Hardware wallet

[Neo-ST]

Nakon nenamjernog curenja podataka o korisnicima Ledger.com stranice, stiže još jedan fail, ali ovaj puta namjeran.

https://twitter.com/Ledger/status/1658458714771169282

https://twitter.com/Mudit__Gupta/sta...68265687556097

https://www.reddit.com/r/CryptoCurre...ing_to_happen/

[The Exiled]

• In a nutshell, it’s an ID-based key recovery service that backs up users’ seed phrases. To use the service, users must provide a passport or national identity card to confirm their identity.
  
  
• While this service requires users to opt-in and pay a $9.99 monthly fee, some are concerned that this could even pose a security risk for those who don't opt in.

Jao, ovo su već malo žešće gluposti i to u rangu LastPass pizdarija gdje se isto tražilo/prisililo korisnike na plaćanje "sigurnosnog rješenja", samo da bi sve skupa kasnije u potpunosti hakirali.

[Neo-ST]

Dalje...

https://twitter.com/roinevirta/statu...25016550416384

https://twitter.com/lebed2045/status...38551330365441

[AndroiOs]

Nema nista sigurnije od tog ledgera neki govorili
Sad ni to ne valja...taj kripto je prevara samo takva

[The Exiled]

Jebiga, kripto kao takav nije ništa kriv, ali kak to obično ide i u ovom slučaju se radi o hrpi mutnih likova koji koriste kripto kao priliku da zarade besplatne nofce i usput zajebu što više ljudi.

While answering queries about the firm's new wallet recovery service, Ledger Support sent a couple of tweets that likely did little to assuage its users' concerns, suggesting that it could make its customers' assets vulnerable in any way it wanted to, but has – thus far – not done so. "Technically speaking it is and always has been possible to write firmware that facilitates key extraction. You have always trusted Ledger not to deploy such firmware whether you knew it or not," Ledger said earlier on a now-deleted tweet. Crypto wallet maker Ledger dug itself into a deeper public relations hole on Wednesday when its support team said in a now-deleted tweet that "technically speaking it is and always has been possible to write firmware that facilitates key extraction," thus allowing the company to extract its users' keys. After erasing the tweets, Chief Technology Officer Charles Guillemet tweeted in an attempt to clarify the situation and downplay the initial tweets.

[Night]

Autor Neo-ST

Dalje...

https://twitter.com/roinevirta/statu...25016550416384

https://twitter.com/lebed2045/status...38551330365441

To je neka stara verzija koda koliko vidim iz odgovora, u novoj verziji nema toga : https://github.com/LedgerHQ/app-boil...t_public_key.c


A ovo sa backupom recoverya je žešći idiotizam, napravili su cold wallet i onda nude uslugu koja potpuno ubija smisao cold walleta

[Javorko]

Znači li to da ne bismo trebali kupovati Ledger HW wallet?
Recimo onaj Stax izgleda prelijepo i čini mi se dobar.

Imam 10ak valuta, 300+ eura gore i čini mi se da je vrijeme za kripto wallet.

[Neo-ST]

https://www.reddit.com/r/CryptoCurre...ledger/jkpnvnl

[Libertus]

Sve jasno. Dobru si je Ledger kašu skuhao s tim recovery sustavom.
Prvo su se revno reklamirali da seed nikada ne može napustiti uređaj jer je unutar "secure element" koji je hardwareski dio. Sa novim sustavom su prvo priznali da su lagali cijelo vrijeme, a drugi im je promašaj što sve forsiraju da instaliraju taj firmware.
Da su ostavili mogućnost ažuriranja firmware-a bez tog recovery elementa, mislim da bi galama bila puno manja.

Neki zagovaraju poseban uređaj za recovery mogućnost, ali po meni su mogli samo ostaviti jedan firmware za one koji ne žele recovery i isti taj + recovery element za one koji se pretplate na recovery.

[dzajko]

Jeli update obavezan ili se moze normalno koristit i sa starim softwearom?

[Libertus]

Može se normalno koristiti.

[jucca]

Ekipa, sta se sa Ledgerom dogadja, dogodilo?
Vidim po Twitteru da ga ljudi "bacaju".

https://twitter.com/austin_bbytes/st...0ydP48JUw&s=19

Sent from my SM-S908B using Tapatalk