Wallet S1 hardware wallet (by Gate.io)

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: o_e_l_e_o on October 18, 2020, 03:35:55 PM

Do you have a link for this? I can't find anything on a (admittedly very cursory) internet search. All the stuff I have read before is in regard to lifting a target fingerprint and creating a copy, as opposed to a "generic" fingerprint.

A 2 minute search didn't yield the expected result.

I will look into it and report back. I remember looking over the paper, just don't know where it was.
Should have been sometime within the last 3 years, but not absolutely sure about that.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18711

Quote from: bitmover on October 18, 2020, 03:15:15 PM

I use almost only in electrum. I don't update often, and I think (i am not 100% sure) that we can skip some small firmware updates if we are only using electrum.

I always check the firmware changelog/release notes before I install it, and I don't bother if it is only minor cosmetic or altcoin changes which I have no need for. 1.6.0 was an important update, which included a bunch of bug fixes as well as security enhancements to how the PIN was entered. 1.6.1 on the other hand had no security improvements, and simply added some stuff relevant for altcoins (BLS12-381 curve, faster uninstalling/installing of apps). Therefore, I have not bothered to upgrade to 1.6.1. I would have to retrieve my devices from their secure locations, and then fire up a VM and install Ledger Live on it, and I can't be bothered doing all of that for an update which means nothing to me.

Quote from: bob123 on October 18, 2020, 09:37:22 AM

There are already some blueprints available which can unlock a pretty nice percentage of fingerprint locked devices (smartphones). If i am not mistaken something between 70 and 90%, and that with a generic blueprint without any additional work involved.

Do you have a link for this? I can't find anything on a (admittedly very cursory) internet search. All the stuff I have read before is in regard to lifting a target fingerprint and creating a copy, as opposed to a "generic" fingerprint.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: o_e_l_e_o on October 17, 2020, 05:17:21 AM

They already have in the past, as have most companies. There were minor inconveniences such as reducing the number of apps which could fit on the device, to much more serious ones such as the device resetting when updated, with a handful of reports of users losing coins because of this. Now obviously, the user is also to blame here for not having their seed phrase backed up, but it is undeniable that the Ledger update process leaves much to be desired.

Reset updates are really a problem imo. It happened to me a few times, not a pleasure experience. But as I had my seeds, no worries.

Quote

I still love the physical Ledger devices, and I still absolutely hate Ledger Live.

This is the best thing about ledger devices. you don't need ledger live (unless you want to hold all those supported shitcoins).

I use almost only in electrum. I don't update often, and I think (i am not 100% sure) that we can skip some small firmware updates if we are only using electrum.

Ledger live is ok, but I need coin control and some other electrum features.

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: The Sceptical Chymist on October 14, 2020, 04:11:23 PM

I know next to nothing about the reliability of fingerprint tech as a means of using it as a "password" and your statement kind of surprised me. I would expect that if a device could recognize only your fingerprint, it'd be on point. Do you know what the problems are? Is it that fingerprint identification devices recognize other fingerprints than those it should be recognizing (like false positives)?

The problem is, that proper devices to detect fingerprints with an extremely low false positive rate cost lots of money (multiple thousands to tens of thousands of dollars).
A hardware wallet for 50$ or a smartphone only have an extremely weak fingerprint sensor built in.

There are already some blueprints available which can unlock a pretty nice percentage of fingerprint locked devices (smartphones). If i am not mistaken something between 70 and 90%, and that with a generic blueprint without any additional work involved.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18711

Quote from: dkbit98 on October 17, 2020, 04:14:20 AM

How long until they potentially screw something with some new firmware update... Huh

They already have in the past, as have most companies. There were minor inconveniences such as reducing the number of apps which could fit on the device, to much more serious ones such as the device resetting when updated, with a handful of reports of users losing coins because of this. Now obviously, the user is also to blame here for not having their seed phrase backed up, but it is undeniable that the Ledger update process leaves much to be desired.

I still love the physical Ledger devices, and I still absolutely hate Ledger Live.

Quote from: dkbit98 on October 17, 2020, 04:14:20 AM

Having that thing on hardware wallet is no advantage at all for me.

