Can only commend the perps for a pretty sophisticated supply chain attack, to be honest. Don't need to compromise the secure element if you can just snoop on the display as it shows the seed values. Supposedly Ledger has known about this since march as well, at least according to some writeup I saw.
I think this attack dovetails nicely with the discussions around passkeys that have been happening lately because "non-copyable" passkeys are actually very copyable in a similar manner.
jbe_ | 14 hours ago
Can only commend the perps for a pretty sophisticated supply chain attack, to be honest. Don't need to compromise the secure element if you can just snoop on the display as it shows the seed values. Supposedly Ledger has known about this since march as well, at least according to some writeup I saw.
maduggan | 9 hours ago
Yet another example of how the entire purpose of crypto appears to be in order for normal people to be ripped off and stolen from.
JulianSildenLanglo | 11 hours ago
Do these ledger devices add a lot of convenience compared to just using a normal Yubikey equivalent?
tad | 2 hours ago
I don't understand, can't they call the folks running Bitcoin and reverse the transactions?
flockofbirbs | 2 hours ago
I think this attack dovetails nicely with the discussions around passkeys that have been happening lately because "non-copyable" passkeys are actually very copyable in a similar manner.