Both of these recent security incidents deserve our attention.
1. The amount involved in the Ledger incident wasn’t that large, but it still came as quite a shock to everyone. For one thing, hardware wallet users tend to be the most risk-averse; for another, people have always had the impression that hardware wallets are the safest option.
Supply-chain issues are nothing new, but they’re dangerous:
1) Never use a hardware wallet from an unknown source. Whenever possible, buy directly from the manufacturer, and be careful during shipping—check for signs that the package has been opened.
2) Counterfeit manufacturers, fake giveaways and “gifts,” and resales on Xianyu are all major red flags.
The safest hardware wallet is an old iPhone that’s clean and kept offline. You can manually generate a random seed phrase.
2. The odds of getting hacked simply by connecting to Wi-Fi are extremely low. Many well-known security experts have also weighed in on this.
My personal guess is that these scenarios are more likely:
Possibility 1: After connecting to malicious Wi-Fi, the user’s DNS is hijacked. They enter the correct URL but are taken to a phishing site. They click a fake transaction request and end up granting authorization.
Possibility 2: The user turns on Wi-Fi while their wallet is open, and the wallet’s browser automatically redirects to a “Wi-Fi login page.” They click an authorization transaction disguised as a login, and their funds are stolen.
The best way to avoid this is to develop good wallet habits:
1) Avoid using your wallet on public Wi-Fi whenever possible.
2) Keep the wallet you use frequently separate from the one you rarely use.
3) Whenever you’re in your wallet, inspect every link carefully—even if it’s a website you visit every day.
$Near $UNI
1. The amount involved in the Ledger incident wasn’t that large, but it still came as quite a shock to everyone. For one thing, hardware wallet users tend to be the most risk-averse; for another, people have always had the impression that hardware wallets are the safest option.
Supply-chain issues are nothing new, but they’re dangerous:
1) Never use a hardware wallet from an unknown source. Whenever possible, buy directly from the manufacturer, and be careful during shipping—check for signs that the package has been opened.
2) Counterfeit manufacturers, fake giveaways and “gifts,” and resales on Xianyu are all major red flags.
The safest hardware wallet is an old iPhone that’s clean and kept offline. You can manually generate a random seed phrase.
2. The odds of getting hacked simply by connecting to Wi-Fi are extremely low. Many well-known security experts have also weighed in on this.
My personal guess is that these scenarios are more likely:
Possibility 1: After connecting to malicious Wi-Fi, the user’s DNS is hijacked. They enter the correct URL but are taken to a phishing site. They click a fake transaction request and end up granting authorization.
Possibility 2: The user turns on Wi-Fi while their wallet is open, and the wallet’s browser automatically redirects to a “Wi-Fi login page.” They click an authorization transaction disguised as a login, and their funds are stolen.
The best way to avoid this is to develop good wallet habits:
1) Avoid using your wallet on public Wi-Fi whenever possible.
2) Keep the wallet you use frequently separate from the one you rarely use.
3) Whenever you’re in your wallet, inspect every link carefully—even if it’s a website you visit every day.
$Near $UNI