Bitcoin Forum

Bitcoin => Hardware wallets => Topic started by: Tamilson on February 22, 2019, 06:26:29 AM



Title: “World’s first unhackable device”
Post by: Tamilson on February 22, 2019, 06:26:29 AM
Last year, Bitfi described its hardware wallet as the “world’s first unhackable device” — but the company has now withdrawn this claim.

The company had established a bounty hunt — initially offering a $100,000 prize, but which was then raised to $250,000 — for the first person who managed to hack its device. As reported by Cointelegraph this summer, this initiative was spearheaded by infamous investor John McAfee.

It's funny that John McAfee is really good in making hypes whatever the product or project he's investing, he'll do everything.

Though I'm impressed with this idea but somehow bothered,
Quote
This means that the private key comes into existence for a fraction of a second and vanishes immediately afterward

What will be the guarantee that it will be vanish and won't be save in their system. hmmm

Thoughts on this? Anyone?


Title: Re: “World’s first unhackable device”
Post by: Kemarit on February 22, 2019, 06:30:27 AM
But isn't it was hacked already? Not once but twice already:

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/

Quote
Security researchers have now developed a second attack, which they say can obtain all the stored funds from an unmodified Bitfi wallet. The Android-powered $120 wallet relies on a user-generated secret phrase and a “salt” value — like a phone number — to cryptographically scramble the secret phrase. The idea is that the two unique values ensure that your funds remain secure.

But the researchers say that the secret phrase and salt can be extracted, allowing private keys to be generated and the funds stolen.

And I think this is a old news already. Nothing is unhackable in this crypto verse. Anyone will find a way to exploit systems, just saying, whether your hardware or software attacks.


Title: Re: “World’s first unhackable device”
Post by: Vaskiy on February 22, 2019, 06:38:53 AM
But isn't it was hacked already? Not once but twice already:

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/

Quote
Security researchers have now developed a second attack, which they say can obtain all the stored funds from an unmodified Bitfi wallet. The Android-powered $120 wallet relies on a user-generated secret phrase and a “salt” value — like a phone number — to cryptographically scramble the secret phrase. The idea is that the two unique values ensure that your funds remain secure.

But the researchers say that the secret phrase and salt can be extracted, allowing private keys to be generated and the funds stolen.

And I think this is a old news already. Nothing is unhackable in this crypto verse. Anyone will find a way to exploit systems, just saying, whether your hardware or software attacks.
Soon after McAfee announced the unhackable wallet a team united and hacked the wallet, later it was given some reason from McAfee. As in the quote system exploitation will happen throughout unlike the development. Likewise the loophole is very small, which is very hard to find. For bug fixers it is very simple to rectify, but find it is the difficult task.


Title: Re: “World’s first unhackable device”
Post by: Tamilson on February 22, 2019, 06:47:51 AM
And I think this is a old news already. Nothing is unhackable in this crypto verse. Anyone will find a way to exploit systems, just saying, whether your hardware or software attacks.

Damn you cointelegraph, haha, yeah seems it's last year's news but cointele just published it yesterday, so I thought it is. Sorry for that.

Also found this link and had a face palm. 🤦
https://cointelegraph.com/news/bitfi-closes-wallet-bounty-program-removes-unhackable-from-branding

So the title of this thread should be
 “World’s first unhackable device”


Title: Re: “World’s first unhackable device”
Post by: maydna on February 22, 2019, 06:49:50 AM
But isn't it was hacked already? Not once but twice already:

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/
I guess John McAfee will feel the shame because of that news and he will try to find the other way to avoid the news and will say "nothing to be worried, the hack happen is because we are not yet ready to receive any attacking."

Quote
Nothing is unhackable in this crypto verse.
Besides that, it just a human creation which cannot always be safe. As you say, someone will try to break the security because of the bigger prizes is waiting for them.
I bet that many people (hackers/coders/IT security) will try to figure out the hole so they can penetrate and get something off the device.


Title: Re: “World’s first unhackable device”
Post by: Haunebu on February 22, 2019, 07:10:12 AM
But isn't it was hacked already? Not once but twice already:

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/

Quote
Security researchers have now developed a second attack, which they say can obtain all the stored funds from an unmodified Bitfi wallet. The Android-powered $120 wallet relies on a user-generated secret phrase and a “salt” value — like a phone number — to cryptographically scramble the secret phrase. The idea is that the two unique values ensure that your funds remain secure.

But the researchers say that the secret phrase and salt can be extracted, allowing private keys to be generated and the funds stolen.

And I think this is a old news already. Nothing is unhackable in this crypto verse. Anyone will find a way to exploit systems, just saying, whether your hardware or software attacks.

Lol. This is news to me. John Mcafee has seriously messed up his reputation by hyping the shit out of so many coins and tokens in the cryptoverse and is now living with his family running from the government.

Why would anyone vote for someone like that? This guy had everything and I do like how he supports the cryptocurrency market regularly, but hyping stuff up unnecessarily is not helping anyone.


Title: Re: “World’s first unhackable device”
Post by: kelz1 on February 22, 2019, 07:43:53 AM
Sounds like a snapchat hardware device where someone will create a screenshot type hack that will capture the private keys in that one second


Title: Re: “World’s first unhackable device”
Post by: mrdeposit on February 22, 2019, 07:49:20 AM
It does not make sense to have something that can not be hacked in the online world. It may be tight on security, but how any device can be ''unhackable'' ?
Just found it : https://cointelegraph.com/news/unhackable-wallet-reportedly-breached-hackers-claim-to-meet-bounty-conditions , Likely Mcafee silenced them with money.


Title: Re: “World’s first unhackable device”
Post by: nutildah on February 22, 2019, 07:50:55 AM
I guess John McAfee will feel the shame because of that news and he will try to find the other way to avoid the news and will say "nothing to be worried, the hack happen is because we are not yet ready to receive any attacking."

John McAfee can't feel shame; that's one of the great side effects of being a sociopath. The part of his brain that feels the most human of emotions, like conscience, shame and empathy, is either faulty or missing altogether.


Title: Re: “World’s first unhackable device”
Post by: Tamilson on February 22, 2019, 09:08:48 AM
I guess John McAfee will feel the shame because of that news and he will try to find the other way to avoid the news and will say "nothing to be worried, the hack happen is because we are not yet ready to receive any attacking."

John McAfee can't feel shame; that's one of the great side effects of being a sociopath. The part of his brain that feels the most human of emotions, like conscience, shame and empathy, is either faulty or missing altogether.

Is McAfee still human? Whenever I see some icos that paid McAfee as advisor, I just feel they already lose the battle, better yet don't invest on that project.

But this guy still stand for his so called unhackable wallet
Earlier this month, Bitfi CEO Daniel Keshin wrote to Cointelegraph regarding the alleged hack by fifteen-year-old Saleem Rashid. Khesin said:

“As of now, we have no evidence that our device can be hacked and if someone succeeds in doing so then we will immediately put out a fix to all devices to address the vulnerability that was discovered and it will be unhackable once again.”


Title: Re: “World’s first unhackable device”
Post by: MakeMoneyBtc on February 22, 2019, 09:11:50 AM
I think everything can be hacked, especially in the era we are living. And hackers have proven that by hacking probably almost every possible system in the world. If even NASA or FBI or any other institution cannot create a system that is unkackable then I don't think anyone else can.


Title: Re: “World’s first unhackable device”
Post by: nutildah on February 22, 2019, 09:16:34 AM
I guess John McAfee will feel the shame because of that news and he will try to find the other way to avoid the news and will say "nothing to be worried, the hack happen is because we are not yet ready to receive any attacking."

John McAfee can't feel shame; that's one of the great side effects of being a sociopath. The part of his brain that feels the most human of emotions, like conscience, shame and empathy, is either faulty or missing altogether.

Is McAfee still human?

That's a legitimate question. Technically, he still possesses above-average intelligence, however his prefrontal cortex is underdeveloped, rendering him also possessing the characteristics of a great ape. He claims to have "47 biological children," so if even 1 of these was actually true, then he would indeed be classified as a human because he can still breed with other humans.


Title: Re: “World’s first unhackable device”
Post by: bitfocus on February 22, 2019, 09:35:00 AM
Actually it had been hacked several times and then they stopped claiming their wallet Unhackable

Bitfi removes unhackable claim from crypto wallet
https://www.csoonline.com/article/3302363/security/bitfi-removes-unhackable-claim-from-crypto-wallet.html


Title: Re: “World’s first unhackable device”
Post by: r32godzilla on February 22, 2019, 10:06:53 AM
But isn't it was hacked already? Not once but twice already:

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/

Quote
Security researchers have now developed a second attack, which they say can obtain all the stored funds from an unmodified Bitfi wallet. The Android-powered $120 wallet relies on a user-generated secret phrase and a “salt” value — like a phone number — to cryptographically scramble the secret phrase. The idea is that the two unique values ensure that your funds remain secure.

But the researchers say that the secret phrase and salt can be extracted, allowing private keys to be generated and the funds stolen.

