Topic: [2018-02-24]bitcoin.com - What to Expect When You Order a Hardware Wallet (Read 126 times)

Obvious cases of security holes will be detected pretty quickly, but some times it takes a while (years in some cases) before research labs or whatever other entity finds out that there are critical security holes in hardware and software. It wasn't that long ago where basically the entire world was shocked to find out that everything containing an intel chip was at potential risk due to the security flaw. Imagine how much potential damage could have, or maybe has already been done by exploiting that security flaw. I wouldn't even be surprised if the flaw was left there on purposely to allow the government to crack in at any time.

Simple really don't deal with someone who has not known manufactures of hardware wallet because it is better to spend higher on recognized sellers than buy on those cheaped products which dealers are not legit and might be a scammer. And never make a transaction with those always demanding pay as early as possible even though you have not yet agreed to the terms of the transaction. And the last one before the final agreement makes sure that each transaction has an assurance and guarantee that an arms-length transaction will be done.

in the crypto world, security should be in the first place, and write that hardware wallets are the best tool for storage, so I recommend that you keep your assets on hardware wallets!
It is also recommended to purchase from official dealers, and only there!

That goes up for the main hardware wallet manufacturers, but there are some relatively new ones that have popped up fairly recently in comparison to the main players in the hardware wallet market.

The thing I like about this ecosystem is that everything is being put to the test directly. In case there turns out to be a backdoor or something else that may result in an external party to gain access to the keys, it's pretty quickly known.

I however would strongly advise people to stay away from second hand devices. In most cases you can wipe the device and generate everything from scratch afterwards, but even then I'm still far too paranoid.

The potential risks aren't worth the $100 on average you pay for an entry level hardware wallet ~ better safe than sorry.

I think most people are under the impression that these hardware wallet manufacturers have copies of all the private keys

that are used to generate these wallets. It is nice to see that the wallet is generated on the device, when it is initialized for

the first time. Trust is a huge thing and I think these hardware wallet manufacturers have a lot to lose, if it ever came out

that they "logged" and kept all private keys that are generated on their devices.   

Over the past few months, well known hardware wallet manufacturers have been swamped with sales during and after the holiday season. Hardware wallet deliveries have been backed up and some people have had to wait weeks to get direct shipping from source manufacturers. Much of the demand has stemmed from the typical holiday season, but also because digital assets have gained a lot in value during the course of 2017 and into the new year.

Also read: Indians Look to Buy Bitcoin Overseas as Regulations Tighten 

Satoshi Labs Discloses the Company’s Processing and Shipping Procedure
This week the Prague-based hardware wallet manufacturer, Satoshi Labs, told the public how a Trezor order is processed utilizing the utmost security practices. The company explains that it puts a lot of focus on the procedure of shipping items that will store valuable cryptocurrencies after being sold and shipped.

What to Expect When You Order a Hardware Wallet

A lot of digital asset investors use hardware wallets to store their cryptocurrencies in a safer location. Most of the reputable hardware wallets are known for having very little vulnerabilities and most of the vectors are due to Man In The Middle (MITM) attacks. MITM attacks consist of an attacker obtaining a relay of the device’s private keys whether it be from extraction or during the shipping process. Satoshi Labs says that when it comes to the processing and shipping of every Trezor order the firm takes security very seriously. The team explains this week that since the company is very transparent with disclosures, and open source code they feel its only right to detail the shipping process and its delivery methods.

After receiving a payment for a new Trezor device, the company prepares to ship the unit and uses the company DHL as its default shipping service. Satoshi Labs also offers delivery by standard post which can be a much slower delivery time depending on the customer’s location. The first part of the processing begins with a logistics team that inspects the goods for a proper seal and makes sure the product is ready for delivery.

Satoshi Labs emphasizes Trezor devices do not have firmware loaded on the device when they are shipped. The device only runs signed firmware verified by a write-protected bootloader and when downloading further firmware updates the device will warn you if the protocol is not correctly signed. Satoshi Labs details that the case is also ultrasonically welded which means if the exterior is broken the device will be difficult to restore.   

If Ledger Wallet Went Out of Business “It Would Only Be An Inconvenience”
What to Expect When You Order a Hardware WalletLedger Wallet has also described in the past how its company protects the security of its devices. The company headquartered in France says that the hardware protocol used in its products uses a “decentralized wallet system.” Much like Trezor, the Ledger Wallet generates private keys during the initialization process and the keys are then stored on a secure ship within the confines of the products shell.

“Ledger never has the opportunity to make a copy of your private keys,” the company explains.

What to Expect When You Order a Hardware WalletBoth Ledger Wallet and Trezors use passphrase seeds (a sequence of 24 random words) during the initialization process which can be used for key restoration. This means if you lose your hardware wallet or the device gets damaged or stolen the seed phrase can be used to access the cryptocurrencies held on the device. Further, these seeds can be utilized to obtain the digital assets using another wallet as well just in case the company closed up shop and ran off into hiding. Ledger Wallet details how customers could handle the situation if the company went out of business.   

“If Ledger shuts down all its activities, the Ledger Chrome app will most probably stop to function as our API servers would be stopped,” the company states on its website.

However, this would only be an inconvenience, as your bitcoins would stay completely safe so long as you have your 24 words recovery phrase. With your recovery sheet and your 24 words, you can anytime restore your balance to another BIP 39.

Responsible Disclosures and Bounties
A hardware wallet’s key generation and the shipping process are very important subjects to customers especially when it comes to storing precious cryptocurrencies. These companies also disclose possible MITM vulnerabilities and offer bounties to the community for testing their products for weaknesses. It’s also good to know that if the manufacturers go out of business you can restore your cryptocurrencies without the devices or using the company’s wallet software. Anyone can test their seeds out today with another wallet just to make sure.

What do you think about the manufacturing process and shipping procedures when it comes to hardware wallets? Do these things matter to you when buying a device like this? Let us know what you think in the comments below.

https://news.bitcoin.com/what-to-expect-when-you-order-a-hardware-wallet/