Any vulnerabilities in changing OLED screen of Ledger Nano S?

tread93

hero member

Activity: 1077

Merit: 534

Quote from: Maus0728 on April 10, 2022, 08:28:49 AM

Heya! I'm aware that this question has been asked many times before. Still, I'd need some feedback from others to see if I'm making the right decision in purchasing a 0.91-inch OLED screen^[1] to replace my Ledger Nano S, which had faded significantly after 1.5 years of use.

I'm also aware that Ledger developed a countermeasure for the display vulnerability^[2] discovered in their old firmware, which they claimed was non-critical, but I still want to make sure that what I'm trying to do is practical and completely safe.

[1] https://www.alibaba.com/product-detail/0-91Inch-Oled-128x32-Driver-Ic_1600235094273.html?spm=a2747.manage.0.0.2f1771d2HrG9QW
[2] https://support.ledger.com/hc/en-us/articles/360033473414-OLED-Screen-vulnerability-FAQ?support=true

Thank you!!

Do yourself a favor and throw that Ledger nano s in the trash after you buy yourself a new hardware wallet and move all you funds over AWAY from ledger completely!!! They are not to be trusted what so ever!

oland

newbie

Activity: 2

Merit: 2

I replaced my Ledger Nano S screen around one year ago now. Still working perfectly fine after one year and I used it a lot lately! I am very happy with it. Very easy to replace (I know nothing about electronics), you can find several videos to help just searching for something like "ledger nano s screen replacement". I ordered the screen online but not on a Chinese website, on another website that only sell Ledger Screens. A bit less cheap but still a very good price, good shipment tracking and support in English (tested before order).

dkbit98

legendary

Activity: 2212

Merit: 7064

Cashback 15%

Quote from: Maus0728 on June 10, 2022, 01:26:07 AM

Heya!! I've already received the product. Although the shipping from China to the Philippines was delayed due to certain transit issues, it is still worth the wait, so I can fix the OLED issue on the Ledger NONO S and have an extra hardware wallet. Moving on, I'll do my best to record or document the screen replacement process in a few days.

Please post update if you manage to replace screen and if your hardware wallets works fine after this little operation.

Delivery from China has been terrible in last few weeks/months, and I have some information it's going to be even worse soon!
I ordered some spare parts for my laptops back in March, and I am still tracking package rollercoaster that never left China after several fake releases from their customs.
I received refund for stuff I purchased so I don't really care, but I would suggest everyone to avoid ordering anything important from China now.

Maus0728

legendary

Activity: 1876

Merit: 1552

Bitcoin Casino Est. 2013

Heya!! I've already received the product. Although the shipping from China to the Philippines was delayed due to certain transit issues, it is still worth the wait, so I can fix the OLED issue on the Ledger NONO S and have an extra hardware wallet. Moving on, I'll do my best to record or document the screen replacement process in a few days.

m2017

legendary

Activity: 1792

Merit: 1296

keep walking, Johnnie

Quote from: Maus0728 on May 29, 2022, 11:27:53 AM

I recently purchased two OLED screen replacements for my previous Ledger Nano S device, as well as an additional in case something similar occurs with the new one, which I hope does not. So far, the Alibaba supplier of these displays has been quite responsive to concerns about their products.

Personally, I will follow the development of events in your story, as I am curious to see both the final result and all the stages of replacing broken display on the Ledger device.

I see the date of the order (2022-05-29). Don't forget to indicate the date of receipt of the parcel please, so that can have an idea of the approximate delivery time (of course, taking into account only your country).

~$15 is the shipping cost? 10 times more expensive than the display itself

.

Quote from: Maus0728 on May 29, 2022, 11:27:53 AM

I'm currently waiting for the OLED screen to be delivered to our doorstep, and I'm hoping to be able to share some documentation or procedures for screen replacement in this topic. For security reasons, I'm also planning to factory reset the old ledger device and create a new wallet with a small amount of bitcoin in it.

I like your intention to share some screen replacement documentation or procedures in this topic, because it might be useful for those who have similar problems with a hardware wallet like you. And so, all the necessary information can be found step by step in one topic. This is great.

And, the results of the test with a small amount of bitcoin (after factory reset) will also be interesting to know.

