Bin ich dumm, wenn ich bei Ledger bleibe?
- Dieses Thema hat 39 Antworten sowie 1 Teilnehmer und wurde zuletzt vor vor 1 Jahr, 8 Monaten von
aktualisiert.
-
Beiträge
-
-
Ich verstehe nicht wirklich, was los ist, aber dieses Sub hat die Tendenz, auf Dinge zu überreagieren (Bluetooth-Funktionalität war eine große Sache, der Kauf von Amazon war ein Problem, usw.) Ich habe das Gefühl, dass viele der Bedenken aus übermäßiger Besorgnis und nicht unbedingt logischem Denken kommen…
Ich habe das Gefühl, dass andere Cold-Storage-Wallets wie Trezor wahrscheinlich auch ihre eigenen Nachteile haben (obwohl Open Source ein Plus ist)
Bin ich dumm, wenn ich bei diesem ganzen Schlamassel einfach bei Ledger bleibe? Ich möchte nicht meine Papiere mit all meinen Passwörtern und so ersetzen müssen.
-
-
**YES.**
This isn’t just about typical pros and cons of this wallet or that wallet.
Ledger told us our keys never leave the secure element of our hardware wallets. They assured us no firmware update would enable our keys to be extracted from our hardware wallets.
Here’s the promise they made, again and again, for years.
> Hi – your private keys never leave the Secure Element chip, which has never been hacked. The Secure Element is 3rd party certified, and is the same technology as used in passports and credit cards. A firmware update cannot extract the private keys from the Secure Element.
> SOURCE: [@Ledger 8:12 AM · Nov 15, 2022](https://twitter.com/Ledger/status/1592551225970548736)
Now, they admit that was a lie:
> **yes a firmware update can extract the seed**
> [SOURCE](https://np.reddit.com/r/CryptoCurrency/comments/13ldgcl/my_personal_view_on_the_pr_disaster_from_a_ledger/jkpnk2h/): murzika, Ledger Co-Founder, Former CEO, and Former Chairman
And because their firmware isn’t fully open, we have no way of knowing if there’s a backdoor to enable key extraction even if we don’t opt in to their new key extraction service:
> There’s no backdoor and **I obviously can’t prove it**
> SOURCE: [–btchip, Ledger owner & co-founder](https://np.reddit.com/r/ledgerwallet/comments/13itm7u/is_there_a_backdoor_yes_or_no/jkbvys7/)
And it’s not like we can trust their security.
> Ledger wallet users face mounting home invasion and other scareware threats as hacker dumps private customer information online.
> SOURCE: [Cointelegraph, December 24th, 2020](https://cointelegraph.com/news/ledger-data-leak-a-simple-mistake-exposed-270k-crypto-wallet-buyers)
What’s the worst that could happen, aside from a hacker getting access to your keys due to another Ledger security breach?
> If you are a Recover user and have your shard into safeguarded by third parties, then yes, a government could subpoeana them and get access to your funds.
> Using Recover gives you an easy recovery option and mitigates backup loss, but your assets could get frozen by the government> [SOURCE](https://np.reddit.com/r/CryptoCurrency/comments/13ldgcl/my_personal_view_on_the_pr_disaster_from_a_ledger/jkpnvnl/): murzika, Ledger Co-Founder, Former CEO, and Former Chairman
Your assets could get frozen by the government. He said it.
> As I said above, if you are referring to Ledger Recover, I said government could get access to the backups of a user, as it’s only a matter of law and is about one user
> [SOURCE](https://np.reddit.com/r/ledgerwallet/comments/13layt7/my_personal_view_on_the_pr_disaster_from_a_ledger/jkp81y3/): murzika, Ledger Co-Founder, Former CEO, and Former Chairman
The government could get access to the backups of a user. He said it.
> If you are referring to Ledger Recover, a joint government task force could access a user’s recovery backup. I mean it’s just a question of law, two shards could be subpoaned even if they are each in a different jurisdiction.
> [SOURCE](https://np.reddit.com/r/ledgerwallet/comments/13layt7/my_personal_view_on_the_pr_disaster_from_a_ledger/jkp4o39/): murzika, Ledger Co-Founder, Former CEO, and Former Chairman
So, to answer your question: Are you dumb to just stick with ledger through this whole mess?
YES.
-
-
-
-
-
-
You should think for yourself and not with the herd. I am aware of everything going on and still trust Ledger and loyal. If you’re not satisfied with the new update, then that’s completely up to you. Don’t let others shame you into believing in a company. Everyone has their own motives and reasons for why they feel and act a certain way based on what’s given.
-
Idk man I don’t understand the hate to be honest. The only people overreacting are the people that didn’t understand hardware wallets to begin with. The email hack was unfortunate but I doubt they’d let that happen again. I never use my real name or email for any crypto related purchases like a ledger. Won’t be signing up for the new service. I use two ledgers one for wallets like metamask/phantom and for defi. And the other that contains the keys to my holdings that stake that I won’t be moving much. Moving to Trezor or another hardwarewallet won’t change the vulnerabilities. Whatever ur afraid of with ledger could happen with Trezor too with your insane what if scenarios. Research how hardware wallets work and always have worked, and you’ll realize there’s nothing to be afraid of. I trust ledger and that’s my own choice. If you don’t trust them that’s fine find another service.
-
-
-
-
-
-
-
-
-
-
-
I’m staying for now because I still believe it is the most secure on the market at the moment. The other contenders, to my understanding, have the same or similar back door feature that ledger is offering. Going to do my own research and maybe go back to a pen and paper wallet digitally scanned and encrypted.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
If any of the past incidents are to go by, professionals in the crypto industry and outside of it aren’t really the most reputable individuals. So not everyone feels comfortable having complete faith in them on the basis of maybe they’ll be honest to avoid prison and opportunity to make a lot of money without doing sketchy things.
Even billions hasn’t been enough of an incentive for people to not be crooks.
Lot of it was based on faith/belief like a religion with the nature of closed source where no matter how much time passes you won’t know what is going on with that firmware. So getting very clear confirmation of the capabilities of the firmware run on ledger led to people realizing they had been putting much more faith in a closed ecosystem than they had initially believed.
Truth is we really don’t know. You either choose to have faith in them or don’t.
-
-
-
Im staying with Ledger for now.
If I have any device that gets upgrades, im trusting the company to put the right thing, if I’m trusting to only be able to make transactions when I press the button to sign, I can trust the same for the keys to leave the device with the same condition, only when I have the physical device and press the button.
If I would have a significant amount to protect, probably i would not trust any company, had make my own cold wallet with a PC that never connects to the internet and use this kind of devices as a more secure hot wallet.
And I say for now with Ledger not because this miss comunication but because I plan to have multiple devices from multiple companies… To me, you never know and is better to diversify even in security
Edit: I would never subscribe to Recover or any service that can hold my keys… What do they think they are, a bank? To me this is the whole point of cripto, to be able to have full control of your money and its a great power and as well a great responsibility…. Not your keys, not your cripto
-
-
I’m leaving. Bought a cold card. Crypto is fucking wild, you can’t trust anyone. Ledger breaking some cardinal sins and then pissing on all the customers was just too much. I was furious about the name/address leak.
High chance nothing happens but I’m not taking risks. If anything this made me realize i need many wallets and not 1
-
- Du musst angemeldet sein, um auf dieses Thema antworten zu können.