Seth For Privacy's avatar
Seth For Privacy sethforprivacy@primal.net 2 years ago
Absolutely exhausted and don't have the energy to copy paste this from Twitter, but I put together an exhaustive thread on the nightmare fuel that is Ledger Recovery here:
X (formerly Twitter)
Seth For Privacy (@sethforprivacy) on X
1/ Ledger "Recover," a thread 🧵 Last night Ledger accidentally leaked some info on their new recovery subscription service, and today they reve...
 Nitter: https://nitter.sethforprivacy.com/sethforprivacy/status/1658544658761277447

Replies (27)

ContrarianAgrarian's avatar
ContrarianAgrarian contrarianagrarian@nostrcheck.me 2 years ago
Thanks for including the Nitter link. If future updates can extract and export the seed words, encrypted or not, the “secure element” chip does not function as I thought it was supposed to function. 😡 Would be bad even if code was open but the fact it can’t be independently verified makes it even more absurd.
ContrarianAgrarian's avatar
ContrarianAgrarian contrarianagrarian@nostrcheck.me 2 years ago
It seems to me that if it’s possible to do, then it opens Pandora’s box for all users, not just those who opt in. It’s the same logic behind why back doors for even “good reasons” are a bad idea.
Travis West's avatar
Travis West travis@west.report 2 years ago
Thanks for the analysis and summary. I was waiting for more information before judging what was originally put out by Ledger. You have outlined quite a few security concerns. Appreciated.
apa's avatar
apa apa@snort.social 2 years ago
It’s a good thing that I never used their wallet after purchase. I felt bad about wasting money not anymore! Thanks for the info!
Default avatar
Qno 2 years ago
Thanks for the explanation. Clearly internet privacy is becoming a fundamental life skill like looking both ways when you cross the road. And a lot of millennials can't even do that.
Default avatar
Qno 2 years ago
You would think!!! The thing is that NO TRUST security is Ledgers' stock in trade. The problem is, if their device works as it should, then their business model will run out of steam. Looks like their investors wanted development to keep on rolling.
↑