Bitcoin Forum
November 25, 2017, 06:16:27 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Trezor hardware flaw, hackeable.  (Read 889 times)
luicon
Sr. Member
****
Offline Offline

Activity: 263



View Profile
August 18, 2017, 05:11:24 AM
 #1

https://medium.com/@Zero404Cool/trezor-security-glitches-reveal-your-private-keys-761eeab03ff8

i just came across this.

at trezor website they said its fixed/patched with the 1.5.2 firmware,


1511590587
Hero Member
*
Offline Offline

Posts: 1511590587

View Profile Personal Message (Offline)

Ignore
1511590587
Reply with quote  #2

1511590587
Report to moderator
1511590587
Hero Member
*
Offline Offline

Posts: 1511590587

View Profile Personal Message (Offline)

Ignore
1511590587
Reply with quote  #2

1511590587
Report to moderator
Join ICO Now Coinlancer is Disrupting the Freelance marketplace!
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1511590587
Hero Member
*
Offline Offline

Posts: 1511590587

View Profile Personal Message (Offline)

Ignore
1511590587
Reply with quote  #2

1511590587
Report to moderator
1511590587
Hero Member
*
Offline Offline

Posts: 1511590587

View Profile Personal Message (Offline)

Ignore
1511590587
Reply with quote  #2

1511590587
Report to moderator
1511590587
Hero Member
*
Offline Offline

Posts: 1511590587

View Profile Personal Message (Offline)

Ignore
1511590587
Reply with quote  #2

1511590587
Report to moderator
n3rvi0zz0
Sr. Member
****
Offline Offline

Activity: 283


View Profile
August 18, 2017, 05:33:18 AM
 #2

a matter of time all the hardware/software is hacked  no surprises


always use a papper wallet
luicon
Sr. Member
****
Offline Offline

Activity: 263



View Profile
August 18, 2017, 06:06:33 AM
 #3

a matter of time all the hardware/software is hacked  no surprises


always use a papper wallet

well, paper wallet is no safer than a trezor,
when you need to move money you need to insert the private key on the computer,

any hardware wallet will never share the private key with a computer, it will just sign the transaction, making it valid without sharing the private key,

this hack shows its possible to retrieve all founds from a trezor, in case you lose it or someone stole it from you,
HeRetiK
Hero Member
*****
Offline Offline

Activity: 574


the forkings will continue until morale improves


View Profile
August 18, 2017, 03:58:21 PM
 #4

It's good to see SatoshiLabs taking the necessary steps as swift as they did.

Apart from that, as long as physical access to the Trezor is necessary to hack it, I'm not really worried. XKCD's infamous $5 wrench attack would worry me more in this case.


a matter of time all the hardware/software is hacked  no surprises

always use a papper wallet

Did you write your seed words by hand or did you use a printer? Because some printers store printed pages in an internal data storage. Just a heads up for when you throw out your old printer.

n3rvi0zz0
Sr. Member
****
Offline Offline

Activity: 283


View Profile
August 18, 2017, 04:19:03 PM
 #5

It's good to see SatoshiLabs taking the necessary steps as swift as they did.

Apart from that, as long as physical access to the Trezor is necessary to hack it, I'm not really worried. XKCD's infamous $5 wrench attack would worry me more in this case.


a matter of time all the hardware/software is hacked  no surprises

always use a papper wallet

Did you write your seed words by hand or did you use a printer? Because some printers store printed pages in an internal data storage. Just a heads up for when you throw out your old printer.


of course by hand i throw away my new hp as soon as i saw she was storing and SENDING a fucking copy of everything i have printed

world is becoming, unsafe and weird
BitcoinNewsMagazine
Legendary
*
Offline Offline

Activity: 980



View Profile WWW
August 18, 2017, 04:28:21 PM
 #6

Trezor fixed exploit with firmware update 1.5.2 https://blog.trezor.io/fixing-physical-memory-access-issue-in-trezor-2b9b46bb4522 case closed no more FUD

KeepKey is probably not vulnerable according to dev but they will update firmware if needed. Leger Nano S not affected.

Caesar-Giulius
Sr. Member
****
Offline Offline

Activity: 269



View Profile
August 18, 2017, 05:27:42 PM
 #7

Thank you for the information, hopefully the hardware wallet can have better security.

