Yishi

@ohyishi • 95,677 subscribers

a toolmaker for self-custody @OneKeyHQ

Shorts

we hacked ledger. the OneKey Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

we hacked ledger. the OneKey Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

1,452,974 views

即日起，1k 将每天全额补贴前 1500 笔波场转账的矿工费。注意，是每天。也就是说，你现在就可以在 1k 上免费转账波场网络的代币（比如 USDT）了。 pm 同学跟我说后续会在转账页面增加补贴入口，具体领取方式见视频。

即日起，1k 将每天全额补贴前 1500 笔波场转账的矿工费。注意，是每天。也就是说，你现在就可以在 1k 上免费转账波场网络的代币（比如 USDT）了。 pm 同学跟我说后续会在转账页面增加补贴入口，具体领取方式见视频。

63,796 views

nearly all the core ideas of the major philosophers in the history of Western philosophy are here. the questions that trouble you now have been asked before; the answers you have imagined have been given before. if philosophy offers no answer, the answer is blowing in the wind.

nearly all the core ideas of the major philosophers in the history of Western philosophy are here. the questions that trouble you now have been asked before; the answers you have imagined have been given before. if philosophy offers no answer, the answer is blowing in the wind.

11,067 views

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

活下来比什么都重要。和 Beca🔸Binance 在币安Binance华语聊了聊 OneKey 这些年是怎么熬过来的 🙏

活下来比什么都重要。和 Beca🔸Binance 在币安Binance华语聊了聊 OneKey 这些年是怎么熬过来的 🙏

16,616 views • 7 days ago

重生之我在币圈当大佬。

重生之我在币圈当大佬。

291,394 views • 2 years ago

multi-sig is still under construction. we haven’t decided whether to invest more time building it yet. would you like to see us ship a dedicated multi-sig vault that works with onekey, ledger, trezor, and other hardware wallets?

multi-sig is still under construction. we haven’t decided whether to invest more time building it yet. would you like to see us ship a dedicated multi-sig vault that works with onekey, ledger, trezor, and other hardware wallets?

26,894 views • 1 month ago

we just added support for bip-360 (p2mr) address, still in draft but soon. possibly the first wallet in the world to ship a quantum-ready address. bc1z is a segwit v2 output defined in bip-360. p2mr stands for pay to merkle root. unlike taproot, it commits only to a script-tree merkle root and completely removes the key-path spend. there is no internal public key embedded or committed in the output itself. in taproot, an internal public key is always part of the output, even if it is never used. with p2mr, the output contains only the merkle root of the script tree. a public key is revealed only at spend time, inside the executed script branch, not at receive time. this design avoids publishing long-lived public keys on chain in advance, reduces long-term public key exposure, and shrinks the attack surface in a potential quantum future where exposed public keys could become vulnerable. it is a structural hardening step at the address level. it does not change consensus rules, does not break existing wallets, and existing addresses continue to work as usual. job’s not done 🫡

we just added support for bip-360 (p2mr) address, still in draft but soon. possibly the first wallet in the world to ship a quantum-ready address. bc1z is a segwit v2 output defined in bip-360. p2mr stands for pay to merkle root. unlike taproot, it commits only to a script-tree merkle root and completely removes the key-path spend. there is no internal public key embedded or committed in the output itself. in taproot, an internal public key is always part of the output, even if it is never used. with p2mr, the output contains only the merkle root of the script tree. a public key is revealed only at spend time, inside the executed script branch, not at receive time. this design avoids publishing long-lived public keys on chain in advance, reduces long-term public key exposure, and shrinks the attack surface in a potential quantum future where exposed public keys could become vulnerable. it is a structural hardening step at the address level. it does not change consensus rules, does not break existing wallets, and existing addresses continue to work as usual. job’s not done 🫡

37,709 views • 7 months ago

撸毛、套利、打新，群友现状。

撸毛、套利、打新，群友现状。

90,128 views • 2 years ago

iPhone 3GS demo animation. got my first one 16 years ago, and it still hasn’t aged.

iPhone 3GS demo animation. got my first one 16 years ago, and it still hasn’t aged.

15,518 views • 4 months ago

big thanks to the team — this is just the appetizer for the year.

big thanks to the team — this is just the appetizer for the year.

18,042 views • 1 year ago

No more content to load