Bitcoin Forum
May 05, 2024, 11:42:21 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: Even if you buy a hardware device from an authorised reseller, you need to check  (Read 274 times)
Harlot
Hero Member
*****
Offline Offline

Activity: 1806
Merit: 671


View Profile
October 28, 2020, 02:50:45 PM
 #21

There is also an attack called the Evil Maid attack where someone can put a malware onto a device which is something that can be done on hardware wallets especially Ledger since they don't have a tamper proof stick of some kind in their boxes so you would really have to rely on their security features if it can really outsmart any malware being tried to install on these devices. So its really a gamble when buying these devices online maybe buying it directly to their website is a smart choice if you really want it to be directly coming from the manufacturers itself.
No Gods or Kings. Only Bitcoin
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714952541
Hero Member
*
Offline Offline

Posts: 1714952541

View Profile Personal Message (Offline)

Ignore
1714952541
Reply with quote  #2

1714952541
Report to moderator
1714952541
Hero Member
*
Offline Offline

Posts: 1714952541

View Profile Personal Message (Offline)

Ignore
1714952541
Reply with quote  #2

1714952541
Report to moderator
1714952541
Hero Member
*
Offline Offline

Posts: 1714952541

View Profile Personal Message (Offline)

Ignore
1714952541
Reply with quote  #2

1714952541
Report to moderator
o_e_l_e_o
In memoriam
Legendary
*
Offline Offline

Activity: 2268
Merit: 18509


View Profile
October 28, 2020, 03:28:29 PM
Merited by DdmrDdmr (1)
 #22

I can only assume the inventory was mixed by accident, but at this point I doubt Amazon cares as it's just riding on it's bulk.
Have a read of the Reddit post I linked to higher up in this thread, particularly the sources it provides. It seems that it is absolutely not accidental - Amazon mix legitimate products with cheap/knock off/fake/returned products routinely, with zero due diligence.

Since this is not regulated and protection is not quite high like no authorities has been tasked to monitor the events and happenings of cryptocurrency because we wanted as much as possible without the interference of the government that could also defeat of its purpose being a decentralized.
You can't be your own bank if you are relying on third party regulators or your government to police your devices and ensure they are safe. Financial freedom comes with responsibility.

There is also an attack called the Evil Maid attack where someone can put a malware onto a device which is something that can be done on hardware wallets especially Ledger since they don't have a tamper proof stick of some kind in their boxes so you would really have to rely on their security features if it can really outsmart any malware being tried to install on these devices.
Ledger explain why they do not use tamper proof stickers here:
Ledger deliberately chooses not to use anti tamper seals on its packaging. These seals are easy to counterfeit and can therefore be misleading. Rather, genuine Ledger devices contain a secure chip that prevents physical tampering: this provides stronger security than any sticker possibly could.
I can go on Amazon right now and buy 500 tamper proof stickers for less than $10. They are a meaningless gesture, and do not add to the security of the device in any way. The security comes from the cryptographic verification when you connect the device to Ledger Live for the first time.
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!