What podcasts say about Mark Karpelès
Every statement, with the speaker, the exact quote and the moment it was said.
What Mark Karpelès has said on podcasts
15 statements · 3 positive · 10 negative · 2 neutral
The implant records each recovery-phrase word during device setup
“the implant will also be watching, taking note of every single word”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 6:36
The implant transmits captured recovery information to attackers via cellular connectivity
“the implant will be sending your password, basically, to the attacker using the mobile model that is included in the implant.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 6:45
CryptoBillis’s founder sold the company roughly six months before the incident
“the founder of Cryptobilis had sold the company about six months prior”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 7:35
A Ledger Flex bought from Metapod contained a spy implant
“inside this device, there was also a spy implant”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 11:57
The implant uses chips to monitor the screen and transmit captured passphrases over mobile networks
“it's still the same kind of boards and the same process of having three chips, one which is monitoring the screen and taking note of the passphrase, one that is communicating with the mobile network to send what has been captured, and an eSIM”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 12:36
The attackers have substantially improved the implant through funded research and development
“whoever is doing this is learning and making improvements. And not just very small improvements, but very giant leaps doing real research with a lot of funding to create those boards.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 13:55
The implant operation involved months of research and development
“They spent months of research and development building this.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 15:02
Similar implants appeared among resellers outside Malaysia, including Singapore
“we are seeing the same kind of implants in other resellers outside of Malaysia, like in Singapore”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 16:01
A Ledger device sent to Mark contained a spy implant
“confirmed that it had a spy implant”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 19:34
Users can easily inspect a Ledger Nano X for compromise
“The fact is, as the end user, it's very easy to verify when you buy your Ledger, if it's compromised or not, especially if it's a Nano X, it can be opened easily.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 21:40
The new implant enables mass production and is likely to spread further
“this new implant is made for mass production and the ease of installation. Let me say that we're likely going to see a lot more of it in the future.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 24:13
Users can verify whether a Ledger device has been implanted before use
“the one thing that I can say for now that is easy to do is to verify if a device has been implanted or not when you're going to use it for yourself.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 25:03
Ending Ledger’s authorized reseller program would be excessive
“I would say that's probably too drastic.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 29:14
Ledger should advise reseller customers to inspect device internals against the manual
“Ledger could have maybe, what I would have seen a good idea, is to tell people that when buying a ledger from a sub-party, even an authorized reseller, to maybe have a look inside and verify that the hardware is as shown into the manual that Ledger provides.”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 30:14
Known implants must connect beneath the Ledger Nano X screen
“all the implants existing today will have to connect to the part right here”
Open the episode · Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?Listen at 38:14
Statements are attributed to the speaker as said on the episode and reflect their view at the time, not PodLume's. They are not advice.