Many owners of crypto-currency assets perfectly manage software wallets, which they create on their computers. But some believe that this is unsafe, so they use hardware wallets, which are a small dongle, which you can connect to a computer if necessary, or completely avoid it when making transactions. As it turned out, not so simple and with such devices - recently a fifteen-year-old schoolboy hacked one of these devices "with protection from unauthorized access."
French developers of Ledger hardware crypto always pointed to a number of advantages of their own gadget, one of which was and remains "cryptographic attestation", which guarantees the use of only authorized codes on the device. The confidence of the developers in their product was shaken by the British schoolboy Salim Rashid, who studies computer security during his free time.
The revealed vulnerability of the wallet made it possible to forge electronic signatures stored on the device, after which the attackers could have the opportunity to profit positively from the negligent owner. Rashid published a small study on Tuesday, where he explained that the most simple way to get unauthorized access is to install malicious software directly on the wallet. Due to the fact that the company's products have proven themselves well, it, including due to security, was quietly sold on Amazon and eBay. Rashid warned buyers and noted that it is better to purchase such devices directly from the manufacturer, since there is a possibility to buy a "stitched" gadget.
Despite the fact that the vulnerability was discovered a long time ago, not all Ledger hardware purses were updated, blocking the ability to install malicious software. Moreover, the developers have repeatedly noted that Rashid exaggerated the seriousness of the threat, but still thanked the guy for his professionalism and perseverance.
We have , where we discuss high-tech news. Two more of our chat rooms are dedicated , and . Join now!
The article is based on materials .
Comments
Post a Comment