Great presentation. Highlights for those short on time:
- Holographic stickers are worthless.
- A modified Ledger can include an antenna and chip that will click the "yes" button when signaled.
- It's possible to radio sniff the PIN from a Ledger Blue.
- It's tricky but possible to install custom firmware on the Ledger without it getting flagged as unverified. Said firmware could pass a different transaction into the secure chip than the one you think you're signing.
- It's possible to make the Trezor chip glitch and give you the 24-word seed and the PIN.
- Holographic stickers are worthless.
- A modified Ledger can include an antenna and chip that will click the "yes" button when signaled.
- It's possible to radio sniff the PIN from a Ledger Blue.
- It's tricky but possible to install custom firmware on the Ledger without it getting flagged as unverified. Said firmware could pass a different transaction into the secure chip than the one you think you're signing.
- It's possible to make the Trezor chip glitch and give you the 24-word seed and the PIN.