Bitcoin Forum
May 08, 2024, 12:42:15 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Best Hardware wallet?  (Read 112 times)
thegoatiest (OP)
Member
**
Offline Offline

Activity: 200
Merit: 12


View Profile
June 03, 2019, 07:48:46 AM
 #1

Hi,
I've got a Trezor... but seems that's been overtaken by Trezor one.
So, I guess it's Ledger vs Trezor one.

Ledger and T1 seem to store an equal variety of coins... more or less.
So, Security is where it's at I presume?
---

Which Hardware wallet is less likely to be counterfeit?
I know trezor (not one) had stickers.....  - - -  but they also have a warning; make sure you have the right sticker!! Undecided
Well, I'm not comfortable with that. Counterfeits are good, that's the whole point.

Is there a technology in Ledger or Trezor one that allows you to verify your device has not been compromised/counterfeited or tampered with?
I'm very concerned with avoiding getting 'phished when buying a new hardware wallet..
As, all it'd take is one @$$$*** employee to slip you a counterfeit and you lose all your money.
1715128935
Hero Member
*
Offline Offline

Posts: 1715128935

View Profile Personal Message (Offline)

Ignore
1715128935
Reply with quote  #2

1715128935
Report to moderator
1715128935
Hero Member
*
Offline Offline

Posts: 1715128935

View Profile Personal Message (Offline)

Ignore
1715128935
Reply with quote  #2

1715128935
Report to moderator
1715128935
Hero Member
*
Offline Offline

Posts: 1715128935

View Profile Personal Message (Offline)

Ignore
1715128935
Reply with quote  #2

1715128935
Report to moderator
Remember that Bitcoin is still beta software. Don't put all of your money into BTC!
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715128935
Hero Member
*
Offline Offline

Posts: 1715128935

View Profile Personal Message (Offline)

Ignore
1715128935
Reply with quote  #2

1715128935
Report to moderator
1715128935
Hero Member
*
Offline Offline

Posts: 1715128935

View Profile Personal Message (Offline)

Ignore
1715128935
Reply with quote  #2

1715128935
Report to moderator
1715128935
Hero Member
*
Offline Offline

Posts: 1715128935

View Profile Personal Message (Offline)

Ignore
1715128935
Reply with quote  #2

1715128935
Report to moderator
OmegaStarScream
Staff
Legendary
*
Offline Offline

Activity: 3472
Merit: 6125



View Profile
June 03, 2019, 08:00:34 AM
 #2

There is no best wallet, it's just a matter of preference really, supported coins, UI/UX, etc. Both the wallets you mentioned are very reputable.

You can see how both wallets are handling tampering in these blogs articles[1][2]. I don't see any reason to be afraid of tampering though, especially If you're buying from the official website or an authorized reseller.

[1] https://support.ledger.com/hc/en-us/articles/360002481534-Check-if-device-is-genuine
[2] https://blog.trezor.io/trezor-one-tamper-evident-packaging-f98d3f63569d

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Pmalek
Legendary
*
Offline Offline

Activity: 2758
Merit: 7135



View Profile
June 03, 2019, 08:35:54 AM
 #3

Which Hardware wallet is less likely to be counterfeit?
I know trezor (not one) had stickers.....  - - -  but they also have a warning; make sure you have the right sticker!! Undecided
Neither Trezor or Ledger are counterfeit if you buy them from the official site or a licensed re-seller.

With stickers I assume you mean the Anti tampering seals.
I don't own a Trezor so I am not sure if they are included in the Trezor package but Ledger devices don't have these seals. They can easily be faked and they give the user a fake sense of security.

Read this:
https://support.ledger.com/hc/en-us/articles/360002481534-Check-if-device-is-genuine

Quote
Anti tamper seals
Ledger deliberately chooses not to use anti tamper seals on its packaging. These seals are easy to counterfeit and can therefore be misleading. Rather, genuine Ledger devices contain a secure chip that prevents physical tampering: this provides stronger security than any sticker possibly could.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
Lucius
Legendary
*
Offline Offline

Activity: 3234
Merit: 5638


Blackjack.fun-Free Raffle-Join&Win $50🎲


View Profile WWW
June 03, 2019, 10:26:22 AM
 #4

thegoatiest, as others say, you should be good if you buy direct from official store and if you initialize the device as is described in the instructions. I doubt someone will invest money and time to change something inside of hardware wallet (modifying hardware), since this is requires a fair amount of technical knowledge. If such device is come in hands of some users who have some small amount of coins, it will not make any sense for hacker.

I see such attack successful only if someone is targeting particular user. Let's assume there's a bad employee in Ledger or Trezor, he / she is monitoring who is buying devices, and since it is possible to pay with crypto it is also possible to check how much coins that user have. Such bad employee could use his position in company and send modified device to that user.

It is possible to check hardware in Ledger (there is tutorial for that), but it is not something for what the average user has the knowledge and skills. Also in this case, the warranty on the device is lost.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
thegoatiest (OP)
Member
**
Offline Offline

Activity: 200
Merit: 12


View Profile
June 03, 2019, 11:12:56 AM
 #5

Hey, thanks for the replies.
I had typed a response but.... guess i didn't submit it.

Lucius: That was my exact concern. A rogue employee tampering with the hardware or swapping out a genuine wallet for a counterfeit.
Yeah, it would require a lot of know how, but when there is potential millions of $$$ involved - damn right it'd be worth some ones time.. .. think of all the hacks, and this would be a 'sleeper'
As in, they could ship out 200+ 'rogue' wallets, wait until they fill up over a year or two, then empty all of them with a backdoor. e.t.c.

I don't have much money, so I wouldn't be a target.. per se. However the above scenario does bother me.
--

I suck with computers  Wink so I won't be checking the hardware, wouldn't know where to begin.
That being given, which would you suggest as the most tamper proof out of the box, from the official site or authorized reseller; Ledger or Trezor One.?

Cheers,
TG
bob123
Legendary
*
Offline Offline

Activity: 1624
Merit: 2481



View Profile WWW
June 03, 2019, 11:55:18 AM
 #6

That being given, which would you suggest as the most tamper proof out of the box, from the official site or authorized reseller; Ledger or Trezor One.?

Hardware can always be tampered with.

The only way to verify this is by opening the case and looking whether it contains the components it should (and only these).


However, if you make sure the firmware is genuine (which ledger live does each time, doesn't know how/when trezor's firmware is being checked) you already quite a few attack vectors.

In the end, they are probably both pretty equally tamper proof.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!