BitBox on nostr

Open in Damus

Today we disclose Dark Skippy - a powerful new method for a malicious signing device to leak secret keys. With a modified signing function, a device can efficiently and covertly exfiltrate a master s...

BitBox @BitBox 1722885707

Great work demonstrating this attack!

The BitBox02 was actually the first wallet to fix this:

https://bitbox.swiss/blog/anti-klepto-explained-protection-against-leaking-private-keys/

31🤙2💜1🚀1🫂1

steepdawn974 · 85w

I remember listening to Stadicus on a podcast right when the BitBox02 came out (was still quite a noob), explaining their approach to privacy and fully open source - and I know this is the only HWW I'd trust. Never looked back since 🤙

satumadu · 85w

Low IQ Boomer here... I like my BitBox02, but I prefer to use it on Sparrow Wallet. From reading the "Mitigations", I gather that the exfiltration threat can only be avoided by using the BitBox app. Is this correct?