Vitalik Buterin
以太坊基金会称硬件信任下降，欢迎开放可验证芯片开发者
以太坊基金会称硬件信任近期“进入自由落体”，并呼吁开发可访问、开放且可验证的芯片。帖文附有Vitalik在孟买Devcon 8谈论硬件信任的视频。
Loading…
bibibi.ccbibibi.ccLoading…
Connect scattered updates into a story you can understand.
以太坊基金会称硬件信任近期“进入自由落体”，并呼吁开发可访问、开放且可验证的芯片。帖文附有Vitalik在孟买Devcon 8谈论硬件信任的视频。
📉 📉 📉 Trezor warns that reseller-sold hardware wallets may have been tampered with, urging affected users to move funds Read Analysis
Keystone said it has suspended all shipments and quarantined affected devices at partner warehouses, including Amazon warehouses. The company also shortened its logistics data retention period from 180 days to 90 days.
Trezor said it received a report that a Safe 5 sold by CryptoBilis may contain unauthorized hardware, and urged affected customers to move their funds and replace their recovery phrases. No losses have been reported so far.
The Singapore Police stated that, since September 10, at least two cases involving tampered Ledger hardware wallets have caused losses of approximately 3500000 Singapore dollars. Preliminary investigations found that the devices contained malicious hardware components. Police are investigating the matter with Ledger.
PANews reported that KeyPal, TokenPocket's hardware wallet brand, plans to delete or de-identify non-essential customer personal information within 15 days after the completion of orders that have been fulfilled and are not subject to retention requirements. KeyPal stated that it has not found any breaches of its own systems or customer data leaks to date.
Foundation said it had identified more than 23000 phishing email attempts; the investigation found that the former WooCommerce database still contained copies of customer information, and the actual scope of impact has not yet been determined.
Keystone says a security incident on its official website resulted in the exposure of device authentication keys and some customer information; it will deactivate the old keys, destroy 18,835 devices, and suspend shipments for some orders.
PANews reported that Keystone will discontinue the old verification keys and destroy 18,835 inventory devices, with delivery of unshipped orders to resume after new-key devices enter production.
Foundation said its official domain had been used to send spam, stemming from one or more compromised Cloudflare API keys. The relevant keys have been revoked, the malicious domain has been taken down, and Passport devices and the funds in them were not affected.
Keystone confirms that its official website was subject to unauthorized access, and that some customers’ names, contact details, addresses, and order details were obtained, while payment information, mnemonic phrases, private keys, and wallet passwords were not involved. The company said it had blocked the access, fixed the vulnerability, and notified affected customers.
Keystone said its official website suffered unauthorized access, and a third party obtained some customers’ names, contact information, shipping addresses, and order details; it said payment information, seed phrases, and private keys were not exposed.