I wish you good luck and I'm sure you will succeed.

Maus0728

legendary

Activity: 1876

Merit: 1552

Bitcoin Casino Est. 2013

I recently purchased two OLED screen replacements for my previous Ledger Nano S device, as well as an additional in case something similar occurs with the new one, which I hope does not. So far, the Alibaba supplier of these displays has been quite responsive to concerns about their products.

I'm currently waiting for the OLED screen to be delivered to our doorstep, and I'm hoping to be able to share some documentation or procedures for screen replacement in this topic. For security reasons, I'm also planning to factory reset the old ledger device and create a new wallet with a small amount of bitcoin in it.

Good luck to me.

dkbit98

legendary

Activity: 2212

Merit: 7064

Cashback 15%

Quote from: m2017 on May 03, 2022, 02:26:53 PM

This is getting interesting. How will ledger get out with those buyers who need to replace defective devices under warranty, but they will not be available. Will company send a new HW model, that is the question.

It's going to be similar like with any device that stopped prduction.
Just look what they did with their many previously discontinued products, they will provide service and spare parts or repairs, but you won't be able to replace devices anymore.
I am thinking they are going to offer new S plus device as replacement with discount or additional payment if they still have everything under warranty.

Pmalek

legendary

Activity: 2730

Merit: 7065

Farewell, Leo. You will be missed!

Quote from: dkbit98 on May 03, 2022, 02:06:19 PM

Sure, he will lose warranty by doing this, but it's not rocket science to open ledger device, they are even suggesting doing this on their website if customer want to check hardware integrity and that device was not been tampered with.
https://support.ledger.com/hc/en-us/articles/4404382029329-Check-hardware-integrity?support=true

That's true. But there is also an important notice at the bottom in bold letters that doing that voids the warranty. So the user has to weigh up his options and decide what is better. Don't open the device physically and remain in doubt about the hardware, or open it and forget about complaining to Ledger if problems arise down the road.

Quote from: m2017 on May 03, 2022, 02:26:53 PM

The warranty is most likely 12 or 24 months, as usual. 24 months seems unlikely to me.

Ledger hardware wallets come with a 2-year warranty. But I remember a case with a member from the forum who got his HW replaced even after the warranty expired. They have also confirmed something similar to me (I posted the screenshot somewhere in this sub) and said that the device would be replaced in some cases even after the warranty expired.

Quote from: m2017 on May 03, 2022, 02:26:53 PM

This is getting interesting. How will ledger get out with those buyers who need to replace defective devices under warranty, but they will not be available. Will company send a new HW model, that is the question.

They could offer a discount if you purchased a new device. The new HW minus whatever you paid for your Nano S.

m2017

legendary

Activity: 1792

Merit: 1296

keep walking, Johnnie

Quote from: dkbit98 on May 03, 2022, 02:06:19 PM

Quote from: Pmalek on May 03, 2022, 03:21:14 AM

I wouldn't recommend him to do that. He should at least know that opening the hardware wallet results in voiding the warranty. If he breaks something or the device malfunctions while under warranty period, Ledger won't replace it for free if they see that he tampered with it.

I don't know how long warranty is, but I know it won't matter much in next year when they run out of their supply.
Sure, he will lose warranty by doing this, but it's not rocket science to open ledger device, they are even suggesting doing this on their website if customer want to check hardware integrity and that device was not been tampered with.
https://support.ledger.com/hc/en-us/articles/4404382029329-Check-hardware-integrity?support=true

The warranty is most likely 12 or 24 months, as usual. 24 months seems unlikely to me.

This is getting interesting. How will ledger get out with those buyers who need to replace defective devices under warranty, but they will not be available. Will company send a new HW model, that is the question.

If a manufacturer offers to check HW and has an article on its website describing how to do this, will they be against opening the device for check

Quote from: dkbit98 on May 03, 2022, 02:06:19 PM

hardware integrity and that device was not been tampered with

while recording it on video. If flaws are found in this way, will the video recording allow the warranty to be maintained.

dkbit98

legendary

Activity: 2212

Merit: 7064

Cashback 15%

Quote from: Pmalek on May 03, 2022, 03:21:14 AM

I wouldn't recommend him to do that. He should at least know that opening the hardware wallet results in voiding the warranty. If he breaks something or the device malfunctions while under warranty period, Ledger won't replace it for free if they see that he tampered with it.

