curiousObject

They want to be certain they have the resources to properly personally verify the operations and trustworthiness of every authorized distributor that they’re vouching for.

https://xxcancel.com/Dantoshi/status/2110000117856248141

Comment · 18 days ago

These recent teardowns of compromised Ledger wallets are frightening. Because the infiltration of hardware looks very pro. Mass production and standardized parts added.

Even weight difference might not be obvious. He compared weights for one Ledger product but the small variations in weight among genuine devices made comparisons not clear.

Possibly only X-ray would uncover the fake without cracking the case?

https://youtube.com/@MagicalTux

(Warning - MagicalTux is Tibanne or Mark Karpeles. He has a “complicated” legal history, but this looks legit)

Comment · 18 days ago

Thanks. I believe you’re right a totally fake copy couldn’t verify. So that idea was wrong.

(The MITM supply chain attack which has happened succeeds because it preserves the original secure hardware but intercepts the secret data at the display interface. But a low-effort mimic of the entire device like I suggested? That wouldn’t work).

Comment · 18 days ago

This story is a case of someone tampering with devices in the supply chain, before the user first receives them.

What you’re describing is a different thing. It’s an “evil maid” attack, when you tamper with a wallet that is already set up by the user. Also, it would be ultra difficult and expensive.

What you’re saying is possible. But:

It would probably be cheaper to build a total fake Ledger Wallet, then just replace the new real wallet and deliver a fake with a weak entropy generator. Any case, that’s not what has happened this time.

Comment · 18 days ago

And the Vodafone NL SIM could also offer some leads

Comment · 18 days ago

Here’s a new market for $500 Faraday Cages, if any HN readers are interested in selling that

Comment · 24 days ago

not 15 million tunnels :D

That traditionally would be described as “a maze of twisty little passages, all alike”

Comment · 1 month ago

>I can't really think of a use case for a grocery tracking system that only tracks a third of my groceries.

Me too. I think I’m not communicating clearly. Sorry.

What I’m talking about is a system that does only one third of the steps in the total end-to-end process for ALL your groceries. You do the rest yourself, or use other help.

I’m not advocating a broken system that claims to do that complete process, but really ignores two thirds of your groceries. That would be damn stupid.

Do you understand what I mean?

Comment · 1 month ago

“tool” seems like a good way to describe a half solution. We use and combine various tools and our own skills to do what we want

Comment · 1 month ago

>A working grocery tracking system is a half-solution to effortless shopping.

>A half-working grocery tracking system is useless, much like a car without an engine.

Yes. Something designed to be a half solution can be useful. But a full solution which is broken is probably worse than useless.

Comment · 1 month ago

>”a smart fridge is a half solution at best”

A car is a half solution to going to work. A stove is a half solution to preparing food.

Half solutions are what people need. They’re the solutions we are using every day.

There is this huge problem with advertising that makes consumers think a half solution is a 100% solution. Most smart product makers do that trick. But, apart from that problem, ‘the perfect is the enemy of the good’

Edit: but no way would I buy any smart or connected fridge from Samsung. I don’t anticipate that being a positive experience