Bitcoin Forum
May 07, 2024, 01:36:34 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Trezor hardware flaw, hackeable.  (Read 1053 times)
luicon (OP)
Sr. Member
****
Offline Offline

Activity: 262
Merit: 250



View Profile
August 18, 2017, 05:11:24 AM
Last edit: August 18, 2017, 06:45:26 AM by luicon
 #1

https://medium.com/@Zero404Cool/trezor-security-glitches-reveal-your-private-keys-761eeab03ff8

i just came across this.

at trezor website they said its fixed/patched with the 1.5.2 firmware,


1715088994
Hero Member
*
Offline Offline

Posts: 1715088994

View Profile Personal Message (Offline)

Ignore
1715088994
Reply with quote  #2

1715088994
Report to moderator
Even if you use Bitcoin through Tor, the way transactions are handled by the network makes anonymity difficult to achieve. Do not expect your transactions to be anonymous unless you really know what you're doing.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715088994
Hero Member
*
Offline Offline

Posts: 1715088994

View Profile Personal Message (Offline)

Ignore
1715088994
Reply with quote  #2

1715088994
Report to moderator
n3rvi0zz0
Sr. Member
****
Offline Offline

Activity: 289
Merit: 250


View Profile
August 18, 2017, 05:33:18 AM
 #2

a matter of time all the hardware/software is hacked  no surprises


always use a papper wallet

https://bizzilion.com/?ref=n3rvi0zz0

Earn up to 1.5% daily investing in the best platform of internet
luicon (OP)
Sr. Member
****
Offline Offline

Activity: 262
Merit: 250



View Profile
August 18, 2017, 06:06:33 AM
 #3

a matter of time all the hardware/software is hacked  no surprises


always use a papper wallet

well, paper wallet is no safer than a trezor,
when you need to move money you need to insert the private key on the computer,

any hardware wallet will never share the private key with a computer, it will just sign the transaction, making it valid without sharing the private key,

this hack shows its possible to retrieve all founds from a trezor, in case you lose it or someone stole it from you,
HeRetiK
Legendary
*
Offline Offline

Activity: 2926
Merit: 2091


Cashback 15%


View Profile
August 18, 2017, 03:58:21 PM
 #4

It's good to see SatoshiLabs taking the necessary steps as swift as they did.

Apart from that, as long as physical access to the Trezor is necessary to hack it, I'm not really worried. XKCD's infamous $5 wrench attack would worry me more in this case.


a matter of time all the hardware/software is hacked  no surprises

always use a papper wallet

Did you write your seed words by hand or did you use a printer? Because some printers store printed pages in an internal data storage. Just a heads up for when you throw out your old printer.

.
.HUGE.
▄██████████▄▄
▄█████████████████▄
▄█████████████████████▄
▄███████████████████████▄
▄█████████████████████████▄
███████▌██▌▐██▐██▐████▄███
████▐██▐████▌██▌██▌██▌██
█████▀███▀███▀▐██▐██▐█████

▀█████████████████████████▀

▀███████████████████████▀

▀█████████████████████▀

▀█████████████████▀

▀██████████▀▀
█▀▀▀▀











█▄▄▄▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.
CASINSPORTSBOOK
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀▀█











▄▄▄▄█
n3rvi0zz0
Sr. Member
****
Offline Offline

Activity: 289
Merit: 250


View Profile
August 18, 2017, 04:19:03 PM
 #5

It's good to see SatoshiLabs taking the necessary steps as swift as they did.

Apart from that, as long as physical access to the Trezor is necessary to hack it, I'm not really worried. XKCD's infamous $5 wrench attack would worry me more in this case.


a matter of time all the hardware/software is hacked  no surprises

always use a papper wallet

Did you write your seed words by hand or did you use a printer? Because some printers store printed pages in an internal data storage. Just a heads up for when you throw out your old printer.


of course by hand i throw away my new hp as soon as i saw she was storing and SENDING a fucking copy of everything i have printed

world is becoming, unsafe and weird

https://bizzilion.com/?ref=n3rvi0zz0

Earn up to 1.5% daily investing in the best platform of internet
BitcoinNewsMagazine
Legendary
*
Offline Offline

Activity: 1806
Merit: 1164



View Profile WWW
August 18, 2017, 04:28:21 PM
 #6

Trezor fixed exploit with firmware update 1.5.2 https://blog.trezor.io/fixing-physical-memory-access-issue-in-trezor-2b9b46bb4522 case closed no more FUD

KeepKey is probably not vulnerable according to dev but they will update firmware if needed. Leger Nano S not affected.

Caesar-Giulius
Sr. Member
****
Offline Offline

Activity: 728
Merit: 250


Buy, sell and store real cryptocurrencies


View Profile
August 18, 2017, 05:27:42 PM
 #7

Thank you for the information, hopefully the hardware wallet can have better security.

.


.
.



▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██████████████████████████████████████
██████████████████████████████████████
███████████████████████▀██████████████
█████████▄▄      ▀▀██▀╜  ▀▀███████████
████████████▄       ██   ▀^╓▀█████████
██████████████      ║█    ,▀██████████
█████████████▄▄      █▌   ████████████
████████████████▄     ▀█▄  ███████████
████████████████▀,,,    ╙▀▀█▀ ████████
█████████████████▀▀▀█▄▄       ████████
███████████████▀     ▀███████▀████████
██████████████▌       ▐█* ▀▓▀ ████████
████████████*██▄     ▄██▄▄▄▄▄▄████████
██████████▀`  ▀██▄   ▀████████████████
████████▀`  ▄█████▌   ╙███████████████
████████▄,   ▀████ ,,,  "▀▀███████████
██████████,,,,, ╙█▄███▄▄,,,,╙▀████████
██████████████████████████████████████
██████████████████████████████████████
██████████████████████████████████████
L B X.


■                         ■                        ■                        ■                        ■                        ■                         ■
The London Block Exchange
■                         ■                        ■                        ■                        ■                        ■                         ■
.


.
.


.
WDownload OnW
[.
          ▄▄█▀
         ███▀
   ▄▄▄▄  ▀  ▄▄▄▄
 ▄███████▄██████▌
▐██████████████▌
███████████████
▐██████████████▌
 ███████████████▌
  ██████████████▌
   ▀████▀▀▀████▀
/      ▌ ▄▄▄▄ ▐
     ▄█▀████▀█▄
    ▐██████████▌
 ▄▄ ▀▀▀▀▀▀▀▀▀▀▀▀ ▄▄
▐██▌████████████▐██▌
▐██▌████████████▐██▌
▐██▌████████████▐██▌
 ▀▀ ████████████ ▀▀
    ▀██████████▀
      ▐██  ██▌
      ▐██  ██▌
]
.


BeastLee
Newbie
*
Offline Offline

Activity: 35
Merit: 0


View Profile
August 18, 2017, 06:03:46 PM
 #8

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
TryNinja
Legendary
*
Offline Offline

Activity: 2828
Merit: 6977



View Profile WWW
August 18, 2017, 07:12:10 PM
 #9

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
You still need physical access to the hardware to do this kind of "hack". And looks like they already fixed it.

If someone has access to your paper wallet, they will have access to your wallet aswell. Everything has their pros and cons. It's not like it's much safer.

.
.HUGE.
▄██████████▄▄
▄█████████████████▄
▄█████████████████████▄
▄███████████████████████▄
▄█████████████████████████▄
███████▌██▌▐██▐██▐████▄███
████▐██▐████▌██▌██▌██▌██
█████▀███▀███▀▐██▐██▐█████

▀█████████████████████████▀

▀███████████████████████▀

▀█████████████████████▀

▀█████████████████▀

▀██████████▀▀
█▀▀▀▀











█▄▄▄▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.
CASINSPORTSBOOK
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀▀█











▄▄▄▄█
john2231
Hero Member
*****
Offline Offline

Activity: 924
Merit: 1001



View Profile
August 18, 2017, 11:21:54 PM
 #10

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
Well taking down note of your private keys still not safe in the paper it can be still be someone can read your private keys or your paper can be disappear and forgot where you put your paper wallet ..
For me the best thing for me is to save my bitcoins and use the camera to have a picture also the barcode which is you can help to save your private keys via bar code and import it in the wallet once you need it save your private keys and barcode with password in your phone and privately sync it to your google drive this is just for backup once your computer crash or corrupted and never had any problem with it..
Just like the quoted there are wallet with different pros and cons there are no wallet are very secured and never experience any issue..

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
You still need physical access to the hardware to do this kind of "hack". And looks like they already fixed it.

If someone has access to your paper wallet, they will have access to your wallet aswell. Everything has their pros and cons. It's not like it's much safer.
XXX_BTC1@
Newbie
*
Offline Offline

Activity: 28
Merit: 0


View Profile
November 01, 2017, 06:19:34 AM
 #11


compare to other wallets trezor is the best and secure wallet. it is easy to use  interface for your trezor device. now more hardware wallets are available in  the market. so in that trezor is the best and secure wallet once try to this wallet if you get more security for your bit coin. trezor is one of the trusted hardware wallet for bit coin. we have to carry it is easily. no one can hack to this wallet. so you have to choose and use trezor wallet.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!