Comment by cowlevel
17 days ago
Not mentioned in article: MediaMarkt, the German equivalent of Best Buy, was selling these compromised devices on store shelves in every city in Germany.
17 days ago
Not mentioned in article: MediaMarkt, the German equivalent of Best Buy, was selling these compromised devices on store shelves in every city in Germany.
Selling Ledger wallets or compromised Ledger wallets? My understanding was a reputable reseller (Cryptobilis) was bought and then the wallets were modified via the reseller chain. This isn’t on Ledger it’s a (literal) supply chain attack. Unless MediaMarkt was buying via the reseller?
according to this guy, compromised (https://x.com/0xJohannes_/status/2109240472933671125). Interestingly, Mediamarkt removed the device from their shop quickly after (https://www.mediamarkt.de/de/product/_ledger-sas-nano-s-plus... now 404).
They would remove them regardless of known compromise, because they have no way to verify it in-house and it’s the simplest PR and legal strategy.
1 reply →
> This isn’t on Ledger it’s a (literal) supply chain attack.
Supply chain attack?
"Can't do shit, not my problem."
If it was that easy to shed responsibility.
TBF that characterization was mine. It’s not been Ledger’s response AFAIK.
I don't know coin stuff, but if top comment's...
"We're talking here about a tiny eSIM implant and a little CPU doing OCR on the fonts appearing on the hardware wallet's screen to read the secrets during set up. So the secure element ain't tampered with."
...is accurate...it's one of the rare times I'd agree there's nothing they can do. And I was all prepared to storm in here saying "convenient excuse!"
12 replies →
I wonder what the liabilities are for that
Not much unless you can show that they knew about it. Otherwise, they are just as much a victim.
They are liable. In Germany the seller of a product is responsible not the producer.
4 replies →
Why doesn't it surprise me that the shittiest company Media Markt is somehow involved in this. These guys are about to close shop anyway, rest in piss Mediamarkt.
Genuinely curious, why the hate for MediaMarkt?