• Press Releases
    • Submit a press release
    • Read All
  • Advertise
  • Contact us
Crypto.com Logo Crypto.com Logo
Bitcoinist.com
No Result
View All Result
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
  • Industry
    • Industry News
    • Press Releases
  • Price
    • Bitcoin Price
    • Ethereum Price
    • Litecoin Price
    • Binance Coin Price
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
    • Bitcoin Casinos – Where, What and How to Play
  • Events
  • Play Games
  • Play Casino Games
  • Bet & win BTC
Breaking News: Crypto Exchange Binance To Launch Prepaid Card In This South American Country
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
  • Industry
    • Industry News
    • Press Releases
  • Price
    • Bitcoin Price
    • Ethereum Price
    • Litecoin Price
    • Binance Coin Price
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
    • Bitcoin Casinos – Where, What and How to Play
  • Events
  • Play Games
  • Play Casino Games
  • Bet & win BTC
Bitcoinist.com
No Result
View All Result
Breaking News: Crypto Exchange Binance To Launch Prepaid Card In This South American Country
Hardware wallets bitcoin disclosure
Advertisement

Hardware Bitcoin Wallets Hacked: The Importance Of Responsible Disclosure

Emilio Janus by Emilio Janus
4 years ago
in Bitcoin Wallet, Bitcoin, News, News teaser
0
Advertisement

Following yesterday’s article regarding vulnerabilities uncovered in hardware wallets, both Trezor and Ledger have called ‘foul play’ over irresponsible disclosure. Hardware hacking group, wallet.fail, who exposed the security issues, at least partially deny this claim.


Responsible Disclosure

In the security world, hackers generally only go public with their findings after giving companies time to patch the vulnerabilities. Disclosing potential methods of attack before vendors have addressed them leaves users exposed to unnecessary risk.

Get 30 FREE SPINS at Punt Casino - NO DEPOSIT REQUIRED! Start Playing Now.

Responsible vendors actually encourage hackers to attack their products, as by identifying weaknesses, overall security improves. Both Trezor and Ledger offer bug bounty programs, rewarding researchers who find vulnerabilities and report them directly.

Epic Fail

Wallet.fail’s presentation at the #35C3 security conference appears to have struck like a bolt from the blue, however. Trezor were clearly unaware of the vulnerabilities, as CTO Pavel Rusnak, leaped straight onto Twitter to say so. He found out about the issues with the rest of the audience, so explained that the issue would take some time to fix.

With regards to #35c3 findings about @Trezor: we were not informed via our Reponsible Disclosure program beforehands, so we learned about them from the stage. We need to take some time to fix these and we'll be addressing them via a firmware update at the end of January.

— stick⚡Pavol Rusnak @ 35c3 (@pavolrusnak) December 28, 2018

BitStarz Player Lands $2,459,124 Record Win! Could you be next big winner?
570% up to 12 BTC + 300 Free Spins for new players & 1 BTC in bonuses every day, only at Wild.io. Play Now!

However, he later Tweeted that he had had a constructive two-hour discussion with wallet.fail regarding the vulnerabilities. He certainly seemed a lot happier following the outcome of this meeting.

Practical Vulnerabilities of Bitcoin Hardware Wallets

Ledger was also quick to respond, pointing out in a blog-post that wallet.fail had not followed standard security principles. However, Ledger also called into question the practicality of the vulnerabilities outlined in the presentation.

It specifically pointed out that the group did not extract the seed or PIN from any device. A not too subtle reference to its competitor, Trezor, perhaps.

In addition to the RF side-attack on the Ledger Blue’s PIN, wallet.fail detailed an attack utilizing a device hardware implant, and compromised PC software to authorize rogue transactions on a Ledger Nano S. The blog-post pointed out that both of these attacks require far more effort than simply installing a spy camera to discover a user’s PIN.

0xf00dbabe MCU bypass

A further vulnerability involved bypassing the MCU check to flash and execute unsigned firmware. Ledger claim that this is a feature, although a bug allowed installation of non-featured firmware. In any case, the MCU does not allow access to the PIN or seed.

Wallet.fail claim to have advised Ledger about this issues months ago, and indeed, Ledger says this has already been patched in the next firmware update.

Just to clarify, we disclosed this “non-vulnerability” to @LedgerHQ 161 days ago. https://t.co/5TqTPeGVfU

— WALLET.FAIL (@walletfail) December 28, 2018

Should wallet.fail have disclosed the bug to Ledger and Trezor beforehand? Share below!


Images courtesy of Shutterstock

ShareTweetShareShare

Sign Up for Our Newsletter!

For updates and exclusive offers enter your email.

I consent to my submitted data being collected and stored.

Emilio Janus

Emilio Janus

Related Posts

Bitcoin Soars In Nigeria As Government Promotes Digital Cash

Bitcoin Soars In Nigeria As Government Promotes Digital Cash

9 hours ago
Bitcoin Crypto

Can The Federal Reserve Counterattack Stop The Crypto Bull Run?

15 hours ago
Bitcoin

Bitcoin Bearish Signal: Aged Supply Flows Into Binance

21 hours ago
Bitcoin this week

Bitcoin And Crypto This Week: Here’s What Will Be Important

1 day ago
Bitcoin price

Bitcoin Price Nears $24,000 Mark – Can Bulls Push BTC To $25K This February?

1 day ago
50% of Bitcoin hashrate Controlled by Two Mining Pools

Data Shows 50% Of Bitcoin Hashrate Controlled By Two Mining Pools

2 days ago
Please login to join discussion

Premium Partners

Premium Casino Partners

Top Casinos

BitStarz
BitStarz
Punt Casino
Punt Casino
mBit
mBit
Metaspins
Metaspins
1xBit
1xBit
Coinplay
Coinplay
K8
K8
Vegas Casino
Vegas Casino

Sportbooks

Coinplay
Coinplay

Press Releases

  • California DMV Puts Car Titles On Tezos (XTZ) Blockchain...

    2 hours ago
  • Bitcoin Cash (BCH) Associates With TREZOR Wallet, Litecoin...

    2 hours ago
  • Avalanche (AVAX) price rally stalls, Polkadot (DOT) was #1...

    2 hours ago
  • Orbeon Protocol And VeChain Seek To Impact The Real World...

    3 hours ago
  • Meta Masters Guild Presale Raises Over $2m Ahead of Stage 5...

    5 hours ago

Bitcoin news portal providing breaking news, guides, price analysis about decentralized digital money & blockchain technology.

Bitcoin

  • News
  • Price
  • Businesses
  • Acceptance
  • Technology
  • Investment
  • Regulation
  • Reviews

Altcoins

  • News
  • Price
  • Ethereum
  • Ripple
  • Litecoin
  • EOS
  • NAGA

Categories

  • Blockchain
  • Security
  • FinTech
  • Technology
  • Trending
  • Breaking News
  • Press Releases
  • How to

Pages

  • Contact us
  • Editorial Policy
  • Advertise
  • Crypto Prices from Nomics
© 2023 Bitcoinist.com. All Rights Reserved.
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
  • Industry
    • Industry News
    • Press Releases
  • Price
    • Bitcoin Price
    • Ethereum Price
    • Litecoin Price
    • Binance Coin Price
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
    • Bitcoin Casinos – Where, What and How to Play
  • Events
  • Play Games
  • Play Casino Games
  • Bet & win BTC

© 2022 Bitcoinist. All Rights Reserved.

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy Center or Cookie Policy.