Yishi

@ohyishi • 97,096 subscribers

janitor @OneKeyHQ

Shorts

we hacked ledger. the OneKey Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

we hacked ledger. the OneKey Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

1,456,791 次观看

built this to help you check your hardware wallet for signs of tampering. upload a board photo. works with onekey, ledger and trezor. free, no signup, no photos saved. it can flag what looks wrong, but a clean result isn’t an all-clear.

built this to help you check your hardware wallet for signs of tampering. upload a board photo. works with onekey, ledger and trezor. free, no signup, no photos saved. it can flag what looks wrong, but a clean result isn’t an all-clear.

324,859 次观看

即日起，1k 将每天全额补贴前 1500 笔波场转账的矿工费。注意，是每天。也就是说，你现在就可以在 1k 上免费转账波场网络的代币（比如 USDT）了。 pm 同学跟我说后续会在转账页面增加补贴入口，具体领取方式见视频。

即日起，1k 将每天全额补贴前 1500 笔波场转账的矿工费。注意，是每天。也就是说，你现在就可以在 1k 上免费转账波场网络的代币（比如 USDT）了。 pm 同学跟我说后续会在转账页面增加补贴入口，具体领取方式见视频。

63,796 次观看

nearly all the core ideas of the major philosophers in the history of Western philosophy are here. the questions that trouble you now have been asked before; the answers you have imagined have been given before. if philosophy offers no answer, the answer is blowing in the wind.

nearly all the core ideas of the major philosophers in the history of Western philosophy are here. the questions that trouble you now have been asked before; the answers you have imagined have been given before. if philosophy offers no answer, the answer is blowing in the wind.

11,067 次观看

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

We get asked this a lot: “How do I know my hardware wallet hasn’t been tampered with before it gets to me?” Between the factory and your door, a wallet spends time in warehouses and in transit. Packaging is only one part of preventing supply chain attacks, but it matters. It helps you check for signs of tampering when the wallet arrives. That’s why we’ve put a lot of work into ours. OneKey has four layers of protection: 1. Clear shrink wrap around the whole box. 2. A destructible seal on the box that breaks when removed. 3. A holographic tamper-evident seal on the device that shows “VOID” when peeled off. 4. Device authentication in the official OneKey App, plus firmware signature checks by the Secure Element (SE). Our manufacturer is in the same tier as those making Apple and Google Pixel devices. To enter the factory, you have to pass through multiple gates and three security checks, sign in, and verify your identity. All phones and other communication devices have to be handed over and kept in lockers. There are cameras throughout the factory. There’s still a lot more to do. We’ll keep tightening security and improving these measures.

We get asked this a lot: “How do I know my hardware wallet hasn’t been tampered with before it gets to me?” Between the factory and your door, a wallet spends time in warehouses and in transit. Packaging is only one part of preventing supply chain attacks, but it matters. It helps you check for signs of tampering when the wallet arrives. That’s why we’ve put a lot of work into ours. OneKey has four layers of protection: 1. Clear shrink wrap around the whole box. 2. A destructible seal on the box that breaks when removed. 3. A holographic tamper-evident seal on the device that shows “VOID” when peeled off. 4. Device authentication in the official OneKey App, plus firmware signature checks by the Secure Element (SE). Our manufacturer is in the same tier as those making Apple and Google Pixel devices. To enter the factory, you have to pass through multiple gates and three security checks, sign in, and verify your identity. All phones and other communication devices have to be handed over and kept in lockers. There are cameras throughout the factory. There’s still a lot more to do. We’ll keep tightening security and improving these measures.

156,401 次观看 • 1 个月前

今日から、日本全国の PayPay 加盟店で、Binance Pay を使って USDT でそのまま支払えるようになりました！

今日から、日本全国の PayPay 加盟店で、Binance Pay を使って USDT でそのまま支払えるようになりました！

30,487 次观看 • 1 个月前

how do hardware wallets get hacked, roughly... and what can we do better to stop this from happening again?

how do hardware wallets get hacked, roughly... and what can we do better to stop this from happening again?

21,526 次观看 • 27 天前

重生之我在币圈当大佬。

重生之我在币圈当大佬。

291,483 次观看 • 2 年前

travel mode is live in onekey. turn it on to hide your wallets, assets, and history. the app icon changes too. nothing gets deleted. turn it off and everything’s back. settings › travel mode

travel mode is live in onekey. turn it on to hide your wallets, assets, and history. the app icon changes too. nothing gets deleted. turn it off and everything’s back. settings › travel mode

20,315 次观看 • 1 个月前

just shipped the new onekey developer center. if you’re building with ai agents, take a look. the agent prepares the transaction, you check it on your onekey and decide whether to sign. no need to give it your keys.

just shipped the new onekey developer center. if you’re building with ai agents, take a look. the agent prepares the transaction, you check it on your onekey and decide whether to sign. no need to give it your keys.

11,867 次观看 • 29 天前

multi-sig is still under construction. we haven’t decided whether to invest more time building it yet. would you like to see us ship a dedicated multi-sig vault that works with onekey, ledger, trezor, and other hardware wallets?

multi-sig is still under construction. we haven’t decided whether to invest more time building it yet. would you like to see us ship a dedicated multi-sig vault that works with onekey, ledger, trezor, and other hardware wallets?

27,209 次观看 • 3 个月前

we just added support for bip-360 (p2mr) address, still in draft but soon. possibly the first wallet in the world to ship a quantum-ready address. bc1z is a segwit v2 output defined in bip-360. p2mr stands for pay to merkle root. unlike taproot, it commits only to a script-tree merkle root and completely removes the key-path spend. there is no internal public key embedded or committed in the output itself. in taproot, an internal public key is always part of the output, even if it is never used. with p2mr, the output contains only the merkle root of the script tree. a public key is revealed only at spend time, inside the executed script branch, not at receive time. this design avoids publishing long-lived public keys on chain in advance, reduces long-term public key exposure, and shrinks the attack surface in a potential quantum future where exposed public keys could become vulnerable. it is a structural hardening step at the address level. it does not change consensus rules, does not break existing wallets, and existing addresses continue to work as usual. job’s not done 🫡

we just added support for bip-360 (p2mr) address, still in draft but soon. possibly the first wallet in the world to ship a quantum-ready address. bc1z is a segwit v2 output defined in bip-360. p2mr stands for pay to merkle root. unlike taproot, it commits only to a script-tree merkle root and completely removes the key-path spend. there is no internal public key embedded or committed in the output itself. in taproot, an internal public key is always part of the output, even if it is never used. with p2mr, the output contains only the merkle root of the script tree. a public key is revealed only at spend time, inside the executed script branch, not at receive time. this design avoids publishing long-lived public keys on chain in advance, reduces long-term public key exposure, and shrinks the attack surface in a potential quantum future where exposed public keys could become vulnerable. it is a structural hardening step at the address level. it does not change consensus rules, does not break existing wallets, and existing addresses continue to work as usual. job’s not done 🫡

37,709 次观看 • 8 个月前

撸毛、套利、打新，群友现状。

撸毛、套利、打新，群友现状。

90,131 次观看 • 2 年前

iPhone 3GS demo animation. got my first one 16 years ago, and it still hasn’t aged.

iPhone 3GS demo animation. got my first one 16 years ago, and it still hasn’t aged.

15,518 次观看 • 6 个月前

big thanks to the team — this is just the appetizer for the year.

big thanks to the team — this is just the appetizer for the year.

18,042 次观看 • 1 年前

没有更多内容可加载