What’s in your crypto wallet? The simple answer should be fat stacks of Bitcoin or Ethereum and little more. But if you use a hardware cryptocurrency wallet, you may be carrying around a bit fat vulnerability, too.
At the 35C3 conference last year, [Thomas Roth], [Josh Datko], and [Dmitry Nedospasov] presented a side-channel attack on a hardware crypto wallet. The wallet in question is a Ledger Blue, a smartphone-sized device which seems to be discontinued by the manufacturer but is still available in the secondary market. The wallet sports a touch-screen interface for managing your crypto empire, and therein lies the weakness that these researchers exploited.
By using a HackRF SDR and a simple whip antenna, they found that the wallet radiated a distinctive and relatively strong signal at 169 MHz every time a virtual key was pressed to enter a PIN. Each burst started with a distinctive 11-bit data pattern; with the help of a logic analyzer, they determined that each packet contained the location of the key icon on the screen.
Next step: put together a training set. They rigged up a simple automatic button-masher using a servo and some 3D-printed parts, and captured signals from the SDR for 100 presses of each key. The raw data was massaged a bit to prepare it for TensorFlow, and the trained network proved accurate enough to give any hardware wallet user pause – especially since they captured the data from two meters away with relatively simple and concealable gear.
Every lock contains the information needed to defeat it, requiring only a motivated attacker with the right tools and knowledge. We’ve covered other side-channel attacks before; sadly, they’ll probably only get easier as technologies like SDR and machine learning rapidly advance.
Why do people drop hundreds of dollars on designer goods? The easy answer is that, in theory, the goods are worth the expense. The materials, craftsmanship, and attention to detail are all top-notch and culminate in the finest finery money can buy.
So, would you spend hundreds of dollars on a designer wallet? If you have leather crafting skills and a thrift store nearby, you could just follow [Corter Leather]’s example and make your own. He found a diamond in the rough—a genuine, well-loved Louis Vuitton bag languishing in a secondhand shop. The leather bottom and handles were dry and worn, but the signature LV canvas was still in great shape. Never crafted leather? If you can’t get free scraps for practicing, then deconstructing cheap, used stuff is the next best thing.
To isolate the canvas, [Corter] carefully removed the bag’s handles, bottom, liner, and zipper and then popped the rivets and peeled the backing from the fabric. He drew up a pattern in Illustrator that pays homage to the illustrious designer’s wallets and cut the pieces out of 3oz vegetable tanned leather using card stock templates.
[Corter] brought his A-game to the details. Every visible edge is painted Italian red, which he applied with an awl for a crisp line. The larger pockets have hidden stitches that keep cards from drifting to the bottom and throwing off the shape. No need to open your wallet to see how he did it—just watch the video after the break.
Though it technically isn’t a real Louis Vuitton, a thief wouldn’t know it until later. Maybe [Corter] should add a pickpocket alarm.
Continue reading “DIY Designer Wallet From Designer Bag”
It’s not rocket science, but ending up with a beautifully crafted leather wallet like this one takes quite a bit more than you might think.
The project starts off with already tanned leather, so that definitely saves on time. The pieces are marked out on the stock before being cut with a hobby knife. There’s still a long way to go before you can start stitching though. The thickness of the edges is trimmed down and then burnished with a rotary tool. A channel is cut just inside the edges to receive the thickness of the thread. Holes are marked with a special tool, then bored using an awl. Once stitched together the edges are sanded perfectly flush before being burnished.
Just from the look of it we’d guess it’ll hold up years longer than anything you can buy at an ordinary big box retailer.
Continue reading “Leather Wallet Making Involves More Than You Think”
Recently there were a bunch of videos going around the net about some of the greatest pickpockets in the world. Simply put, if they wanted something you had, they were going to take it and you probably wouldn’t notice. I’ve always kept my wallet in my front pocket, and usually with my hand on it, but they even showed them getting around that in the video (you can’t always be vigilant).
I had the idea to make some kind of alarm that would go off if anyone but me removed the wallet from my pocket. A quick google search revealed tons of wallet alarms, but I noticed that they all had a credit card form factor(that’s good) and would make noise when exposed to light(that’s bad). This represents a problem since the pickpockets in the videos tended not to open the wallets till later at another location. I needed something that would make noise as it was removed from my pocket. Most importantly, I needed the alarm to be located inside the wallet. This immediately makes the wallet undesirable and will hopefully make someone drop it like hot coals.
Continue reading “Quick Wallet Hack Adds Pickpocket Alarm”
[Serge] was in search of a new wallet, but he was concerned about ne’er do wells with RFID readers stealing his data. He could have gone out to the store and plunked down $20-$30 for a shielded walled, but where’s the fun in that? Instead, he decided to make his own.
Using Kevlar-Nomex fabric, he laid out the general structure for his wallet. This ultra-strong fabric has a breaking strength of 500lbs, but blocking RF isn’t exactly its forte. To provide some electromagnetic shielding, [Serge] added a nice uniform layer of silver epoxy to the Kevlar, which carries an added bonus of strengthening the material. He fired up the sewing machine, adding a nylon strip to the exterior of the wallet for reinforcement, then he worked on forming the bill pouch and card holders.
The final result is a plain yet incredibly rugged wallet that’s sure to keep his various RFID-enabled cards safe. We really dig how unassuming the wallet is – no flash, all function. Nice job, we’ll take one!
[niles] has refined the art of making wallets out of game cartridges. Specifically, he is using Atari cartridges. He’s gotten down to about a two hour process which results in a decently usable wallet. We’ve seen someone make a cartridge wallet before, and we have to ask the same question; who wants to carry this around in their pocket?
[gamemaster87] put together this SNES wallet. It isn’t just a wallet, it also has internal lighting and theme music. He harvested LEDs from Christmas lights, switches and battery compartments from an old all in one joystick, and the sounds from a holiday card. There’s a Plexiglas window to show off his ID and a belt clip, because you wouldn’t want this thing in your back pocket. Match this up with the SNES clock, NES bike tail light, and the NES security system and you’ll be the king of the nintendorks.