Jade DIY hardware wallet - page 5. | Bitcointalksearch.org

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: cygan on October 21, 2023, 03:17:21 AM

apparently customer data has been leaked at Blockstream! numerous users of the Jade hardware wallet have received the fake email shown below, which looks deceptively real at first glance.
Adam Back has already confirmed that it is a scam.
if you have received this type of email, please delete it immediately and do not click on any link.

I saw this but it doesn't have to be database leak, and this was not confirmed.
From what I heard random people received this phishing email even if they never purchased Jade hardware wallet or signed up for any other Blockstream services.
It is possible this people used their email for some stupid airdrops or they signed up for other crypto newsletters or they purchased some other brand of hardware wallets like ledger aka leaker.

Pmalek

legendary

Activity: 2730

Merit: 7065

Not one more leak. Embarrassed

It's a well-written email that sounds believable unless you pay attention and look at the email address for example.

It will be interesting to see what exactly leaked and in which quantity. I am subscribed to Blockstream's blog and newsletter in my experiment to see if any fake data will leak or if I will receive phishing emails. I can confirm that I haven't received such phishing emails. They might target Jade users exclusively.

cygan

legendary

Activity: 3304

Merit: 8633

Crypto Swap Exchange

apparently customer data has been leaked at Blockstream! numerous users of the Jade hardware wallet have received the fake email shown below, which looks deceptively real at first glance.
Adam Back has already confirmed that it is a scam.
if you have received this type of email, please delete it immediately and do not click on any link.

https://twitter.com/adam3us/status/1715621325883265505

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: Onset on June 06, 2023, 09:49:06 PM

Is someone who’s buying a PC more vulnerable to being hacked or targeted than someone who’s buying random boards off the internet? Now that’s a stat I’d like to see! Cheesy

Yes they are obviously more vulnerable, I never heard anyone getting hacked using this devices, and every minute someone who is using computers is hacked in the world.
Anyone with a working brain could realize why this is the case, and chips are all coming from same places anyway.

hZti

hero member

Activity: 1022

Merit: 642

Magic

Quote from: Onset on June 06, 2023, 09:49:06 PM

It’s not as convenient as a device like Ledger, but it gets the job done better than any other such device in my opinion.

Just create a seed and some adresses offline and store them securely on a metal plate. Then completely reset the device that you use for creating those informations. Simply store 80% off your bitcoin on those adresses and never worry about anything again. With 20% still liquid you should usually not worry about having to move the other 80% regularly.

Most hardware wallets also have the disadvantage that they are pretty expensive and if you plan to buy multiple ones then you will mess up your profits pretty big.

Onset

jr. member

Activity: 56

Merit: 26

Quote from: dkbit98 on June 06, 2023, 02:02:51 PM

Better don't risk anything and don't use bitcoin at all, your computer and smartphone are compromised already Shocked

Is someone who’s buying a PC more vulnerable to being hacked or targeted than someone who’s buying random boards off the internet? Now that’s a stat I’d like to see! Cheesy

I feel like if you buy random boards it’s much easier to be the victim of a compromised batch than if you buy a computer. But now that I think about it, this fear can be easily bypassed.. the more hardware wallets launch and the more complicated these things get, the more I start loving the idea of a traditional cold storage wallet by transforming old devices into the cold storage. It’s not as convenient as a device like Ledger, but it gets the job done better than any other such device in my opinion. Why even bother purchasing possibly counterfeit boards and all if maybe there’s a pre-Bitcoin era laptop out there in the attic laying down & waiting for you to give it life again?

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: DaveF on June 04, 2023, 07:23:34 PM

That is that is because your not thinking like a paranoid tinfoil hat person. Also keep in mind that compromising device like this would not just be about compromising a hardware Bitcoin wallet, it would be about compromising thousands of IoT things that could be anywhere doing anything giving who knows whom access to who knows what.

On contrary, I am thinking like a paranoid tinfoiler most of the time, but I am realistic about this subject.
If you think this devices are compromised than you shouldn't use your smartphone, laptop or any other electronic device for anything related with bitcoin....since you are 100% ''paranoid tinfoil hat person''.

Quote from: DaveF on June 04, 2023, 07:23:34 PM

But why risk it, which is why I and then you pointed out that anybody getting these should only be buying them from m5stack.com or their approved suppliers.

Better don't risk anything and don't use bitcoin at all, your computer and smartphone are compromised already Shocked

DaveF

legendary

Activity: 3500

Merit: 6320

Crypto Swap Exchange

Quote from: dkbit98 on June 03, 2023, 03:11:53 PM

This is general used electronic hardware and it's not connected with Bitcoin in any way, and this DIY bitcoin wallets are not very popular, so I don't see any danger here.
Official shop is always the best place to purchase stuff like this.

