Title: Questions about supply-chain security and protection against tampered devicesHello everyone,I just received my Trezor and, given the recent reports involving Ledger devices, I have a few concerns I’d like to raise and understand better.
- There have been reports of tampered or counterfeit Ledger devices that still passed Ledger Live’s security/genuine checks (chip intact, just a sim reading the screen). How does Trezor protect against a similar scenario if a device is physically modified before it reaches the user?A sim installed would still pass all the checks.
- Even when ordering directly from the official Trezor website, is it possible for someone to swap the package somewhere in the supply chain with a tampered device? Could such a device still pass all of Trezor’s security checks (including firmware verification, authenticity checks, etc.) while also appearing untampered (intact void/holographic seals, packaging, etc.)?
- What are the practical ways we can confirm that the box and device we received actually came from Trezor and were not swapped or tampered with along the way?
- Would using a passphrase protect against the type of attack reported with Ledger (where a seed might be captured)? I’m specifically referring to entering the passphrase in Trezor Suite on the computer, not on the device screen.
- Is there any realistic chance that malicious firmware could be pushed to the device and extract the passphrase? (This is a general question, unrelated to the recent Ledger reports.)
I’d appreciate any clarification from the community or the Trezor team. Thank you!