    ██                   ██     
    ▀██▄               ▄██▀     
      ▀█████████████████▀       
         █████████████         
    ▄▄▄▄  ███████████  ▄▄▄▄     
▄▄███████████████████████████▄ 
▀▀████████  ███████  ████████▀▀
    ▀▀▀▀   █████████   ▀▀▀▀     
          ███████████           
           █████████           
            ███████             
           ██ ███ ██           
            ▀▀███▀▀             
MilkCoin                                                              ███▀▀
                    ▀█                                 ██▀██▀▀▀▀
██▄             ▀█▀█                           ██▀███▀▀▀   
     ██▄        ▀█▀██                      █▀█████▀▀     
         ██▄      ▀██▀█                ██▀████ ▀▀             
            ██        ██▀██            ██▀██ █             
              ▀█        ██▀█▀         █▀██▀▀               
                ▀█      ▀██▀█      █▀██▀        ▄█▀       
                  ▀█      █▀███   ▀███      ▄█▀         
                   ▀█      ██ ██ ▀██      ▄█▀           
                     ▀█       ██    ██    ▄█▀             
                       ▀█ █   █    █   ▄█▀               
                         ▀██████████▀               
  Invest in agricultural project
using blockchain technologies
                                                              ███▀▀
                    ▀█                                 ██▀██▀▀▀▀
██▄             ▀█▀█                           ██▀███▀▀▀   
     ██▄        ▀█▀██                      █▀█████▀▀     
         ██▄      ▀██▀█                ██▀████ ▀▀             
            ██        ██▀██            ██▀██ █             
              ▀█        ██▀█▀         █▀██▀▀               
                ▀█      ▀██▀█      █▀██▀        ▄█▀       
                  ▀█      █▀███   ▀███      ▄█▀         
                   ▀█      ██ ██ ▀██      ▄█▀           
                     ▀█       ██    ██    ▄█▀             
                       ▀█ █   █    █   ▄█▀               
                         ▀██████████▀               
➤ TWITTER
➤ TELEGRAM
➤ WHITEPAPER
➤ FACEBOOK
➤ ANN THREAD
➤ WEBSITE

  ICO Starts 
 Nov 15st 2017 

BeastLee
Jr. Member
*
Offline Offline

Activity: 40


View Profile
August 18, 2017, 06:03:46 PM
 #8

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
TryNinja
Sr. Member
****
Offline Offline

Activity: 476



View Profile
August 18, 2017, 07:12:10 PM
 #9

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
You still need physical access to the hardware to do this kind of "hack". And looks like they already fixed it.

If someone has access to your paper wallet, they will have access to your wallet aswell. Everything has their pros and cons. It's not like it's much safer.

john2231
Hero Member
*****
Offline Offline

Activity: 756

Everything was changed.


View Profile
August 18, 2017, 11:21:54 PM
 #10

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
Well taking down note of your private keys still not safe in the paper it can be still be someone can read your private keys or your paper can be disappear and forgot where you put your paper wallet ..
For me the best thing for me is to save my bitcoins and use the camera to have a picture also the barcode which is you can help to save your private keys via bar code and import it in the wallet once you need it save your private keys and barcode with password in your phone and privately sync it to your google drive this is just for backup once your computer crash or corrupted and never had any problem with it..
Just like the quoted there are wallet with different pros and cons there are no wallet are very secured and never experience any issue..

This is exactly why I don't trust hardware wallets like this. I would rather flip a coin and write down the key myself if I had enough patience. At any point in time, Trezor could start spitting out backdoors into their hardware wallets. And for that reason, I will never use one.
You still need physical access to the hardware to do this kind of "hack". And looks like they already fixed it.

If someone has access to your paper wallet, they will have access to your wallet aswell. Everything has their pros and cons. It's not like it's much safer.

XXX_BTC1@
Newbie
*
Offline Offline

Activity: 28


View Profile
November 01, 2017, 06:19:34 AM
 #11


compare to other wallets trezor is the best and secure wallet. it is easy to use  interface for your trezor device. now more hardware wallets are available in  the market. so in that trezor is the best and secure wallet once try to this wallet if you get more security for your bit coin. trezor is one of the trusted hardware wallet for bit coin. we have to carry it is easily. no one can hack to this wallet. so you have to choose and use trezor wallet.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!