I don't know how long warranty is, but I know it won't matter much in next year when they run out of their supply.
Sure, he will lose warranty by doing this, but it's not rocket science to open ledger device, they are even suggesting doing this on their website if customer want to check hardware integrity and that device was not been tampered with.
https://support.ledger.com/hc/en-us/articles/4404382029329-Check-hardware-integrity?support=true

Pmalek

legendary

Activity: 2730

Merit: 7065

Farewell, Leo. You will be missed!

Quote from: dkbit98 on May 02, 2022, 05:14:47 PM

You know they are not manufacturing ledger nono S devices anymore, so they can only send stuff they made before...

That's most probably it. Maybe they had enough Nano S devices in stock when the rebranding happened that they immediately decided not to manufacture new ones.

Quote from: dkbit98 on May 02, 2022, 05:14:47 PM

It's not that big of a difference, but one thing he can do is opening ledger device and checking revision number written on board, and compare it with one on ledger website.

I wouldn't recommend him to do that. He should at least know that opening the hardware wallet results in voiding the warranty. If he breaks something or the device malfunctions while under warranty period, Ledger won't replace it for free if they see that he tampered with it.

dkbit98

legendary

Activity: 2212

Merit: 7064

Cashback 15%

Quote from: SFR10 on May 02, 2022, 04:58:28 AM

I'm a bit surprised they were able to quickly send a replacement unit to you ^{[I'm happy for you]}, but am I correct in assuming that you included your first Nano S by mistake or they just sent you one of their previous packages that had their old logo?

You know they are not manufacturing ledger nono S devices anymore, so they can only send stuff they made before, and I suspect that majority have old logos and old white box packaging (new packaging is black).
It's not that big of a difference, but one thing he can do is opening ledger device and checking revision number written on board, and compare it with one on ledger website.
I am sure his device has some old firmware version, so he needs to update that as well.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: Lucius on May 02, 2022, 10:48:22 AM

Are you sure the Nano S also comes in a new package? I know this is the case with the Nano X that comes in a black box, but it doesn't make much sense to me to change anything for the old model, although I may be wrong.

I'm not sure about the whole package ^{[sorry, I should've been clearer that I was only referring to the device in question]}, but based on the "rendered images on their website ^{[except for the video]}" and most of their official resellers ^{[e.g. cryptomaan]}, I automatically assumed they'd be shipping them with new engravings ^{[IIRC, they rebranded 6 or 7 months ago and judging by how quickly they usually sell their products, I didn't expect to see any of their products to ship with the previous logo]}.

Lucius

legendary

Activity: 3220

Merit: 5630

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: Maus0728 on May 02, 2022, 03:09:15 AM

I finally received the Ledger Nono S replacement after almost 3 weeks of waiting.

I am glad that you listened to my advice and now you have a new device, and if you manage to repair the old one, you will have another one as a spare, which is a very good option in case your HW breaks down irretrievably. From a safety point of view, it is not recommended to enter the seed anywhere except in another HW, except in situations when this is not possible for some reason.

Quote from: SFR10 on May 02, 2022, 04:58:28 AM

I'm a bit surprised they were able to quickly send a replacement unit to you ^{[I'm happy for you]}, but am I correct in assuming that you included your first Nano S by mistake or they just sent you one of their previous packages that had their old logo?

Are you sure the Nano S also comes in a new package? I know this is the case with the Nano X that comes in a black box, but it doesn't make much sense to me to change anything for the old model, although I may be wrong.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: Maus0728 on May 02, 2022, 03:09:15 AM

I finally received the Ledger Nono S replacement after almost 3 weeks of waiting.

https://i.imgur.com/7LTprqIl.jpg

I'm a bit surprised they were able to quickly send a replacement unit to you ^{[I'm happy for you]}, but am I correct in assuming that you included your first Nano S by mistake or they just sent you one of their previous packages that had their old logo?

Quote from: Maus0728 on May 02, 2022, 03:09:15 AM

As we all know, there is a customs restriction in delivering their products to the Philippines and to other countries as well, but I assume this is not the case given their response thru email and the fast delivery.

