Hardware Wallet Hack: Ledger Nano S - f00dbabe
It was found that the Ledger Nano S bootloader can be tricked into flashing and executing untrusted firmware.
Research Site: https://wallet.fail/
Twitter: https://twitter.com/walletfail
Thomas Roth: https://twitter.com/stacksmashing
original wallet.fail talk: https://www.youtube.com/watch?v=Y1OBIGslgGM
The bootloader is used to update the firmware of the 'non-secure' processor in the Ledger Nano S and has full control over the display, USB and the buttons. Time might tell how critical this issue actually is, a strong proof-of-concept still requires a lot of work and maybe the guys from wallet.fail will publish more in the future. Or join the security research and play around with it yourself!
-=[ 💻 Related Products ]=-
→ Ledger Nano S:* https://amzn.to/2VAhMvM
→ USB Hub with switches:* https://amzn.to/2SJuaYv
→ any STM32 Nucleo-64 development board:* https://amzn.to/2VDDE9J
→ Trezor:* https://amzn.to/2FjJaZ7
-=[ 🔴 Stuff I use ]=-
→ Microphone:* https://geni.us/ntg3b
→ Graphics tablet:* https://geni.us/wacom-intuos
→ Camera#1 for streaming:* https://geni.us/sony-camera
→ Lens for streaming:* https://geni.us/sony-lense
→ Connect Camera#1 to PC:* https://geni.us/cam-link
→ Keyboard:* https://geni.us/mech-keyboard
→ Old Microphone:* https://geni.us/mic-at2020usb
US Store Front:* https://www.amazon.com/shop/liveoverflow
-=[ ❤️ Support ]=-
→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
-=[ 🐕 Social ]=-
→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/
-=[ 📄 P.S. ]=-
All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.
#HardwareSecurity #SecurityResearch
Видео Hardware Wallet Hack: Ledger Nano S - f00dbabe канала LiveOverflow
Research Site: https://wallet.fail/
Twitter: https://twitter.com/walletfail
Thomas Roth: https://twitter.com/stacksmashing
original wallet.fail talk: https://www.youtube.com/watch?v=Y1OBIGslgGM
The bootloader is used to update the firmware of the 'non-secure' processor in the Ledger Nano S and has full control over the display, USB and the buttons. Time might tell how critical this issue actually is, a strong proof-of-concept still requires a lot of work and maybe the guys from wallet.fail will publish more in the future. Or join the security research and play around with it yourself!
-=[ 💻 Related Products ]=-
→ Ledger Nano S:* https://amzn.to/2VAhMvM
→ USB Hub with switches:* https://amzn.to/2SJuaYv
→ any STM32 Nucleo-64 development board:* https://amzn.to/2VDDE9J
→ Trezor:* https://amzn.to/2FjJaZ7
-=[ 🔴 Stuff I use ]=-
→ Microphone:* https://geni.us/ntg3b
→ Graphics tablet:* https://geni.us/wacom-intuos
→ Camera#1 for streaming:* https://geni.us/sony-camera
→ Lens for streaming:* https://geni.us/sony-lense
→ Connect Camera#1 to PC:* https://geni.us/cam-link
→ Keyboard:* https://geni.us/mech-keyboard
→ Old Microphone:* https://geni.us/mic-at2020usb
US Store Front:* https://www.amazon.com/shop/liveoverflow
-=[ ❤️ Support ]=-
→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
-=[ 🐕 Social ]=-
→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/
-=[ 📄 P.S. ]=-
All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.
#HardwareSecurity #SecurityResearch
Видео Hardware Wallet Hack: Ledger Nano S - f00dbabe канала LiveOverflow
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
Solving a JavaScript crackme: JS SAFE 2.0 (web) - Google CTF 2018BEST Hardware Wallet: Top 5 Safest Options!! 🔓Ledger HACKED!! How to Protect Your Crypto!! 😱How To Use A Bitcoin Hardware Wallet: Ledger Nano XThreat Models - Hardware Wallet Research #1How to Hack trezor and ledger NANO - do not buy them are not secureHow to tell if your Ledger Nano is fake: Unboxing and guideLooking at the PCB & Chips - Hardware Wallet Research #2Ledger Nano X Full ReviewNintendo Switch (NVIDIA Tegra X1) - BootROM VulnerabilityLedger Nano S Tutorial 2019 - FULL CLASS!!! (for Absolute Beginners)URGENT: Ledger Hacked (Is your Crypto safe?)How to Set Up a Ledger Nano X Latest Version 2020Ethereum Smart Contract Code Review #1 - Real World CTF 2018Hardware Wallets Explained, Reviewed and ComparedUnboxing and setting up the Ledger Nano S Crypto WalletRemote Debugging ARM Chip with SWD/JTAG - Hardware Wallet Research #3Best Ways to Store Crypto in 2021 with detailed Risk Analysis of every method.How To Setup And Configure Your Ledger Nano S September 2018 Edition