1. 9
  1.  

  2. 2

    This disclosure has been made in good intelligence with Ledger, who talks about how the latest firmware can avoid such attacks (two other attacks are described, and mitigated):

    https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-security-fixes/