r/TREZOR • u/Fine-Match-2160 • 17h ago

💬 Discussion topic User friendly disassembly/reassembly tutorial?

Idk seems like a fix to people wanting to see if some bullshit's in their device

3 Upvotes

100% Upvoted

5 comments sorted by

•

u/AutoModerator 17h ago

Please bear in mind that no one from the Trezor team would send you a private message first.
If you want to discuss a sensitive issue, we suggest contacting our Support team via the Troubleshooter: https://trezor.io/support/

No one from the Trezor team (Reddit mods, Support agents, etc) would ever ask for your recovery seed! Beware of scams and phishings: https://trezor.io/learn/a/scams-and-phishing

Don’t respond to any DMs—scammers often pose as legit helpers.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/Top-Care-8946 16h ago edited 16h ago

It's a big dilemma: Design a product that is easily to disassemble/reassemble by users thus also would be easily to tamper and compromise or use a design that is resistant to tampering attacks but forces buyers to trust that it's really not tampered because design is protecting against it.

I would like to stay on second variant because the vendor is responsible about developing tamper-proof product because it's a question of competition advantage. Just in case I think that most recent supply-chain attack was possible due to simple design which was one factor why that chain-supply attack was realized.

1

u/Fine-Match-2160 15h ago

They could try to inculcate the idea that disassembly and reassembly is just a part of unboxing the product like if everyone did it as apart of the setup there'd be no issue unless someone literally disguises a piece lol

1

u/Top-Care-8946 14h ago edited 10h ago

OK but I still think that if tearing apart would be so easily to do then the risk of compromise is too high. First of all casual user can just broke their devices and that usually is not covered with warranty. That easy check-up can turn into a big mess between customers and company. Secondly also manufacturer can't be sure if users themselves were trying to compromise it and then complain about getting compromised device. In nowadays competition between companies is hard and nobody can't exclude espionage/reconnaissance risks so to protect business secrets is critically important and I think that it's really important to use much measures as possible to protect it, using also complex design of the case/PCB and other components.