http://www.stellaw.info/blog daily 1.0 2016-04-04 http://www.stellaw.info/blog/2016/4/4/stop-doing-tamper-evident-security-seals-wrong monthly 0.5 2016-04-04 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1459809249454-JM27UJ0MZ9RE2SLCTD2I/image-asset.jpeg blog - Stop Doing Tamper Evident Security Seals Wrong! https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1459809326959-APVG6IVOTUYAEKFYFLQP/image-asset.jpeg blog - Stop Doing Tamper Evident Security Seals Wrong! https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1459809400264-OMFIVTK7K14ZS41LYV40/image-asset.jpeg blog - Stop Doing Tamper Evident Security Seals Wrong! https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1459809473228-ZXUY5QTT7CTA8YQCLH6X/image-asset.jpeg blog - Stop Doing Tamper Evident Security Seals Wrong! http://www.stellaw.info/blog/2016/3/5/dinosaur-hiphop-zero-alphaprototype-dev-kits-for-sale monthly 0.5 2016-03-06 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1457223397799-6OL69FUR85FBNJU7V8QD/image-asset.jpeg blog - DINOSAUR HIPHOP ZERO alpha/prototype dev kits for sale https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1457223711351-WNNCW0IH4M48GKBIP5PR/image-asset.jpeg blog - DINOSAUR HIPHOP ZERO alpha/prototype dev kits for sale http://www.stellaw.info/blog/2016/2/12/bitlox-first-impressions-and-teardown monthly 0.5 2016-02-13 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455323126978-2LPK1MVBCYK6N9RPDWE7/image-asset.jpeg blog - Bitlox first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455323185497-6UL38YX9F3FRZOTD8H0I/2016-02-12+16.27.27.jpg blog - Bitlox first impressions and teardown Nice large e-ink screen. About the height and width of a credit card, but about 4mm thick https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455324180460-RZAECMIWJ4FOMN5WZG4P/image-asset.jpeg blog - Bitlox first impressions and teardown There's some goo in the upper right corner of the screen underneath the protective outer surface layer. This appears on both units. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455324388283-2M782SZ9QTNM8XM9WD1B/image-asset.jpeg blog - Bitlox first impressions and teardown Its hard to capture how not flat the front surface of the Bitlox is. Also, look at those keys! They will catch on things in your pocket and bend out of position quite easily. I drink Mt. Dew. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455324640981-U5WSWX5O63866PUCRR8U/image-asset.jpeg blog - Bitlox first impressions and teardown This is pretty terrible. I didnt test it, but I doubt this would be moisture/water resistant at all. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455324833245-R99FNU1B9JCGYQZZ830U/image-asset.jpeg blog - Bitlox first impressions and teardown The connection between the two pieces is visible along the bottom edge of the left part, to the right of the shiny silver battery. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455330280258-REUSNUSAJHBXTYCMAVW2/image-asset.jpeg blog - Bitlox first impressions and teardown The back of the keyboard along with soldered edge connection https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455330579580-82H5P524P18YUJ3SC6HZ/image-asset.jpeg blog - Bitlox first impressions and teardown The space between the component side of the pcb and the rear shell is partially filled with a hardened black epoxy. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455330791574-2JTATLWV909MUCEXJYTN/image-asset.jpeg blog - Bitlox first impressions and teardown SMT components embedded in hardened black epoxy https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455331029745-9BZFN8MQAQ5EWAVH7B8E/2016-02-12+16.47.28.jpg blog - Bitlox first impressions and teardown That's alot of passives. There's also what looks like a jtag/debugging header over there on the right side. This board is dead due to parts being embedded in the epoxy, but I could imagine that a hole could be carefully drilled right at that location on a working device to get access to that header to test to see if its enabled. I'd check the firmware source code, but its not available. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455331077375-14MSF5TB2XK7GV2SVRN2/image-asset.jpeg blog - Bitlox first impressions and teardown Off-the-shelf bluetooth module https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455331383730-LR35D2RQH3R0PJJ60URI/image-asset.jpeg blog - Bitlox first impressions and teardown Can you read the Atmel part number? Nope! You can't! https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1455331555585-H1ZNRNX1BWMQ79ND1VPP/image-asset.jpeg blog - Bitlox first impressions and teardown Why would they do this? What are they trying to hide? Who would ever trust this with their Bitcoins? http://www.stellaw.info/blog/2015/12/23/trezor-is-open-source-hardware monthly 0.5 2015-12-23 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1450909734995-JXX0OJWUDPGKG6VKYWLI/image-asset.png blog - Trezor *is* open source hardware! From: https://github.com/trezor/trezor-hw/blob/master/electronics/trezor.brd.png http://www.stellaw.info/blog/2015/12/22/i-built-my-own-trezor-clone-dinosaur-hiphop-zero monthly 0.5 2015-12-23 http://www.stellaw.info/blog/2015/12/16/breakout-board monthly 0.5 2015-12-19 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1450562378098-FRXTT7HTGXG4V906EZSL/image-asset.jpeg blog - Breakout Board http://www.stellaw.info/blog/2015/12/12/trezor-clones-and-bootloader-development-platform monthly 0.5 2015-12-19 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1450562618621-YVTT02BBXA20VW5ONWPX/image-asset.jpeg blog - Trezor Clones and Bootloader Development Platform http://www.stellaw.info/blog/2015/12/7/open-source-and-firefox-and-trezor monthly 0.5 2015-12-19 http://www.stellaw.info/blog/2015/12/5/trezor-bootloader-source monthly 0.5 2015-12-19 http://www.stellaw.info/blog/2015/12/1/trezor-hotdogs-and-skydiving monthly 0.5 2015-12-19 http://www.stellaw.info/blog/2015/11/30/trezor-memory-layout monthly 0.5 2015-12-19 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1450562821124-OCEGDDV9J3Z14ZDFCDNW/image-asset.jpeg blog - Trezor Memory Layout http://www.stellaw.info/blog/2015/9/26/case-wallet-teardown monthly 0.5 2015-09-26 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286058621-RKSCF6KHU71OTSYYANGC/image-asset.jpeg blog - Case Wallet Teardown Thin cardboard box. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286106028-LQMVN41G5KODGRDRSBLL/2015-09-26+11.14.24.jpg blog - Case Wallet Teardown Qi wireless charger https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286159725-RQZL1LJNG7ML4HK9GOF5/image-asset.jpeg blog - Case Wallet Teardown How would you expect to turn this on? https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286227503-TJ4OWZ0XL3IFMBIHBW6B/image-asset.jpeg blog - Case Wallet Teardown Wobbles when setting on its face due to face button design. Covering hologram sticker with serial number. Generic hologram sticker could be purchased by anyone inexpensively. Why do companies add these useless things? https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286280863-ACN3SW3UJLQM4EZGN5L6/image-asset.jpeg blog - Case Wallet Teardown Camera not especially well protected. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286332547-5RJQG2FZLHMGI7UEZCG9/image-asset.jpeg blog - Case Wallet Teardown Buttons feel cheap and mushy. Cutout around fingerprint scanner is off center. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286428722-J8OICJX5XFHDE0RUC8RT/image-asset.jpeg blog - Case Wallet Teardown Front face is super easy to peel off. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286710237-7BPW8B8X863HQX7V6SUF/image.jpg blog - Case Wallet Teardown Buttons are embedded into the thin front face and connected with a thin ribbon connector in the middle of the left edge, which I'm surely about to break. Also, the device is about a quarter inch thick -- far too thick to 'fit in my wallet' https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286683696-Z91G16DRKBO7C5YELJFQ/image.jpg blog - Case Wallet Teardown Man, the insides are full of this black sticky tar adhesive. Ugh.   