Ledger’s Post

Ledger Stax is the future, Ledger Stax is the cutting-edge new Ledger hardware device, designed by iPhone co-creator, Tony Fadell. — Ledger Stax goes beyond securing your Crypto assets: it redefines the Web3 user experience. Store your digital assets there, take your Crypto & NFT’s off exchanges, I’m currently using Ledger Nano X and I’m looking forward to get my hands on the Ledger Stax. #web3 #crypto

Ledger Stax started shipping to pre-order customers TODAY! @Ledger customers deserve a definitive answer to the question “What took so long?!?!” so we put together a short film with details on what makes Ledger Stax and it's first-of-its-kind display so special, and the long road to release. The link is in the first comment of this post from Ledger. Ledger Stax contains multiple firsts: the world's first Secure Touchscreen, the first curved E ink Touchscreen, and the first Organic TFT brought to mass production. These firsts are well-described in the video above. Please watch. I want to sincerely thank my friend Tony Fadell for embarking on this journey with us. Before working on Ledger Stax I knew Tony as a friend, fellow parent and music fanatic. Through this project, I had the incredible fortune to see his book BUILD leap off the pages in a real-life example, from an idea he tried to run from but chased him down to searching for the root causes of production issues instead of giving up or even doubting. Tony is the only person I've met who can see both the circuit board and the billboard in his head at the same time. I want to shout heartfelt thanks and admiration for the entire Ledger team for seeing this project all the way through to this ship to customers. I’d name names but the list is far too long and I’d run the risk of forgetting one – we are a team. This wasn't a sprint or even a marathon. It was an ultramarathon. The pain was real. We ran it together. That yield curve was a measurement of my emotional health these last eighteen months and I know it was the same for many of you. But you did the impossible and chipped away at every single challenge week after week where most others would have given up. All the while, Ledger Stax was far from the only thing on your plate! The entire Ledger product suite and roadmap has evolved while we have been bringing Ledger Stax to market. In so many ways this feels like the starting gun, not the finish line. I hope you watch the video mentioned above, hear Johnson from E Ink say, “you didn't just make a device, you changed the world of displays,” and feel deep pride. Onward, together! Ledger Stax represents a merger of two idealistic worlds. Tony Fadell and the team he brought to the project are uncompromising on user experience and design. The Ledger team is uncompromising on security and self custody. Merging these development cultures wasn't easy, but it's the embodiment of our mission, exactly the difficult work we need to do to bring the secure self custody of digital assets to more people around the world. Increasingly this is one culture focused on bringing ease-of-use with digital ownership to humanity without ever compromising on security or self custody.

👉👉 Wondering what it is? This is a very important mobile security lock which is... https://lnkd.in/gQKgxsZB #trybesttech #bypass #pc #frp #android #security #google #googleverification #unlockphon #motorolamobile #motorolamobileUSA #unlock #motorolamoto #googleaccount

APPLE DROPPING THE BALL ON SECURITY, AGAIN! 😞 The GoFetch vulnerability in Apple's M-series chips could potentially lead to a class action lawsuit against Apple for several reasons: 1. Unpatchable Hardware Flaw: The GoFetch vulnerability stems from a fundamental design flaw in the hardware architecture of the M1, M2, and M3 chips. Since it cannot be fully patched or mitigated through software updates, users cannot protect themselves from this vulnerability without replacing the entire chip or device. This lack of a fix represents a major security risk. [1][2][3][4][5] 2. Enabling Data Theft: GoFetch allows attackers to extract sensitive cryptographic keys and other private data from devices with M-series chips during cryptographic operations. This could lead to theft of financial information, passwords, and other confidential data, causing significant harm to users. [1][2][4] 3. Lack of Disclosure: While Apple was made aware of GoFetch in December 2023, there has been no public disclosure or warning from Apple about this critical vulnerability to its customers so far. This lack of transparency could be seen as negligence. [5] 4. Potential for Exploitation: Even though no real-world exploits of GoFetch have been reported yet, the public revelation of this vulnerability increases the risk of malicious actors attempting to take advantage of it, putting user data at risk. [4][5] 5. Financial Losses: Users who purchased expensive Apple devices with the expectation of security and privacy may have suffered financial losses due to this unfixable vulnerability, diminishing the value and usability of their devices for sensitive tasks. [1] The law firm Markovits, Stock & DeMarco has already initiated an investigation into a potential class action lawsuit against Apple over the GoFetch vulnerability on behalf of affected device owners. They cite the inability to practically fix the flaw and the endangerment of crucial assets like cryptocurrency private keys as grounds for legal action. [1] Given the severity of the flaw, the lack of remediation, and the potential for financial harm to users, it appears highly likely that Apple could face class action litigation from impacted customers over the unpatchable GoFetch vulnerability in their M-series chips. Citations: [1] https://lnkd.in/gvh-_95s [2] https://lnkd.in/g5zYk-VW [3] https://lnkd.in/gEmU-NAk [4] https://lnkd.in/gtVaE9cc [5] https://lnkd.in/ggWMJuhd #Apple #MacBookPro #MacMini #Security #CyberSecurity #Cryptography #Crypto

