Pages:
Author

Topic: Just came across swissbit - super secure microSD card to store your keys AND.... (Read 2741 times)

legendary
Activity: 2926
Merit: 1386
Let me do a little research here, if the card have opensource bitcoin applet but then it will be locked during production would you be interested in it?
And what price you accept for that solution?

I really have no idea how big demand for such crads is...

Really...are you fucking kidding me?

How exactly would anyone validate it was what you said it was, and there was no other firmware at work stealing info?

Please don't answer along the lines of "I promise" or "My chief engineer promises" or "the CEO says..."

Answer with an actual answer, if it is possible.

legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
Let me do a little research here, if the card have opensource bitcoin applet but then it will be locked during production would you be interested in it?
And what price you accept for that solution?

I really have no idea how big demand for such crads is...
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
If anybody know opensource equivalent offering real time voice coding/decoding let me now please.
member
Activity: 145
Merit: 10
hero member
Activity: 623
Merit: 500
CTO, Ledger
Enjoy private keys sweeping, BIP 32 and RFC 6979 on that platform  Grin
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
I just recieved reply to negative comments from Hubert>

Quote
Hi Miroslav,

this type of mistrust I cannot say anything against, it will be endless.

How can you ever use anything like an airplane, mobile phones, PCs, drink water ...? But not too far away you find the whole bitcoin currency bases on crypto assumptions that require a much stronger trust than into a highly certified chip... don't forget.

That said, with the card you can make a single end point highly secure, this is it, no backdoors. It is a matter of trust in the end and the storage is secure, local, tangible, dual factor and finally removable.

Here is the certificates for HW and OS btw.:
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte07/0728a_pdf.pdf?__blob=publicationFile

https://www.commoncriteriaportal.org/files/epfiles/ANSSI-CC_2013-42fr.pdf

It is not possible to convince everybody, but to offer a much more secure companion  easy to handle in everyday life is not a good thing? Experts can of course reach their security target with some encrypted storage content in offline mode, for sure. A crypto currency however should grow by standard users, rarely by experts. Fostering paranoia frightens people, but - again back to the basic crypto assumptions of eCurrency - is it worth it? This card is a handy and highly secure vehicle to add security in everyday life with your eCurrency and to just let the community grow.

Cheers
Hubertus
donator
Activity: 1736
Merit: 1014
Let's talk governance, lipstick, and pigs.
Maybe ISIS will use this.  Shocked
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
legendary
Activity: 2926
Merit: 1386
Make sence now?



Sure, just publicly release your code set and provide a means of verification that the full code set on the chip, including microcode firmware, matches the released code.

Make sense now?

You see, this is the essence of a third party attack.  Right now I can encrypt files and folders, put them on SD cards and move them around quite securely.  You'd suggest that I entrust that function of security to a third party, you.

Hello, man in the middle.
newbie
Activity: 50
Merit: 0
This looks pretty cool.
I'd buy one right away.

member
Activity: 74
Merit: 10
The smart card is highly certified from Infineon

And many products came highly certified by RSA who we found out was on the payroll of the NSA. What makes the employees of Infineon immune to bribes or secret government orders? He did only deny Chinese involvement. We can take silence on the NSA backdoor as confirmation.  Wink

It does seem like there are a great number of features you could add to the card that would make some aspects of security more convenient and certainty make something like key management easier. It's probably a good product to be paired with cryptocurrency, but it doesn't do much to protect you from the typical attack vector of a  compromised device, except maybe through obscurity.
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
Just recieved:

Quote
Hi Miroslav,

let's discuss by phone tomorrow.
Yes, we can load an application you like on the cards and prefer to fuse the cards afterwards in production mode.
We could try the **********************, what do you think?

Btw. There is no chinese virus on the cards, as the guy in bt forum says. :-) The smart card is highly certified from Infineon and this is the only anchor of security...

If you have an idea how toset up a business relationship we can be quick.

We can switch to my job email *******************.

Best wishes
Hubertus

change some part of the text which should be considered confidencial between Feathercoin and swissbit now.
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
Ok,

I will ask Hubert directly to address those security flaw concerns.
I guess we all are wery curious what official answer will be  Wink

Stay tuned
sr. member
Activity: 406
Merit: 250
AltoCenter.com
I came across it last week and I didn't find anything. I am not a tech guy, but I was having some suspicion about the security flaws. Now seeing some of the posts, I am sure of it.
member
Activity: 74
Merit: 10
it has been revealed that USB thumbdrive and SD have inherent security flaws that cannot be fixed


Man, this is not an ordinary SD.
Think about it as microSD card + lot of special circuits added

That's the potential security flaw.

Your block diagram is missing the backdoors the Chinese government had installed at the chinese foundry and the rootkit that in the Swissbit Security Interface binary installs that give the NSA full access to your device.

Those things aside, unless there is some external verification to perform it's functions aside from the software on the device controlling it, everything on the card is compromised if your device is compromised.
hero member
Activity: 623
Merit: 500
CTO, Ledger
if you want to play with those technologies today, you can probably get a card from Certgate (or any other vendor putting a JCOP virtual machine in SD cards - many companies do that) and use our open source bitcoin wallet applet
hero member
Activity: 727
Merit: 500
Minimum Effort/Maximum effect
It looks like the Mint Chip technology is making it's way into the market... very interesting.
legendary
Activity: 1354
Merit: 1020
I was diagnosed with brain parasite
I almost missed this great company. At the first look simple memory producer, at the second look there was much more. Swissbit cards offers high security and even eliptic curve encryption.

Looks great. Where can I buy one?

You can't buy anywhere - swissbit, they do B2B so you can buy some from solution providers (theirs OEM partners).
We are thinking about something over at Feathercoin team member area, but I really can not leak a single word yet.
sr. member
Activity: 427
Merit: 251
- electronics design|embedded software|verilog -
I almost missed this great company. At the first look simple memory producer, at the second look there was much more. Swissbit cards offers high security and even eliptic curve encryption.

Looks great. Where can I buy one?
Pages:
Jump to: