New Tamper-Evident Packaging to Curb Hardware Wallet Vulnerabilities

New Tamper-Evident Packaging to Curb Hardware Wallet Vulnerabilities
ôîòî ïîêàçàíî ñ : news.bitcoin.com

2019-11-23 06:00

As digital assets have grown valuable over the last decade, hardware wallets have become a mainstay and there’s now a variety of choices on the market. However, people still worry about their devices being tampered with during the shipping process and the firm Shift Cryptosecurity AG wants to erase the anxiety tied to these types of attacks. In order to curb vulnerabilities in shipping hardware wallets, Shift created a tamper-evident packaging product called Bitboxtep.

Also Read: A Review of the Swiss-Made Digital Bitbox Hardware Wallet

Bitboxtep: High-Level Tamper-Evident Packaging

Cryptocurrency hardware wallets have been very popular during the last few years and many digital currency proponents use them to secure their assets. Although when buying a hardware wallet, some people worry about the delivery process and attacks like a postal employee opening the device. Since the introduction of hardware wallets, the industry has seen different tamper-evident methods like tamper-resistant holographic tape and other schemes used to protect the device from being accessed before reaching the owner.

Now Shift Cryptosecurity AG has designed a new method called Bitboxtep which aims to eliminate attacks during the shipping process. Shift is the creator of Digital Bitbox, a minimalist hardware wallet. News.Bitcoin.com reviewed the first Bitbox product in February 2018. Digital Bitbox has a few privacy features other wallets don’t have like “plausible identity” using hidden wallets. Now the company has initiated the alpha testing of Bitboxtep or Tep so people can experiment with the firm’s next-generation tamper-evident packaging product. Shift has published a demonstration video of the new Tep packaging as well as specifications of how the product works.

“Bitboxtep is a security packaging that significantly raises the cost of tampering during shipping or storage — Our solution proposes a temporarily locked fingerprint consisting of spherical particles,” Shift Cryptosecurity AG’s documentation states. “The negative pressure achieved by vacuum sealing creates an elaborate design in a transparent vacuum bag. When the vacuum bag is opened, the spherical particles mix.” The product specifications further explain:

This makes it extremely difficult to rearrange into the original design. You compare the reference image fingerprint taken prior to shipment with the received packaging. Currently, you use your eye to verify that the pattern is unchanged. Eventually, a mobile phone supported computer vision app will verify the images to further enhance accuracy.

Tamper Deterrent

Shift has started accepting applications for alpha Tep testers and people interested in this new tamper-evident packaging can apply. Essentially when a user gets the unit, they need to scan the QR code to access the reference image or visit the company’s serial code portal to enter the 8-digit serial code in the text mask. Then the user needs to shake the package to make sure the particles are locked. Shift noted that a few of the particles within clusters may move freely in a small range. However, after comparing the temporarily locked fingerprints of the reference image and the packaging, the two should match. If everything checks out, then the user can cut the vacuum bag open and remove the particle pouch. From here, the product’s packaging particles should be in a loose state, but if they don’t Shift says to contact them as soon as possible. “To verify if there is a difference between your fingerprint and the reference image, we recommend to go from high level to details,” Shift’s Bitboxtep document suggests.

Shift’s specifications also note that the company has prototyped a variety of different designs and they wanted to make sure the particles would lock and ensure they become loose when the seal is broken. “We use industrial-grade vacuum sealing equipment to make reproducible test sets — We’ve tested our prototypes to work in a temperature range between +40°C and -20°C,” Shift claims. “We aim for both more intense sub -20°C tests soon and upper-temperature limitations by using high temperature resistant plastic casings.” The company stressed:

We are currently able to lock over 95% of the particles. A handful of particles in tight cluster situations tend to move within a small area, which we consider acceptable. We’re constantly improving our physical prototypes to get as close to 100% as possible. Eventually, a mix of particles with different colors (RGB) will enable even higher entropy.

The current methods used today don’t really compare to the amount of high-level security being used for Bitboxtep. In comparison, the traditional tamper-evident tape is used by most hardware wallets. Some people might find the Bitboxtep security a bit extreme, but if a person has $50,000, $100,000 or more in BTC or another crypto, then they might feel a lot more comfortable knowing their device hasn’t been tampered with during the shipping process. On social media and crypto forums, digital currency proponents welcomed the new concept from the Switzerland-based firm. “That’s really cool, I like it — As bitcoin becomes worth more, it will be worth it for thieves to invest the money to manufacture their own tamper-proof materials and boxes, so after they break into a shipment they can replace it,” a crypto user wrote on Reddit about the alpha Bitboxtep packaging. “This is a pretty good deterrent to that,” he added.

