I know very little to nothing about the security behind the different types of wallets, but it seems that like all things tech related the security is transient.
How one guy hacked his Trezor. Long story but the good stuff is near the bottom. From the article:
I asked Saleem to explain how his hack worked. He told me that when the Trezor is powered on, its firmware (basically, the Trezor’s operating system) copies its PIN and 24 seed words into the Trezor’s SRAM (static RAM, memory that the Trezor uses to store information) in an unencrypted form. If you do what is called a “soft reset” on the device—accomplished by delicately shorting two pins on its printed circuit board—you can then install the exploit firmware without wiping the SRAM’s memory. This allows you to see your PIN and seed numbers.
No doubt, new firmware fixes the unencrypted ram deal. Until the next 15 year old decides to learn how the device is programmed
Not that software wallets are any better. Parity seems to keep finding ways to screw up. I dont know if this allows someone to take possession or just wipe the wallet or both? Maybe just the previous exploit allowed someone to actually take possession.
If cryptos actually become mainstream, can you imagine what would happen with the announcement of each new exploit/hack/vulnerability! As fringe as they are now, Ethereum took a little hit with the new Parity vulnerability. If peoples life savings where in these things there would be digital age bank runs (blockchain runs? hash runs?).
How one guy hacked his Trezor. Long story but the good stuff is near the bottom. From the article:
I asked Saleem to explain how his hack worked. He told me that when the Trezor is powered on, its firmware (basically, the Trezor’s operating system) copies its PIN and 24 seed words into the Trezor’s SRAM (static RAM, memory that the Trezor uses to store information) in an unencrypted form. If you do what is called a “soft reset” on the device—accomplished by delicately shorting two pins on its printed circuit board—you can then install the exploit firmware without wiping the SRAM’s memory. This allows you to see your PIN and seed numbers.
No doubt, new firmware fixes the unencrypted ram deal. Until the next 15 year old decides to learn how the device is programmed
Not that software wallets are any better. Parity seems to keep finding ways to screw up. I dont know if this allows someone to take possession or just wipe the wallet or both? Maybe just the previous exploit allowed someone to actually take possession.
If cryptos actually become mainstream, can you imagine what would happen with the announcement of each new exploit/hack/vulnerability! As fringe as they are now, Ethereum took a little hit with the new Parity vulnerability. If peoples life savings where in these things there would be digital age bank runs (blockchain runs? hash runs?).
