Wait... so the ledger allows any firmware to be uploaded without signature check... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		limpkin on March 20, 2018 \| parent \| context \| favorite \| on: Breaking the Ledger Security Model Wait... so the ledger allows any firmware to be uploaded without signature checking? damn :(

ghthor on March 21, 2018 [–]

Seems insane right? Their entire userbase only exists because of the power that PKCrypto gives us to build lasting lines of trust and they don't sign firmware images....

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact