Ist es möglich, eine geforkte Version von Ledger Live ohne Recover-Code zu erstellen?
Home › Foren › Ledger Wallet › Ist es möglich, eine geforkte Version von Ledger Live ohne Recover-Code zu erstellen?
- Dieses Thema hat 11 Antworten sowie 1 Teilnehmer und wurde zuletzt vor vor 1 Jahr, 3 Monaten von
pringles_ledger aktualisiert.
-
AutorBeiträge
-
-
28. Oktober 2023 um 10:43 Uhr #3098917
root_s2yse8vt
Administrator::Ich weiß, dass Recover immer noch Teil der Firmware auf den Geräten ist, aber wenn Ledger Live Open Source ist, kann dann nicht jemand einfach eine Version erstellen, die einfach den Recover-Code blockiert/entfernt? Das würde es zumindest für die Firmware, die Recover enthält, viel schwieriger machen, missbraucht zu werden, wenn sie nicht mit Ledger oder jemand anderem kommunizieren kann.
-
28. Oktober 2023 um 10:43 Uhr #3098918
-
28. Oktober 2023 um 10:43 Uhr #3098919
NoVegas0
Gast::Ledger live doesnt matter, its the firmware update for the device that puts the Recovery code on it.
many people say it doesnt matter but it does. just by existing the code creates greater surface area in the device that could be exploited. this unnecessarily adds a new attack vector to the device.
-
28. Oktober 2023 um 10:43 Uhr #3098920
-
28. Oktober 2023 um 10:43 Uhr #3098921
-
28. Oktober 2023 um 10:43 Uhr #3098922
-
28. Oktober 2023 um 10:43 Uhr #3098923
grandphuba
Gast::The compiled software requires it to be signed so the device can verify if the software legitimately came from Ledger.
This would only be possible if Ledger provides/opens that mechanism of side loading, which is unlikely.
This is a point many supporters and detractors of open sourcing Ledger’s code miss. Simply posting the code on github is not enough.
Being able to verify code/binaries and then sideload that code (even if it’s just Ledger’s), and verifying it is that code that is actually being run on the device is necessary for open source to work on a security standpoint.
-
28. Oktober 2023 um 10:43 Uhr #3098924
-
28. Oktober 2023 um 10:43 Uhr #3098925
-
28. Oktober 2023 um 10:43 Uhr #3098926
-
28. Oktober 2023 um 10:43 Uhr #3098927
selfcustodynerd
Gast::Theoretically, you can do it. Also, the recovery code is more relevant for the device update rather than a Ledger live update. But the current Ledger live forces you to update to do any Crypto transaction from the Ledger live app. The easier route is to use another software app like Metamask to do the transactions without updating the device.
-
28. Oktober 2023 um 10:43 Uhr #3098928
pringles_ledger
Gast::Hey – understand your concerns about the Ledger Recover feature. However, Ledger Live and the firmware on Ledger devices are two separate entities. Ledger Live is indeed open source, and while it’s technically possible to fork it, the Ledger Recover code is part of the device’s firmware, not Ledger Live. Therefore, modifying Ledger Live wouldn’t affect the firmware on the device itself.
We take security very seriously at Ledger and we’re committed to providing the most secure environment for our users. The Ledger Recover feature is designed with multiple layers of security and it’s entirely up to the user to activate it or not.
For more information about Ledger’s open-source roadmap, you can visit this link: https://support.ledger.com/hc/en-us/articles/11132311094813-Ledger-s-open-source-roadmap
And for more details about Ledger Recover, you can refer to this link: https://support.ledger.com/hc/en-us/articles/9579368109597-Ledger-Recover-FAQs
-
-
AutorBeiträge
- Du musst angemeldet sein, um auf dieses Thema antworten zu können.