Trezor One Bitcoin and Crypto Hardware Wallet has New Firmware Update 1.6.3
Trezor One Introduces New Firmware Patch Update 1.6.3
This new security patch allows users to rest a little easier in the wake of a previously identified physical attack vector that was previously described this aforementioned update. While this has been an area of concern for some, there is little evidence that shows that any attacks using this vector ever took place.
The Trezor Wallet interface will offer this firmware update for users and their existing Trezor One. The company advises that users ensure that they have the correct recovery seed before starting this update process.
While this update has been rolled out for some models, it's been shown that the Trezor Model T has not been affected by this issue. All Trezor One devices are expected to be updated to this newest firmware version. It will also update to a users bootloader for individuals and their own Trezor One devices.
The Update – Summary
Trezor's new Firmware update 1.6.3 is a further expansion of the scope of the previous upgrade 1.6.1, and will be addressing the same potential issues as the previously mentioned upgrade. The issue in question primarily impacts on the supply chain of Trezor One devices. For users that have already initialized and set up their new Trezor One, the company stated that they are likely not to be affected by this update. For those that have just purchased a Trezor One, however, the company urges them to ensure that they install and upgrade to the latest firmware versions available before using it.
Moreover, there is no evidence that this vulnerability has been used in practice.
Along with its other security methods, Trezor comes with tamper-resistant seals, this ensures that users are the first to open their package, while making them alert to any malpractice which may have happened with their package. When a user is conducting a purchase from the Trezor shop, or with any of its designated sellers / re-sellers, the company points out that a customer should pay attention to the condition of the package.
This newest update to the firmware verifies the underlying authenticity of the bootloader in the device. The bootloader checks the signature of the firmware. If both are genuine, your device will not display a warning, and therefore your Trezor is safe to use.
Details About the Issue
On August 2018, a security researcher, who still remains unknown, but operates under the codename ‘Sunny' reportedly stated that there was a potential problem with Trezor's firmware, the company made its community aware shortly thereafter. Trezor allegedly worked with this researcher in order to find and implement a fix for the underlying issue, releasing it on September 5th 2018.
Sunny realized that the security update in firmware 1.6.1 could be expanded to cover for another attack vector of the same type.
The company has since made the MPU regulations behind their wallets more strenuous for would-be attackers during the course of this upgrade. This also serves to prevent another class of potential attacks from taking place. As a reflection of these improvements, the firmware update also acts to upgrade the bootloader of users as well.
How to Update Firmware and Bootloader?
Trezor points out that users should make sure that they have an effective recovery seed before they continue on to conduct the update for their hardware / software.
Users will just go to the Trezor Wallet and follow the update instructions given on the screen. Once they are prompted, users need to replug their Trezor One device with both buttons plugged to start it in bootloader mode. Confirm the update procedure, and they will have a new firmware on your device.
If users are operating using Firmware 1.6.1 . on their Trezor One devices, the device memory will be wiped during the update process. Always make sure you have the correct recovery seed ready.
On the initial boot of the new firmware 1.6.3, the system will perform a preliminary check of the hash of the bootloader, this is in order to verify its underlying integrity. Should the bootloader come back as genuine, the firmware will also update the bootloader to the latest version, which is 1.5.1 according to Trezor. By the end of the process, the device will then ask the user to reconnect it.
Therefore, users will reconnect twice during this update: once after the firmware update and once after the bootloader update by firmware. Trezor instructs users to follow the instructions on the device screen.
This firmware also checks the authenticity of the users bootloader. This means that if the bootloader was a legitimate one provided by Trezor, then the device will run without any prompt. The bootloader, in turn, checks the firmware signature, making sure that both software parts are running genuine code.
Firmware 1.6.3 also contains new features for the Trezor One!
Trezor One now supports RSKIP-60 Ethereum checksum encoding, as well as an expanded set of Ethereum networks: ESN, AKA, ETHO, MUSI, PIRL, ATH, GO
Moreover, Trezor One can now recognize 80 more new Ethereum tokens.
About Trezor One
The Trezor Model T is known as one of the next generation hardware wallets available for users, and was designed with the experiences the company had with its original Trezor products in mind. This is combined with a more modern, intuitive interface in order to improve the UI and UX of the individual having to use it. It features a touchscreen, faster processor, and advanced coin support, as well as all the features of the Trezor One.
Trezor One, itself, is known for being one of the most trusted and ubiquitous hardware wallets currently available on the market thus far. Offering users with an unmatched level of security for their various cryptocurrencies, including password management, Second Factor, while maintaining an absolute ease-of-use, whether you are a security expert or a brand new user.
The Trezor wallet and its overall design was made thanks to the innovative contributions of the company, SatoshiLabs, which has also been responsible for some of the field's most pivotal and influential projects with Bitcoin and Cryptocurrencies. They have also been involved with the likes of CoinMap.org, the primary resource for bitcoin-accepting venues.