← Back to context

Comment by kotaKat

17 days ago

https://www.tibane.net/research/ledger-nano-x-implant

They're here. It's wild.

What incredible engineering

  • It's a great hack. I wonder why they didn't just spin a new board and transplant the secure-enclave chip to it.

    I guess the sweatshop workers would then need to be trained in reballing BGAs if they did that.

I want to read that but my slop detector went off. Instant disinterest.

Give me a shitty html4 page with the text ffs.

  • It's definitely AI-written, annoying as fuck god damn it, but the photos are good and the descriptions of the boards, are at least at cursory glance, pretty accurate.

    tl;dr Implant is just a little cell phone that does OCR of the hardware wallet's screen during setup to steal the recovery phrases. The implant's design has improved notably three different times before landing on a pretty darn sleek spot-welded overlay that is laminated flat onto the host.

    • Does it do OCR. The screen is very low res(128x64 monochrome iirc), so 2KB for entire buffer. I doubt there is OCR library that use less RAM than that. Better to just send the entire framebuffer and not have to worry about false negative.