undefined | Better HN

0 pointsjstanley2y ago0 comments

When you plug a hardware wallet into a computer it can't get the keys off the wallet. It can only ask the hardware wallet to sign a transaction, and the hardware wallet asks the user to confirm.

When you plug a thumbdrive with keys on it into a computer the computer can just take the keys.

It's the same as the difference between a YubiKey and a thumbdrive with GPG keys on it.

0 comments

Osiris2y ago

They exploited the change address which most crypto hardware wallets don't show when verifying a transaction.

j / k navigate · click thread line to collapse

0 pointsjstanley2y ago0 comments

When you plug a hardware wallet into a computer it can't get the keys off the wallet. It can only ask the hardware wallet to sign a transaction, and the hardware wallet asks the user to confirm.

When you plug a thumbdrive with keys on it into a computer the computer can just take the keys.

It's the same as the difference between a YubiKey and a thumbdrive with GPG keys on it.

0 comments

Osiris2y ago

They exploited the change address which most crypto hardware wallets don't show when verifying a transaction.

j / k navigate · click thread line to collapse