Comment by seviu
17 days ago
I would love to know if I can use one of this to get unlimited data worldwide.
Jokes aside, keystone wallets are air gapped. And not air gapped but awesome the lesser known but imo best of all, gridplus lattice1.
Heck, even a trezor, despite their mail provider being hacked, is better.
I, however, dont endorse the iPhone idea.
Just don’t buy ledger, terrible company. Many of my friends are getting endless spam because of them. The key backup is a disaster after they promised it was not possible to retrieve it. Their software stack is closed source.
This is imo the last nail in the coffin for them. They should refund all the money lost, and issue a worldwide recall.
Lots to hate about them.
How does your air gap defend against someone opening the case and adding a wireless transmitter though? Which is what happened here.
You are right, anti tampering, and not even that. Air gapping protects you from other threat.
Lattice for example, has strong anti-tampering features.
Then what is the best solution aside from tightly controlling the supply chain?
There isn't one, that's sort of the thing. The invisible hand of downvotes is the only thing indicating that in the thread, and thus only indirectly. We only have two choices, a magical tampering detector that bricks the whole thing (maybe desirable for some applications, if it never false positive'd), or, the vulnerability.
I'm not even sure a tampering detector would help. If this can happen, I'm fairly sure someone would figure out how to do the ocr by appending components externally.
1 reply →