Not only is it not an advantage, but it is a real disadvantage. I would actively avoid any devices which rely on biometrics. If the device has optional biometrics which can be disabled, that's fine, but using biometrics as the only unlocking mechanism is incredibly risky. Looking at the device, there is no other way to unlock the device other than your fingerprint. Doesn't matter if the rest of the wallet is the best in the industry - for this reason alone it should be avoided.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: sheenshane on October 15, 2020, 09:59:45 AM

So, if that is a close source wallet there's no way to trust them, I don't think if people will trust with that new HW. Most commonly in HW's are open source or it's fully open-source wallet just like Trezor and Ledger Nano.

Yes, but Open Source does not mean that software is trusted, and Ledger software is not fully open source like Trezor.

Quote from: bitmover on October 15, 2020, 10:43:59 AM

I know this will never happen to me using ledger.

After hearing and seeing so much problems with Ledger Live app I can't say that Ledger is doing a great work.
How long until they potentially screw something with some new firmware update... Huh

Quote from: o_e_l_e_o on October 16, 2020, 08:56:41 AM

Biometrics are, at least for the time being, incredibly insecure.

They are totally insecure, and anyone can test how easy is to break biometrics if they have smartphone with that feature.
Having that thing on hardware wallet is no advantage at all for me.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18711

Quote from: The Sceptical Chymist on October 14, 2020, 04:11:23 PM

Is it that fingerprint identification devices recognize other fingerprints than those it should be recognizing (like false positives)?

To add on to what dkbit98 has said above, take a look at this link: https://imgur.com/gallery/8aGqsSu

Most fingerprint scanners simply scan the fingerprint in 2D. These are easily fooled by a simple print out of your fingerprint, which can easily be lifted from almost anything you have touched, including the device itself which the fingerprint scanner is meant to protect.

Some of the most high end devices on the market at the moment use ultrasonic "3D" scanners, which boast that they are harder to fool. However, in the link above, the person 3D printed a model of the fingerprint which unlocked the phone. What's more, is he didn't even have to lift the fingerprint directly - he simply took a photograph of it. He said he can do the whole process in under 3 minutes.

Biometrics are, at least for the time being, incredibly insecure.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: The Sceptical Chymist on October 14, 2020, 04:11:23 PM

Quote from: bitmover on October 14, 2020, 01:54:51 PM

But isn't it risky to use new and untested software to store your money?

That's the main reason I wouldn't buy one of these things. A secondary reason would be that I don't particularly care for the design of it. I am a big fan of shape and symmetry in design, and that includes hardware wallets. That's one of the reasons why I chose to buy a Ledger instead of a Trezor. It's the reason why I love the design of the Keepkey.

This Wallet S1 device lacks symmetry and frankly looks kind of cheaply-made. Unless it offers significant advantages over the established HWs on the market, I don't think it'll be in production for very long. It's super tough to break into the HW market, because having a track record of safety and reliability is so important, and you don't have any reputation when you're creating a new device.

If anyone tries this one out, I'd love to read a review of it.

I dont care much about design. My main concern is safety.
Few time ago a guy lost his coins because the wallet made an invalid address
https://bitcointalksearch.org/topic/m.54168914

It is very hard to predict a problem like that because we trust the software

I know this will never happen to me using ledger. But it may happen to me using untested software.

Edit: Thais problem makes me , and most people, keep using the same software from the same companies... like a centralization of wallets . Overall its terrible for the ecosystem.

sheenshane

legendary

Activity: 2492

Merit: 1232

So, if that is a close source wallet there's no way to trust them, I don't think if people will trust with that new HW. Most commonly in HW's are open source or it's fully open-source wallet just like Trezor and Ledger Nano. I don't see an interesting moment or something new with that HW that could compete with the other Hardware wallets.

Since they had planned on it to be launched anytime at this moment. They might already aware of the concern of the most crypto holders, open-source will bring too much attraction, and probably they will also follow those steps and become a fully open-source soon. For now, we can't judge them yet since isn't launched and nobody tested yet.

joniboini

legendary

Activity: 2170

Merit: 1789

Based on the official repo of the developer (https://github.com/wallet-io), the only "open-source" code are the integration module and some APIs (not even sure if its' related to the HW). So yeah, safe to assume it is closed source.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: The Sceptical Chymist on October 14, 2020, 04:11:23 PM

Really? I know next to nothing about the reliability of fingerprint tech as a means of using it as a "password" and your statement kind of surprised me. I would expect that if a device could recognize only your fingerprint, it'd be on point. Do you know what the problems are? Is it that fingerprint identification devices recognize other fingerprints than those it should be recognizing (like false positives)?