That is that is because your not thinking like a paranoid tinfoil hat person. Also keep in mind that compromising device like this would not just be about compromising a hardware Bitcoin wallet, it would be about compromising thousands of IoT things that could be anywhere doing anything giving who knows whom access to who knows what.

Getting some Bitcoin out of the deal would just be a bonus, but how many people would buy some like the field tech I know, and then hook these devices up to whatever and have no clue that they're not original hardware. They look like it, they act like it, but they're not. So who the heck knows what is embedded deep down inside. Could be nothing and these were just cheap knockoffs that they were selling , or they could have some vicious code buried somewhere. Personally I'm going with the benign theory and people are just out to make a buck.

But why risk it, which is why I and then you pointed out that anybody getting these should only be buying them from m5stack.com or their approved suppliers.

-Dave

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: hZti on June 03, 2023, 12:57:30 AM

Very nice that there is such a big scene of people modding this wallet and creating accessories for it. If I have the opportunity I will definitely try to create a high quality casing

I don't understand why would you need a high quality case for this? Roll Eyes

It's just a cheap DIY 3d printing that is available anywhere...
People did make premium metal cases for similar DIY devices like SeedSigner, but this is not needed at all and it can only attract attention.

Quote from: hZti on June 03, 2023, 12:57:30 AM

What would maybe be possible would be fill the case with Silikone. Does someone has experience with that?

No.
Silicone is used for isolation, not so much for cases and 3d printing.

Quote from: DaveF on June 03, 2023, 06:31:15 AM

From the paranoid tinfoil hat wearing department, be careful where you buy some of these boards from.

This is general used electronic hardware and it's not connected with Bitcoin in any way, and this DIY bitcoin wallets are not very popular, so I don't see any danger here.
Official shop is always the best place to purchase stuff like this.

BitcoinGirl.Club

legendary

Activity: 2800

Merit: 2736

Farewell LEO: o_e_l_e_o

Quote from: dkbit98 on June 02, 2023, 02:57:15 PM

You always have the option to buy wallet with cash in store, or use PO box delivery with alternative name and address.

That's what I had to do when I was buying those Ledger Devices.

Quote from: DaveF on June 03, 2023, 06:31:15 AM

From the paranoid tinfoil hat wearing department, be careful where you buy some of these boards from.

It did not miss my eyes 😉

DaveF

legendary

Activity: 3500

Merit: 6320

Crypto Swap Exchange

Quote from: hZti on June 03, 2023, 06:46:06 AM

It’s super cheap to buy them and they end up in every kind of envoirements, scientist, government, businesses etc.. In those kind of envoirments devices like this are also very hard to track, so in my opinion the only reason to counterfeit such a device would really be some kind of malicious activity. I think otherwise the profit would be to small. Is there a good way to see if a chip is real or counterfeit?

Yes & no.
If you buy from them: https://shop.m5stack.com/ you can probably assume it's real. And I would think the ones coming out of their approved resellers are also real.

Beyond that, I don't think you can. A tech I know bought a bunch from them and when he needed more went to what he thought was a reputable site since at the time M5 had no stock. When one died and he sent it back to M5 it came back as not made by us. Looking at them side by side they were the same. Even in the same packing. Their attitude was we sell them and so do these people, getting it elsewhere you are on your own.

So, yes people will clone a $25 thing. Might not even be for evil reasons, just something cheap to make with a good profit margin.
There are even youtube videos about people selling counterfeit IC chips in the $3 range so..... https://www.youtube.com/watch?v=12u_hBkHB88

-Dave

hZti

hero member

Activity: 1022

Merit: 642

Magic

It’s super cheap to buy them and they end up in every kind of envoirements, scientist, government, businesses etc.. In those kind of envoirments devices like this are also very hard to track, so in my opinion the only reason to counterfeit such a device would really be some kind of malicious activity. I think otherwise the profit would be to small. Is there a good way to see if a chip is real or counterfeit?

DaveF

legendary

Activity: 3500

Merit: 6320

Crypto Swap Exchange

From the paranoid tinfoil hat wearing department, be careful where you buy some of these boards from.

Not necessarily anything malicious directed towards Bitcoin wallets, but even at the ridiculously low price points that you could find and online there are still a ton of counterfeits out there.

I'm assuming that they are just cheap knockoffs being passed off as the less cheap real thing. But in the end you don't have a verifiable source of where some of these chips came from or even who did what at the factory when they were assembled.

Why anyone would create a pirate / clone M5 stack is beyond me, but they are out there Sad

-Dave

hZti

hero member

Activity: 1022

Merit: 642

Magic

Very nice that there is such a big scene of people modding this wallet and creating accessories for it. If I have the opportunity I will definitely try to create a high quality casing for a wallet like this to be able to offer it at a competitive price point to other mainstream wallets. Because so far not really any hardware wallet I know does qualify what I consider a well built case. Well built will for me especially include some kind of moisture and water protection.

People may ask why this is necessary but most of those people are relatively new to the crypto world. After 10 years and many destroyed USB Sticks with wallet.dat files on them you will get more cautious Wink

What would maybe be possible would be fill the case with Silikone. Does someone has experience with that?

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: BitcoinGirl.Club on June 01, 2023, 09:20:23 AM

This made me laugh and sad at the same time when I know what experience we had with Ledger. It's hard to break the link unless you convince someone to receive the delivery for you and they don't know what will it be. This way you put them in risk too.

You always have the option to buy wallet with cash in store, or use PO box delivery with alternative name and address.
For people who want to break the link there is always a way to do it Wink

Quote from: hZti on June 01, 2023, 01:22:07 PM

Very cool project, what I kind of miss as usual with this devices is a good (3D printed) case option, since the display is nice for just 10 USD, but nothing more then a gimmick without the option to put it in a casing.

There is a bunch of STL files available online for free, so everyone can print their own case version.
I know a guy who printed two case versions, one of them is more square shaped and other with oval shape.

CryptoGuide released one more video with custom cases and added camera:
https://www.youtube.com/watch?v=V2yVKag2wlc

hZti

hero member

Activity: 1022

Merit: 642

Magic

Very cool project, what I kind of miss as usual with this devices is a good (3D printed) case option, since the display is nice for just 10 USD, but nothing more then a gimmick without the option to put it in a casing.
The more expensive options are nice tho, even also them I would not really consider as more as a gimmick to play around with.

Quote from: BitcoinGirl.Club on June 01, 2023, 09:20:23 AM

Quote from: dkbit98 on June 01, 2023, 09:12:07 AM

You still have to trust Blockstream to keep all your personal information safe, and hope there won't be any leaks or attacks that will steal and sell your data.

This made me laugh and sad at the same time when I know what experience we had with Ledger. It's hard to break the link unless you convince someone to receive the delivery for you and they don't know what will it be. This way you put them in risk too.

You can consider to let them ship the device to some kind of parcel box like it is usually possible in most countries. With that option a thief will maybe be able to get to your name but that’s all. I think this information will not be enough for somebody really trying to Trackballes down and rob you.

BitcoinGirl.Club

legendary

Activity: 2800

Merit: 2736

Farewell LEO: o_e_l_e_o

Quote from: dkbit98 on June 01, 2023, 09:12:07 AM

You still have to trust Blockstream to keep all your personal information safe, and hope there won't be any leaks or attacks that will steal and sell your data.

This made me laugh and sad at the same time when I know what experience we had with Ledger. It's hard to break the link unless you convince someone to receive the delivery for you and they don't know what will it be. This way you put them in risk too.

Quote from: dkbit98 on June 01, 2023, 09:12:07 AM

CryptoGuide posted a wonderful video instructions how to do everything, with more details on his github page and this will have secure boot same as original Jade device:
https://www.youtube.com/watch?v=PeqP6oVnlIs

On my watch list and I am still looking for a better way for my crypto to keep safe after ledger came up with this wired wallet backup concept. A multisig wallet is still the safest option for me.

dkbit98

legendary

Activity: 2212

Merit: 7064

Jade hardware wallet is open source and it's not very expensive, Blockstream is currently selling it for around $65 plus shipping, and there is a 10% discounts if you pay with L-USDT.

You still have to trust Blockstream to keep all your personal information safe, and hope there won't be any leaks or attacks that will steal and sell your data.

Solution for this is to make your own Jade DIY wallet, and there are several options for everyone to choose.

CryptoGuide posted a wonderful video instructions how to do everything, with more details on his github page and this will have secure boot same as original Jade device:
https://www.youtube.com/watch?v=PeqP6oVnlIs

There is one more quick and dirty solution using Blockstream Jade DIY flasher utility BUT in this case there is no secure boot and flash encryption!
This works for TTGO T-Display, M5Stack Fire, M5Stack Black/Gray and M5StickC PLUS.
https://blockstream.github.io/jadediyflasher/

TTGO (Lilygo) T-Display ~$10 USD

https://github.com/3rdIteration/Jade/blob/master/diy/readme.md

M5 StickC-Plus ~$20 USD

https://github.com/3rdIteration/Jade/blob/master/diy/readme.md

M5 Stack Basic ~$40 USD

https://github.com/3rdIteration/Jade/blob/master/diy/readme.md

All this devices are running with Open Source code so I am adding it to my list of DIY open source hardware wallets:
https://bitcointalksearch.org/topic/list-open-source-hardware-wallets-5288971

Topic: Jade DIY hardware wallet - page 5. (Read 1393 times)