What do you think about Shift Cryptosecurity AG’s new tamper-evident packaging product called Bitboxtep? Let us know what you think about this subject in the comments section below.

Disclaimer: This article is for informational purposes only. It is not an offer, solicitation or a recommendation, endorsement, or sponsorship of any products, websites, software, services, or companies mentioned. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.

Image credits: Shutterstock, and Shift Cryptosecurity AG.

Did you know you can buy and sell BCH privately using our noncustodial, peer-to-peer Local Bitcoin Cash trading platform? The local.Bitcoin.com marketplace has thousands of participants from all around the world trading BCH right now. And if you need a bitcoin wallet to securely store your coins, you can download one from us here.

The post New Tamper-Evident Packaging to Curb Hardware Wallet Vulnerabilities appeared first on Bitcoin News.

origin »

Bitcoin price in Telegram @btc_price_every_hour

Time New Bank (TNB) íà Currencies.ru

$ 0 (+0.00%)
Îáúåì 24H $0
Èçìåíåèÿ 24h: 0.00 %, 7d: 0.01 %
Cåãîäíÿ L: $0 - H: $0
Êàïèòàëèçàöèÿ $0 Rank 99999
Öåíà â ÷àñ íîâîñòè $ 0.002809 (-100%)

hardware new vulnerabilities packaging tamper-evident wallet curb

hardware new → Ðåçóëüòàòîâ: 126


Ôîòî:

Leak: Samsung’s Note 10 will be ‘a pro studio in your pocket’ with new video tricks

Samsung’s Note 10 is due to be revealed tomorrow, but that isn’t stopping the leaks from coming. Though we already seem to know every aspect of the devices, a new leak shared by Droid Life comes from very official-looking promotional materials, confirming much of the hardware changes we’ve heard so far and highlighting some new software tricks too.

2019-8-7 01:26


Zcash Foundation Reveals FPGA Research Results

The Zcash Foundation has revealed the results of its latest research to create new hardware, which is expected to make Zcash (ZEC) network more efficient and affordable for end-users. The Foundation’s research in Field-Programmable Gate Arrays (FPGAs) can accelerate the verification process of the blockchain itself, as well as the cryptographic and zk-SNARKS operations which […] The post Zcash Foundation Reveals FPGA Research Results appeared first on Crypto Briefing.

2019-7-23 16:07


Xiaomi’s Redmi K20 Pro will have 3 rear cameras and no notch, for only $400

After last year’s Poco F1, Xiaomi is once again gunning for the top spot in the affordable premium smartphone ($400-$700) segment in India – which is currently held by OnePlus. It’s hitting back with the new Redmi K20 Pro, which features top-of-the-line specs, a pop-up selfie camera, a rear triple-camera set up, and a competitive price: Rs 27,999 ($406).

2019-7-17 14:13


11 things to remember when testing your product before launch day

Rolling out new hardware and software can be a stressful time for any business. You are excited about the new experience for your customers but nervous about any issues that could arise. In order to prepare, you need to test, test and test again to ensure there won’t be any problems with the product launch, or later down the road, that will force you to issue a recall or endanger your customers’ trust in you.

2019-6-28 12:00


Gamechanger Audio’s analog synth uses drone motors to create awesome music

In a time where most musical advancements seem to come in the form of software tricks, it’s refreshing to see a product with a new kind of analog hardware. That’s what Gamechanger Audio delivers with its new Motor Synth, an analog electro-mechanical synthesizer that uses drone motors as oscillators to create unique sounds with a gritty, industrial texture.

2019-6-13 01:54


New XMRig Cryptojacking Malware Found by Trend Micro Is Attacking Devices Around the World

The cryptocurrency investors of the world are probably pretty happy to see the Coinhive crypto mining script offline, but that doesn’t mean that cryptojacking is over. In fact, recent research by Trend Micro indicates that there’s a new collection of malware that is going after users’ hardware, in an effort to mine cryptocurrency. According to […]

2019-6-5 02:11


Ôîòî:

Eobot – A Crypto Exchange and Cost Effective Cloud Mining Solution

Mining Bitcoin and other Proof of Work (PoW) cryptocurrencies has traditionally required users to invest in expensive mining hardware, called ASICs, to mine new coins. Instead, some operators are using cloud mining solutions, which require little to no hardware to maintain, produce no heat and require virtually zero electricity for the user – with the cloud […] Eobot – A Crypto Exchange and Cost Effective Cloud Mining Solution was originally found on Cryptocurrency News | Tech, Privacy, Bitcoin & Blockchain | Blokt.

2019-5-8 11:22