The ring there is the wireless charger loop https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443282250226-MWPKFO3S5AJA0A0NL6FH/image.jpg blog - Case Wallet Teardown The other side of the unused 3M adhesive strip https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286742721-WDEN3LEML92YP6Z29IEH/image.jpg blog - Case Wallet Teardown The screen is tar glued to the battery. I damaged the screen while opening up the unit. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286507277-QGV4LE33E94I2D3E2WXH/image-asset.jpeg blog - Case Wallet Teardown Cell module and STM32F437. Networking right next to private keys (I'm assuming - case hasn't posted any source code) https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286575070-RUP3GS68FOPL9KJB01XD/image-asset.jpeg blog - Case Wallet Teardown 3.7V, 270mAh https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1443286608166-HZCUX3FNEDPGZFUK72IK/image.jpg blog - Case Wallet Teardown What a mess of non-repairable goo!  http://www.stellaw.info/blog/2015/9/23/keepkey-is-available-for-sale monthly 0.5 2015-09-23 http://www.stellaw.info/blog/2015/9/2/lavender monthly 0.5 2015-09-02 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1441236796646-GDW92ZRM9LZSYC4U1FBT/image.jpg blog - Lavender http://www.stellaw.info/blog/2015/8/18/keepkey-first-impressions-and-teardown monthly 0.5 2015-08-19 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942013821-UOWLTJF3F4AUWJ0M0L0O/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942114596-JPIAQCG7JL7NJODP7E85/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942173896-OI5YTF59QXNV31JOJPHT/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942250404-T411O3FHOWQVNXW5VFW2/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942360300-7A3WZY3HEJ6CK943RPSO/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942404765-MT00U5FFXP9D5S4EXIH0/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439942464054-HCAIRWAF4MB1R217KM53/image.jpg blog - KeepKey first impressions and teardown https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1439943882913-EB0KVKA7L9FVQPWFRO5F/image.jpg blog - KeepKey first impressions and teardown http://www.stellaw.info/blog/2015/7/28/another-trezor-clonefork-is-coming monthly 0.5 2015-07-29 http://www.stellaw.info/blog/2015/7/16/bootloader-version monthly 0.5 2015-07-16 http://www.stellaw.info/blog/2015/4/29/memory-protection-test monthly 0.5 2015-05-01 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1430364181897-2COXSERG9V54GI3HD9SE/image-asset.png blog - Memory Protection Test https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1430365172848-Q84WBJA1TM6B4ODH6NS3/IMG_0640.JPG blog - Memory Protection Test https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1430366072083-D8O94ZX0OVCOAD4J522B/image-asset.jpeg blog - Memory Protection Test https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1430366268408-M09AY7XGASWP9BU09XDI/image-asset.jpeg blog - Memory Protection Test https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1430366329470-WOXNE6TY5OOHOQ1GSIGP/image-asset.jpeg blog - Memory Protection Test http://www.stellaw.info/blog/2015/4/10/trezor-private-key-extraction-via-power-analysis monthly 0.5 2015-04-10 http://www.stellaw.info/blog/2015/3/24/mycelium-entropy-impressions monthly 0.5 2015-03-24 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427232438682-G4M4DY3RO3Q2P1APXLFZ/image-asset.jpeg blog - Mycelium Entropy Impressions https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427232612114-CO4ZFR04KGI3KMEZAHNE/IMG_0611.JPG blog - Mycelium Entropy Impressions Branded holographic security seal? https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427232802545-UQXIORPA1MW0P3994QCC/image-asset.jpeg blog - Mycelium Entropy Impressions This, my friends, is called "Security Theater." The 'security seal' is *easily* bypassed. Makes me wonder what other security 'features' they got boneheadedly wrong. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427233050599-PBLG6FYOWJRKB7LWR6HD/image-asset.jpeg blog - Mycelium Entropy Impressions Its an ATMEL ATSAM4LS4 ARM Coretx M proc https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427233344905-HDZWZZRGSZJ1Q24SR6E4/image-asset.jpeg blog - Mycelium Entropy Impressions wat. "We're 'open source'! So f*ck you, you're on your own!" https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427233544969-K94U7471GVQ995I7F82K/image-asset.jpeg blog - Mycelium Entropy Impressions This product is a toy. This is clever, but does not instill any confidence in their ability to make a financial product. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1427233820237-AK62EKXJJ9HQJI951M1B/image-asset.jpeg blog - Mycelium Entropy Impressions I'd reach for any of the other three products before the Mycelium Entropy. http://www.stellaw.info/blog/2015/3/19/black-arrow-ewallet-signature-checking monthly 0.5 2015-03-19 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426771464377-9VDG84GR50Z2UQQ9NVHV/image-asset.jpeg blog - Black Arrow eWallet signature checking Bootloader appears to check and affirm Trezor-signed firmware images. The button mappings are correct. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426771617903-5RCR5ACGMKEZ7BD6NTCK/image-asset.jpeg blog - Black Arrow eWallet signature checking This works, but is probably a terrible idea. http://www.stellaw.info/blog/2015/3/19/a-little-more-on-the-black-arrow-ewallet monthly 0.5 2015-03-19 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426737924873-GL7G0D4SUDI7SH8MADLK/image-asset.jpeg blog - A little more on the Black Arrow eWallet. http://www.stellaw.info/blog/2015/3/18/black-arrow-ewallets-arrives monthly 0.5 2015-03-18 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426687008426-2M4Y4IABFMZ5SNKTY3DC/image-asset.jpeg blog - Black Arrow eWallets arrive The eWallets come in a non-shrinkwrapped, non-tamper sealed box. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426687142643-CNHU5SGXYW2D4I1HDGSJ/image-asset.jpeg blog - Black Arrow eWallets arrive The back of the box says ledwallet.com, where there is nothing. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426687242945-1Z6TTSRWQKHEK9R3YEH7/image-asset.jpeg blog - Black Arrow eWallets arrive Micro USB cable?! The documentation is clearly a copy & paste from Trezor https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426687381720-R7PV9JM9DCWT0E1WRHUM/image-asset.jpeg blog - Black Arrow eWallets arrive Black Arrow branding. The build quality is decent enough. https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1426687499989-ZP7HIB0HYIA8RC5YEMMS/image-asset.jpeg blog - Black Arrow eWallets arrive From the boot procedure, it is clear that the eWallet is NOT running a bootloader and firmware compiled by SatoshiLabs (Trezor) http://www.stellaw.info/blog/2015/3/9/another-trezor-compatable monthly 0.5 2015-03-09 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1425942265398-MLP07QSEY1V8ONV35695/image-asset.png blog - Another Trezor-compatable? http://www.stellaw.info/blog/2015/2/4/dumping-the-bootloader-from-trezor-bwallet monthly 0.5 2015-02-20 http://www.stellaw.info/blog/2015/2/2/i-support-hardware-wallet-manufacturers monthly 0.5 2015-02-03 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1422929356963-LO1DN733H06F78EOKMQU/image-asset.jpeg blog - I Support Hardware Wallet Manufacturers http://www.stellaw.info/blog/2015/2/2/making-the-buttons-work-on-a-bwallet-running-trezor-firmware monthly 0.5 2015-02-03 http://www.stellaw.info/blog/2015/1/31/running-trezor-firmware-on-bwallet monthly 0.5 2015-01-31 https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1422720769824-N057EPGFG4HUM4DUX7IH/broken_firmware blog - Running Trezor Firmware on BWallet But it works just fine on a Trezor. . . https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1422722616589-6JE5JOCDELORZAUIZFL3/Trezor_logo_on_BWallet blog - Running Trezor Firmware on BWallet That's a Trezor logo on a BWallet (after an unofficial firmware warning message) https://images.squarespace-cdn.com/content/v1/54cc3487e4b02ab7cb22b3c5/1422723295148-F4N7FHV727QLC4BLVYRZ/image-asset.jpeg blog - Running Trezor Firmware on BWallet My eyes, the button does nothing! http://www.stellaw.info/contact daily 0.75 2015-12-31