply chain attack, to be honest. Don't need to compromise the secure element if you can just snoop on the display as it shows the seed values. Supposedly Ledger has known about this since march as well, at least according to some writeup I saw.
Yet another example of how the entire purpose of crypto appears to be in order for normal people to be ripped off and stolen from.
I don't understand, can't they call the folks running Bitcoin and reverse the transactions?
Do these ledger devices add a lot of convenience compared to just using a normal Yubikey equivalent?
The main advantage of hardware wallets compared to yubikeys is that the transaction you are signing is displayed on the hardware wallets itself, compared to a yubikey where there is a theoretical attack where a compromised computer displays one transaction but is really sending another one to sign to the display-less key.
of course, that purported advantage comes at the cost of substantially increased attack surface
No, it's security theatre. I looked into buying a device like this recently and they're, in my opinion, worthless.
I think this attack dovetails nicely with the discussions around passkeys that have been happening lately because "non-copyable" passkeys are actually very copyable in a similar manner.