This concept of making the best use of any available data to infer useful probabilities seems like a crude form of some ideas behind current LLMs, BUT they (Peters, Graham, Robinson and Woodhead) were doing this work 20 years earlier.
>why the stasi didn't build a large pit somewhere in a land fill, put all the records in it and burn the lot.
In hindsight, that would obviously have been the most efficient, but it needs trust and cooperation between regional Stasi offices to give up control of their records.
But The Stasi did not have foresight, was not efficient, did not have cooperation internally. (If they had all those attributes things may have gone differently. So it’s good they were still incompetent at the end)
What about modern devices (such as laptops) that have a fixed battery? They shouldn’t rely totally on software to force a hard power off because that’s not safe. If the software hangs you cannot power down
The EC (embedded controller) controls the hard power off on a modern laptop, not the OS at all. That's why you can still power down in the event of a device lockup (thankfully).
Have had it happen on the Essential Phone and my MIL's Chromebook (don't remember the model). At least with the Chromebook, you can open it with a screwdriver and pull the battery. Better than waiting however many days for the battery to fully die so the EC resets.
This is legally dangerous for the company because those words have generally well understood meanings, so a lawyer could argue that they promise a certain level of service. It’s safer to use vague words to describe the product variants.
I was a little cranky when I replied. What I meant was that this flood of LLM-noise already started around GPT-4.5 for many people. I was surprised to read about this now. But it’s good to have a discussion about it at large, anyway.
The other big wallet hardware maker, Trezor, already responded they will majorly cut back their authorized suppliers network.
They want to be certain they have the resources to properly personally verify the operations and trustworthiness of every authorized distributor that they’re vouching for.
These recent teardowns of compromised Ledger wallets are frightening. Because the infiltration of hardware looks very pro. Mass production and standardized parts added.
Even weight difference might not be obvious. He compared weights for one Ledger product but the small variations in weight among genuine devices made comparisons not clear.
Possibly only X-ray would uncover the fake without cracking the case?
This story is a case of someone tampering with devices in the supply chain, before the user first receives them.
What you’re describing is a different thing. It’s an “evil maid” attack, when you tamper with a wallet that is already set up by the user. Also, it would be ultra difficult and expensive.
What you’re saying is possible. But:
It would probably be cheaper to build a total fake Ledger Wallet, then just replace the new real wallet and deliver a fake with a weak entropy generator. Any case, that’s not what has happened this time.
Thanks. I believe you’re right a totally fake copy couldn’t verify. So that idea was wrong.
(The MITM supply chain attack which has happened succeeds because it preserves the original secure hardware but intercepts the secret data at the display interface. But a low-effort mimic of the entire device like I suggested? That wouldn’t work).
Ledger provides a 'Genuine Check' mechanism to determine the authenticity of the device; however, it explicitly warns that it cannot detect added implants when the device's original Secure Element remains intact.
And as this workaround leaves the original Secure Element intact, good luck detecting the supply chain attack.
But it's specifically a potting epoxy designed to cause damage to the electronics if removed. And any destruction of the epoxy has to not significantly affect the outward appearance of the device. At worst it's defense-in-depth.
Putting autonomous robots in amongst humans is that problem, on steroids.
Edit: there’s a reason why industrial robots all have a hazard zone marked around them, and some even have transparent safety screens or cages
reply