Laser on Nostr: "This is why you always buy straight from the manufacturer." This is the wrong ...

"This is why you always buy straight from the manufacturer."

This is the wrong conclusion, since supply chain attacks can also occur when vendors ship things out directly.

We should defend against that by instead moving towards an industry standard where we insist that:

1. Devices must be easy to tear down by customers at home. They should be built with this in mind.

2. High resolution images of component must be published on production sites along with directions for verify hardware in hand against the published schemat, for example by using an independently chosen AI to compare a local picture against the official picture.

3. Methods for storing devices in a tamper evident way should be popularized and normalized by the self custody community.

#Bitcoin.

quoting
nevent1q…xrh8

This is what the Ledger implant looks like from the inside.

A Reddit user opened a Nano X bought on a Russian marketplace, not from Ledger, and found a thin extra board wedged between the screen and the main circuit board, with its own antenna.

Ledger confirmed the mechanism overnight: the board reads the screen, waits for the 24 words to appear during setup, and sends them out over LTE on its own eSIM. The secure chip was never touched. It didn’t need to be.

This is why you always buy straight from the manufacturer. If you are worried and want to check, Ledger’s own guide is in the replies.

(labels in the photo: u/cheerful_afternoon on Reddit.)