Wo stehen wir jetzt mit dem ganzen Wiederherstellungsdrama?

Don’t ask this sub for advice on that matter, so many poor takes here. Bottom line is that, although many weren’t aware of it previously, it was always possible for a hardware manufacturer like Ledger or Trezor to push a malicious firmware that could send out your seed. So some trust in them is always needed, regardless of that opt-in recover feature that Ledger is pushing now and nobody asked for. It’s opt in, so just don’t activate it.

So if Ledger wanted to steal your coins they could have already sent you a faulty firmware, they don’t need the recovery feature for that. And another criticism is that this feature might open a new attack vector for hackers. That’s a *very* theoretical threat that a hacker remotely activates the recovery feature and somehow rewrite the firmware code so the seed is sent to them unencrypted.

What I don’t like is that Ledger is forcing the firmware on us if you want to continue to use Ledger Live. The only alternative is to not update the firmware, hence not use Ledger Live and only use the hardware wallet through etherscan or metamask or any other interface.

It’s always good to question the security and practices of Ledger but I don’t see a real threat here and will continue to use Ledger (but not use the Recover feature).

The update release and it’s available to users that want to use the service. Don’t subscribe to it.

The way the company handled it was a dumpster fire, I wont buy another one.

They doubled down so basically if you don’t like it, you can stick with a Nano S for a while yet or move to another vendor.

The curtains have closed and ledger is going ahead with it.

Most of us moved to Trezor wallets instead. Unfortunately you are asking the folks that remained despite the drama, so you have a very large selection of people that just swallowed the change and are huge fanboys of the company….

So you know what they are all going to say…. they will say „Just ignore it, its fine!“ because that’s what they did if they are still posting on this subreddit to see your post.

But yeah, a lot of us left man.

Don’t want to use Recovery service? Don’t subscribe to it. Problem solved. I don’t use Ledger Live too. Device works independently.

Nowhere. Carry on.

Never was a drama to begin with.

They did not cancel this feature.
They did not deploy this feature for only a specific Modell.
The do ask almost 10€ per month to use this feature.

I will leave ledger as soon as I found an appropriate replacement. Ngrave seems to be a nice one but I wait until cardano is supported.

Still USD 0 ever lost to a hack on a Ledger Device, still the strongest security team in the whole crypto space. It’s as safe as it ever has been.

I haven’t connected my ledger since the drama started. I wonder if it would force me to update the software? I am still able to view ledger live on mobile – haven’t used it for transactions though.

There is not drama… it’s noobs scared of things they don’t understand… if your so terrified use the 25th word in the advanced feature setting of the device like the rest of us who know what we are doing and stop spreading FUD about a company.

I haven’t updated my software for good 6 months. Should I not update it at all?

Where? I now exclusively use Trezor.

Nothing bad will happen and people will forget….

Ledger is not going to let a bunch of morons and self proclaimed geniuses stop them from their plans.

What drama was there?

Don’t put all your eggs on one basket and keep all your options open – I will leave it at that !! Good luck !!

Up

No idea. But at least trezor is open source. I split my money 75:25. 0 centralised exchanges. I don’t even use them to buy

I just bought a second hand Ledger S: new password, new seedphrase. Let’s hope everything will stay safe this way. As long as your assets are off the exchange.