Top all-time · #9438
Saleem Rashid
Personal blog · saleemrashid.comsecurityhardware
Saleem Rashid's personal blog at saleemrashid.com covers security and hardware. Since 2017, 8 different Hacker News readers have linked it 9 times, most often “Breaking the Ledger Security Model”. No feed was found, so read it on the site itself.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN readers link Saleem Rashid's posts on hardware wallet security, including extracting Trezor private keys with glitching and a Ledger firmware-tampering attack. Comments cite them as evidence and do not judge the writing.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Security research and cryptography
Most-linked posts?
- Breaking the Ledger Security Model5 people · 5 mentions · first linked 2018-03-20
What Hacker News says?
There was another successful attack on another hardware wallet (Ledger) 3 months ago, by tampering the firmware used in one of the MCU - (Post by the author: https://saleemrashid.com/2018/03/20/breaking-ledger-security... ; HN thread: https://news.ycombinator.com/item?id=16627725 )
Comment linking /2018/03/20/breaking-ledger-security-model/
on “Extracting the private key from a TREZOR with an oscilloscope (2015)”Submitted Breaking the Ledger Security Model as a story · 232 points
HN discussionInferior to what? The only other hardware wallet with large market share? Have a look at this: https://saleemrashid.com/2018/03/20/breaking-ledger-security...
Comment linking /2018/03/20/breaking-ledger-security-model/
on “Critical flaw in Trezor hardware wallets”Submitted Breaking into the (Digital) BitBox as a story · 2 points
HN discussionHow true is this article? http://saleemrashid.com/2017/08/17/extracting-trezor-secrets...
Comment linking /2017/08/17/extracting-trezor-secrets-sram/
on “Trezor hardware Bitcoin wallet – Security glitches reveal private keys”Submitted Exploiting Netgear's Routerlogin.com as a story · 1 points
HN discussionThis appeared recently, it seems http://saleemrashid.com/2017/08/17/extracting-trezor-secrets...
Comment linking /2017/08/17/extracting-trezor-secrets-sram/
on “Trezor hardware Bitcoin wallet – Security glitches reveal private keys”What makes me feel misled is being told what opening the box that it was tamper-proof[1], finding out it wasn't tamper proof[2] and now this. [1]: https://cdn.shopify.com/s/files/1/2126/7913/files/Ledger_Tam... [2]: https://saleemrashid.com/2018/03/20/breaking-ledger-security...
Comment linking /2018/03/20/breaking-ledger-security-model/
on “Check whether your Ledger Nano S is genuine”The details don't seem to be available yet, but this seems like a surprising departure from Ledger's current offerings, which emphasize running both key operations and the user interface to verify and confirm them on secure hardware [1]. At least I can't imagine how it would be possible to run a complex e-ink display and touchscreen from a minimal trusted computing base running on tamper-proof hardware. My suspicion…
Comment linking /2018/03/20/breaking-ledger-security-model/
on “Ledger Stax – Hardware wallet with eInk display for digital assets”