In theory it looks good and your fingerprint can only open your wallet, but it is so easy to clone and make fake fingerprint with a bit of clay, paper printer or any similar material or technique. Imagine how much you use your hands during the day and how many things you touch with your hands and fingers

Here is just one from many video examples:
https://www.youtube.com/watch?v=tU9-EBxUcVs

The Sceptical Chymist

legendary

Activity: 3500

Merit: 6981

Top Crypto Casino

Quote from: dkbit98 on October 14, 2020, 05:37:56 AM

and it will have fingerprinting tech (I am not big fan of that as it can be faked very easy).

Really? I know next to nothing about the reliability of fingerprint tech as a means of using it as a "password" and your statement kind of surprised me. I would expect that if a device could recognize only your fingerprint, it'd be on point. Do you know what the problems are? Is it that fingerprint identification devices recognize other fingerprints than those it should be recognizing (like false positives)?

Quote from: bitmover on October 14, 2020, 01:54:51 PM

But isn't it risky to use new and untested software to store your money?

That's the main reason I wouldn't buy one of these things. A secondary reason would be that I don't particularly care for the design of it. I am a big fan of shape and symmetry in design, and that includes hardware wallets. That's one of the reasons why I chose to buy a Ledger instead of a Trezor. It's the reason why I love the design of the Keepkey.

This Wallet S1 device lacks symmetry and frankly looks kind of cheaply-made. Unless it offers significant advantages over the established HWs on the market, I don't think it'll be in production for very long. It's super tough to break into the HW market, because having a track record of safety and reliability is so important, and you don't have any reputation when you're creating a new device.

If anyone tries this one out, I'd love to read a review of it.

dkbit98

legendary

Activity: 2212

Merit: 7064

Razor wallet is open source and has same software like Trezor wallet, so I would feel much safer using that,
but I am not so sure about Wallet S1, judging by their website I don't think it is open source and I can't find any license information so far.
Let's wait for official release.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

It is a good

Quote from: dkbit98 on October 14, 2020, 05:37:56 AM

Some of you may already know that I am always hunting for interesting new hardware and software wallets used for storing Bitcoins.
One of those new devices is Wallet S1 hardware wallet made by Gate.io and wallet.io, and initially it will be released only for customers in China before worldwide distribution.

Certainly that is a very healthy practice for the ecosystem. But isn't it risky to use new and untested software to store your money?

I would trust just small amounts in those wallets, and I wouldn't trust them as I trust ledger or trezor (highly tested and old hardware wallets)
Sadly, security favors oligopolies and monopolies.

I tested razor wallet from China as well (bitpie) and it was very beautiful. You can see my review here.

https://bitcointalksearch.org/topic/bithd-razor-hardware-wallet-step-by-step-guide-and-review-5259327

naska21

hero member

Activity: 1358

Merit: 635

Quote from: dkbit98 on October 14, 2020, 05:37:56 AM

snip

I don't think its sales all around the globe will be matched with those pertaining to Ledger and Trezor. Wallet S1 seems to be designed to work as HW add-on to their wallet.io Pro app. HW dongles like Ledger and Trezor are still preferable to use as they are connectable to almost all trouble-proof soft and web wallets. However Chinese market itself may have zigzag response due to relatively low price of $50.

dkbit98

legendary

Activity: 2212

Merit: 7064

https://www.gate.io/en/article/17919

Some of you may already know that I am always hunting for interesting new hardware and software wallets used for storing Bitcoins.
One of those new devices is Wallet S1 hardware wallet made by Gate.io and wallet.io, and initially it will be released only for customers in China before worldwide distribution.

Device is powered by the flagship SOC chip and dual-CPU and can be connected to web computer and to smartphones, and it will have fingerprinting tech (I am not big fan of that as it can be faked very easy) with connection to their wallet.io wallet.

Size: 60mm x 20mm x 6mm

Predicted price should be around $50 (BTC0.00438 today), and that is in range with current hardware wallets like Ledger and Trezor.

Looking at pictures we can see it is made from plastic and I don't see anything special they offer (fingerprinting is nothing special for me) that would make me buy it, but I would need to test it first before making more comments about it.

Website:
https://pro.wallet.io/hardware

Topic: Wallet S1 hardware wallet (by Gate.io) (Read 265 times)