And I think this is a old news already. Nothing is unhackable in this crypto verse. Anyone will find a way to exploit systems, just saying, whether your hardware or software attacks.
He didn´t get private key from the device for now.. but he totally changes the software of the device and that is a big problem. Has he received the bug bounty money? :D


Title: Re: “World’s first unhackable device”
Post by: ansarose1 on February 22, 2019, 10:12:26 AM
A good thing to hear about crypto news that has a good benefit to all crypto enthusiast. It's a good thing that there is a device that is unhackable. But i further think that hackers now are making a way on how to deal with this device or to hack it. But hopefully this would be unhackable.


Title: Re: “World’s first unhackable device”
Post by: dothebeats on February 22, 2019, 11:00:54 AM
Nothing is unhackable in this crypto verse.

Bitcoin itself and its private keys would be the ones remaining to be 'unhackable,' if you count brute-forcing as a method of hacking, that is. Certainly, no system devised in this day and age is bulletproof: there will be vectors of attack present in every system no matter how strong or how bulletproof they seem to be. As for the claim of John McAfee, I applaud the man for his works on cybersecurity, but he must also know that he is not a god when it comes to such things.


Title: Re: “World’s first unhackable device”
Post by: blockman on February 22, 2019, 11:57:23 AM
So the title of this thread should be
 “World’s first unhackable device”
Exactly, the claim for that has been gone. They can't prove their claim as someone successfully hacked that device, yes this is one of the oldest. And you know what's more?

The one who's able to hack that wallet is just 15 years old by that time named Saleem Rashid.

(https://www.theinquirer.net/inquirer/news/3060878/john-mcafees-bitfit-crypto-wallet-hacked-to-play-doom)


Title: Re: “World’s first unhackable device”
Post by: Kemarit on February 22, 2019, 12:09:54 PM
So the title of this thread should be
 “World’s first unhackable device”
Exactly, the claim for that has been gone. They can't prove their claim as someone successfully hacked that device, yes this is one of the oldest. And you know what's more?

The one who's able to hack that wallet is just 15 years old by that time named Saleem Rashid.

(https://www.theinquirer.net/inquirer/news/3060878/john-mcafees-bitfit-crypto-wallet-hacked-to-play-doom)

Not only that but Saleem previously hacked or exploited Ledger in 2017. For more of his exploits you can read below. This kid is really a genius.

https://saleemrashid.com/

I don't know if he receives any bounty from Bitfi, however, he turn down the bounty in the Ledger exploit because Ledger wanted a NDA, which he refuses so now he shows everything how it can be done. You can follow everything on his blog and his other exploits as well.


Title: Re: “World’s first unhackable device”
Post by: betty11 on February 22, 2019, 02:07:00 PM
John McAfee at it again. Well am not a security expert, only time will tell if they are telling the truth or not. Maybe they just want to market their product, this time McAfee had to spearhead it. I doubt if there is device that can't be hacked with time, it will only take time. Blockchain is a network and not a device.


Title: Re: “World’s first unhackable device”
Post by: Becky666 on February 22, 2019, 02:22:16 PM
A good thing to hear about crypto news that has a good benefit to all crypto enthusiast. It's a good thing that there is a device that is unhackable. But i further think that hackers now are making a way on how to deal with this device or to hack it. But hopefully this would be unhackable.

Nothing under the sun is said to be unhackable. Security companies have been hacked many times  around the world even the giant of them was hacked, though time is the strength of a hacker because he/she device means of penetration. Have seen series of hack-life and have come to a conclusion that nothing is unhackable except you and your device be ignore .


Title: Re: “World’s first unhackable device”
Post by: awawo on February 22, 2019, 02:53:09 PM
There is no device that is unhackable it only require time before the security will be broken by hackers, mcafee fails to acknowledge the fact that security protocols is an ever developing aspects of any device and it wrong to boost on you own level of security because give it time and it will be out beaten.


Title: Re: “World’s first unhackable device”
Post by: pat4cryptoreal on February 22, 2019, 03:34:06 PM
I was attracted to this thread because I saw the topic "World's first unhackable device". I want everyone to have in mind that companies or individual can say anything just to attract investors and popularity to the project. Producing unhackable device is impossible.


Title: Re: “World’s first unhackable device”
Post by: Artemis3 on February 22, 2019, 05:02:14 PM
A good thing to hear about crypto news that has a good benefit to all crypto enthusiast. It's a good thing that there is a device that is unhackable. But i further think that hackers now are making a way on how to deal with this device or to hack it. But hopefully this would be unhackable.

Nothing under the sun is said to be unhackable. Security companies have been hacked many times  around the world even the giant of them was hacked, though time is the strength of a hacker because he/she device means of penetration. Have seen series of hack-life and have come to a conclusion that nothing is unhackable except you and your device be ignore .

Here, I'll show you an "unhackable" device:

https://en.bitcoin.it/w/images/en/6/60/Mnemonic-seed-still-life.jpg (https://en.bitcoin.it/wiki/Seed_phrase)

If by "hacking" you mean the "evil wrong doers from the net" getting to your funds... This device is able to safely keep your private key as seed words (https://en.bitcoin.it/wiki/Seed_phrase) away from the network. Its also air gaped too! Just make sure you store it properly and make a copy by hand to store it in a separate and secure physical place (in case the first place burns down or something).

You can make one yourself by booting from a linux live iso, install Electrum, create a wallet and write the seed words which are unique to you. Then you can copy your public addresses electronically or print them; turn off the pc.

Now you can deposit anything you want to any of those public addresses without any fear of "evil wrong doers from the net". You can verify the deposit using any blockchain explorer online.

Notice that you are not saving the wallet or backing up anything. Your backup are those words, and only those words. They can recreate your wallet at any point later, and you then have access to your funds. That's why they are so important to protect physically and from the view of any electronic devices.


Title: Re: “World’s first unhackable device”
Post by: kryptqnick on February 22, 2019, 08:02:37 PM
But isn't it was hacked already? Not once but twice already:

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/
I also thought about that, since the op mentioned that the claim was withdrawn. The behavior of the company does not encourage trust, though, according to another article  (https://cointelegraph.com/news/bitfi-closes-wallet-bounty-program-removes-unhackable-from-branding)on cointelegraph:
Quote
the company admitted "vulnerabilities," and yet avoided speaking about multiple alleged hacks of the device...
the company responded to the hacking claims and subsequent criticism by calling them an “army of trolls” hired by hard wallet competitors Trezor and Ledger.
As the new article says, however, they are planning to launch another wallet. Perhaps they are now working on the vulnerabilities that led to the previous one being hacked. Returning to the point of being hacked, though, John McAfee explained in a tweet that it was not a hack, but an unsuccessful attempt, since the coins were not stolen. I am not sure what to think of it, it seems hard to understand what exactly happened there, but I am pretty sure they won't make any bounties for hackers with the new wallet  :D


Title: Re: “World’s first unhackable device”
Post by: bones261 on February 22, 2019, 10:00:56 PM
     The Bitfi wallet was just bad. It was nothing but a glorified brainwallet. It would only be as secure as the password that you came up with. We all know that under most circumstances a brainwallet really isn't that secure since any password that a person can remember probably does not have the required entropy. It didn't help that people were also able to easily change the firmware on the device. I'm not certain if this could have been done remotely, though.


Title: Re: “World’s first unhackable device”
Post by: blockman on February 23, 2019, 09:45:05 AM
So the title of this thread should be
 “World’s first unhackable device”
Exactly, the claim for that has been gone. They can't prove their claim as someone successfully hacked that device, yes this is one of the oldest. And you know what's more?

The one who's able to hack that wallet is just 15 years old by that time named Saleem Rashid.

(https://www.theinquirer.net/inquirer/news/3060878/john-mcafees-bitfit-crypto-wallet-hacked-to-play-doom)

Not only that but Saleem previously hacked or exploited Ledger in 2017. For more of his exploits you can read below. This kid is really a genius.

https://saleemrashid.com/

I don't know if he receives any bounty from Bitfi, however, he turn down the bounty in the Ledger exploit because Ledger wanted a NDA, which he refuses so now he shows everything how it can be done. You can follow everything on his blog and his other exploits as well.

Woah so he has his website, thanks for that I'll get to know more him there.

I looked for some relative news articles if Bitfi paid him but it seems that they neglected and denied Saleem's work.


Title: Re: “World’s first unhackable device”
Post by: Ucy on February 23, 2019, 07:32:06 PM
Where does the private keys vanish to? I saw his post on the so called unhackable device. I believed it a little until I saw the part about the private keys vanishing immediately. Meaning it appears atall on the device. So, wouldn't the hackers be able to steal the keys at the "fraction of seconds" they appear?


Title: Re: “World’s first unhackable device”
Post by: TryNinja on February 24, 2019, 02:51:35 AM
Where does the private keys vanish to? I saw his post on the so called unhackable device. I believed it a little until I saw the part about the private keys vanishing immediately. Meaning it appears atall on the device. So, wouldn't the hackers be able to steal the keys at the "fraction of seconds" they appear?
It is not, and it is an expensive (and shit) "brain wallet". The private key is generated every time you enter your brain wallet phrase. The problem is that the hardware/software is complete shit and it's easily hackable. There are videos where people can easily install custom firmware in just a few steps and show that the hardware is basically an expensive android phone/tablet. It's literally a scam for a quick buck by McAfee .