Did Ledger provide any other details ^{[apart from the SS]} as to why normally, Filipinos can no longer order directly but they can still ship replacement units to the Philippines?

m2017

legendary

Activity: 1792

Merit: 1296

keep walking, Johnnie

Quote from: Maus0728 on May 02, 2022, 03:09:15 AM

Update!

I finally received the Ledger Nono S replacement after almost 3 weeks of waiting.

Upon checking, as usual, the box container is sealed using a thin plastic but the contents are now a bit different as compared to the previous package I received from them less than 2 years ago. I also checked the latest packaging on their website to verify that the product is genuine. There is also a video about their new packaging on their website, if you prefer watching.

The package of a Ledger Nano S should include:

Quote

A Ledger Nano S
Micro USB cable
Get started leaflet
3 Recovery sheet
Accessories: Keychain, Lanyard
Packaging: Ledger-branded cardboard box

Link to source

As we all know, there is a customs restriction in delivering their products to the Philippines and to other countries as well, but I assume this is not the case given their response thru email and the fast delivery. Also, I still didn't tested the new HW yet, maybe by tomorrow or the day after I finished most of my important task in school. Overall, I am impressed with Ledger's support in attending to my queries. Thanks, everyone. I might also replace the OLED screen of the old ledger, maybe after some time.

Glad for you that everything went well, you got a new working device. 3 weeks is not such a long period and it was worth the wait to get this HW.

Did you choose the transparent case of the device yourself (was it possible to choose the color of nono s?) or did the company send it in such a case on its own initiative?

Will await the results of a detailed experiment on replacing the display on an old nano s. As far as I remember, no one has published a detailed guide on this topic here yet. Unfortunately, this may be in demand due to frequent device display failures, as many ledger users complain about this.

Maus0728

legendary

Activity: 1876

Merit: 1552

Bitcoin Casino Est. 2013

Update!

I finally received the Ledger Nono S replacement after almost 3 weeks of waiting.

Upon checking, as usual, the box container is sealed using a thin plastic but the contents are now a bit different as compared to the previous package I received from them less than 2 years ago. I also checked the latest packaging on their website to verify that the product is genuine. There is also a video about their new packaging on their website, if you prefer watching.

The package of a Ledger Nano S should include:

Quote

A Ledger Nano S
Micro USB cable
Get started leaflet
3 Recovery sheet
Accessories: Keychain, Lanyard
Packaging: Ledger-branded cardboard box

Link to source

As we all know, there is a customs restriction in delivering their products to the Philippines and to other countries as well, but I assume this is not the case given their response thru email and the fast delivery. Also, I still didn't tested the new HW yet, maybe by tomorrow or the day after I finished most of my important task in school. Overall, I am impressed with Ledger's support in attending to my queries. Thanks, everyone. I might also replace the OLED screen of the old ledger, maybe after some time.

Maus0728

legendary

Activity: 1876

Merit: 1552

Bitcoin Casino Est. 2013

Quote from: dkbit98 on April 15, 2022, 07:34:12 AM

That is a new twist, but how did he ordered his device in the first place?
Maybe he has a friend or family in other countries who can receive it first and send him this new device.

Ledger was able to deliver the product in the Philippines before covid19 spread across the country, and the government imposed a nationwide lockdown. However, I recall that when the device arrived in the customs, there was a one-week delay before DHL (courier) contacted me to receive it for delivery somewhere other than my home address.

As of now, I am waiting for the support to reply from the shipping address I provided to verify if they truly acknowledge the replacement, especially now that I am anticipating a delay due to the restriction.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: dkbit98 on April 15, 2022, 07:34:12 AM

That is a new twist, but how did he ordered his device in the first place?

As @m2017 mentioned previously, this was not always the case and the same thing applies to "Trezor products" as well, but having said that, none of their official resellers ^{[in PH]} seem to be affected by these changes ^{[there must be a way to ship to the PH, but perhaps they don't want to go through the trouble of dealing with certain issues, for just individual orders]}!

sadog

newbie

Activity: 14

Merit: 0

Btw, Did You Search For Cve On Ledger nano S To exploit it? Or You Have Forgot Your Wallet Password?

Topic: Any vulnerabilities in changing OLED screen of Ledger Nano S? (Read 414 times)