A high-level overview of the trusted platform module and its cryptographic features that can be used to perform the platform attestation.  #TPM #crypto #TEE #Security #Hardware #ConfidentialComputing #ROT #microprocessor #csp #cloudcomputing https://lnkd.in/eXeZzdnq

Translated by Safari browser from the Dutch: '... almost two and a half years, from the end of 2017 to spring 2020, [Chinese threat actors] had access to the computer systems of the Dutch chip manufacturer. This is according to research by NRC. 'That company has been the main supplier of chips for the automotive industry... After ASML, NXP is the most valuable company in the European chip industry... 'It also provides the secure elements for chips in the iPhone, for contactless payments via Apple Pay. 'Initially, the hackers use regular accounts of NXP employees to log in to the company network. 'They extract that account data from previous data breaches from other web services, such as LinkedIn or Facebook. (Paraphrased): The attackers brute forced the employees' VPN passwords, then did SIM swaps so that they could beat MFA. [That's it? SIM swapping against employees of one of the world's most valuable chip companies? And MFA being phone-based at this company, not using a hardware U2F token? Granted this was in 2017, but stuff like RSA tokens were hardly new back then?] 'They try to funnel the sensitive data they find there into encrypted archive files via cloud storage services such as Microsoft OneDrive... the hackers come every few weeks to see if there is interesting new data at NXP...' [Clever, both the exfil method and the intent to not make regular noise] 'NXP omits the fact that the hackers could browse around unhindered for years. That is not stated in subsequent annual reports [ie post-2020]. [Of course.] 'The log files, which cover more than two years, show that the working hours correspond exactly to the Chinese time zones... And the longer periods in which the spies are not or hardly active coincide exactly with the Chinese holiday season, the so-called Golden Week'. https://archive.md/DzpUI

Apple has hit a master stroke recently with its shift to PQ3 (Post Quantum Level 3 Encryption) on iMessage. Without getting into levels of detall 💤 about how it works, this new encryption standard is defensible from having its keys / ciphers cracked / factored by a quantum computer in the future. (Not sure you can say ‘totally’ but that’s maybe debatable) In true Apple style they mix the technology with a prescient need and together create a feature that will give them a better platform and a point of difference. Leaders and businesses are urged to act now with planning and executing their refresh approach for encryption because it is likely that existing ciphers / standards will be given a depreciation deadline - almost certainly something that will be driven by regulation that will run the clock down. Thinkng this doesn’t impact you? Think again. It will impact all data storage, messaging, transactions and information transfer, and bitcoin wallets on the internet - direct or otherwise. All your applications that use encryption will be impacted. And the harvest (data) now, crack later risk is very real. #quantumcomputing #postquantumcryptography #transformation https://lnkd.in/eWFkTVb7

Apple's New iMessage, Signal, and Post-Quantum Cryptography: Written by Denis Mandich, Member of the CSA Quantum-Safe Security Working Group and CTO of Qrypt.Apple recently updated their iMessage application with stronger security features, adopting cryptography believed to be secure against attack by quantum computers. They use common end-to-end encryption techniques, but there are aspects unique to their platform. Although they have not explained the justifications for the design decisions, they are cryptographically sound if implemented correctly an...

We have previously described the Tkey random number generator app, how using the Blake2s hash function and an internal state could generate high-quality, cryptographically secure random numbers to support applications. We briefly said that the random number generator is periodically seeded using the True Random Number Generator (TRNG) core in the TKey. But what is a TRNG, what is its purpose, and how does it work? We have written a detailed description of how the TRNG in TKey works. https://lnkd.in/gGxsfKMS #cybersecurity #infosecurity #cryptography #randomnumbers