upvote
The hardware is much more sophisticated, miniaturized, and high-speed, and the supply chain is much more generic; a Ledger is a really primitive piece of hardware with a simple display interface and a ton of empty space inside it. An iPhone has no wasted space and extremely high-speed onboard buses that would be hard to sniff. Additionally, with Ledger, you know that every customer is going to be using the device to access crypto, so it's an easy target nearer the head of the supply chain. With an iPhone, you have no idea what end-user to target the implant against.
reply
I'm going to guess it's a number's game, you might be able to do it with an iPhone but it's not guaranteed to go to a crypto user, whereas the other one is a bespoke system for the purpose.
reply
You can walk in to an official Apple store and buy an iphone direct almost anywhere in the world. Crypto thieves would have to have compromised the entirety of Apple's supply chain and found space inside the iphone to fit a whole spy chip (of which there is basically none).
reply
Or just a single apple store sales employee...
reply
right, so you'd have to know the store with your victims upfront, know which ones to give these highly expensive implanted iPhones to (or have a lot of units), be able to always bring enough for the specific colors the customers want....
reply
I'm especially amused at all the different iPhone SKUs you'd have to stock your crooked phone salesman with. 4 storage tiers, Pro and Pro Max, and 4 colors. So that's 32 boxed phones, a good-sized duffel bag full, to smuggle into the Apple Store, to keep on-hand but avoid anyone finding them, in anticipation of the victim's visit, just to cover the Pro range. Imagine you spent $75,000 on those phones and about as much on the technicians' time to open them all up, install the implants, and perfectly re-seal them. Your salesman has successfully kept the phones hidden for a month, and the target walks into that store and says "You know, I really like the color the non-pro model has this year."
reply
I presume because iPhones have a secure TPM and nobody is targeting them for crypto supply chain attacks.
reply