Comment by chinathrow
17 days ago
> This isn’t on Ledger it’s a (literal) supply chain attack.
Supply chain attack?
"Can't do shit, not my problem."
If it was that easy to shed responsibility.
17 days ago
> This isn’t on Ledger it’s a (literal) supply chain attack.
Supply chain attack?
"Can't do shit, not my problem."
If it was that easy to shed responsibility.
TBF that characterization was mine. It’s not been Ledger’s response AFAIK.
I don't know coin stuff, but if top comment's...
"We're talking here about a tiny eSIM implant and a little CPU doing OCR on the fonts appearing on the hardware wallet's screen to read the secrets during set up. So the secure element ain't tampered with."
...is accurate...it's one of the rare times I'd agree there's nothing they can do. And I was all prepared to storm in here saying "convenient excuse!"
>there's nothing they can do
The device should have bricked itself after someone opened it up to put hidden stuff inside. Also showing the key phrase to the user instead of keeping it secret to the secure element is a questionable decision.
people do need the option to repair devices, especially when they contain valuable information, so I don't see an automatic bricking to be a reasonable solution
9 replies →
> showing the key phrase to the user instead of keeping it secret to the secure element is a questionable decision.
It's not, you need to write it down for backup and recovery.