Are electronic wallets really safe?
Are electronic wallets really safe?
by : @Abderrachidhafsi
The hardware wallet after its strong reputation as a safe storage device and a digital @currency buffer became questionable when the latest report was released from mid-August 2017, claiming that @Trezor, a manufacturer of the same device as a coin @portfolio, And one of the most popular portfolios, has been successfully hacked by hackers. Based on this report, it is alleged that the Tresor devices are vulnerable to a fairly simple penetration that allows theft or knowledge of the keys to the accounts of such devices.
How did this breakthrough become possible?
@Trezor, in its official blog, acknowledged this incident and explained how the attack took place. Where the company said that the origin of the private key was saved in the flash memory and then transferred to the RAM of the device (RAM) during use. In this case anyone who can access the device and firmware can be able to extract these codes from RAM. The @security flaw appears to be limited to @Trezor devices only, so users of other devices or portfolios should not be concerned about the security and integrity of their accounts. However, it is recommended that users keep their portfolios vigilant against persistent threats and make sure that their firmware has got the latest updates.
Tresor responded to the security attack
According to the official code, Trezor has already launched a firmware update under version 1.5.2 to resolve this issue and eliminate all known weaknesses in its system. With this new release, the company said that the chance that cybercriminals can actually access users' devices is already too small or almost impossible. However, the company still advises all its users to stay vigilant and constantly update the firmware to fully protect their accounts. Although this incident was handled by @Trezor very quickly, the incident still creates some uncertainty among users in terms of security of the electronic portfolio. It remains to be seen whether users' trust in the platform will be fully restored in the near future.