Wir haben es geschafft! Ledger verzögert Recover Service! Hat die Gemeinschaft gewonnen?
- Dieses Thema hat 25 Antworten sowie 1 Teilnehmer und wurde zuletzt vor vor 1 Jahr, 9 Monaten von
aktualisiert.
-
Beiträge
-
-
Ledger hat beschlossen, das neue Ledger Recover Update zu verschieben, zumindest bis das Update als Open Source veröffentlicht wird.
​
Hat die Gemeinschaft „gewonnen“?
​
[https://decrypt.co/142044/ledger-delays-plans-private-key-recovery-controversy](https://decrypt.co/142044/ledger-delays-plans-private-key-recovery-controversy)
-
-
-
-
-
No, because fundamentally the recovery feature was never the real problem. The fact that it is *possible* to implement this feature is the problem, because that means the hardware is capable of supporting it. The hardware is still capable of supporting it whether the feature ever rolls out or not. It always *was* capable.
There’s one positive out of it; we now know that this capability exists and that Ledger has been lying about it for years in their marketing. The community has „won“ in that we’ve made it very clear how angry we are about this, which hopefully means that other hardware wallet companies will see this situation and go „woah jeeze“ and take extra care about not doing this kind of thing themselves.
Not sure how Ledger can recover from it, frankly. Trust is easy to break and hard to regain.
-
-
To a degree, perhaps. The Ledger Recovery service required changes in firmware, software, and back-office infrastructure. The basic design, AFAIK is that your seed-mnemonic is split into shards using Shamir’s algorithm. Then each part is encrypted with Ledger’s „golden key“ used for critical cryptography across the Ledger product line. From there the shards are passed from firmware to software which then distributes them to back office servers.
Main complaint is that, even if you removed the back-office services, the firmware and software that shuffle shards around may still exist. Sure these are encrypted with Ledger’s golden key, but if that interview is to be believed, Ledger is just one subpoena away from giving the golden key to EU authorities.
It may be just a technical distinction and not of interest to most users, but it may still bug some people.
-
-
-
-
-
-
-
-
They’ll do something else stupid. Just give them time. The lawyers probably finally got through to the marketing idiots and the CEO that they’ve essentially violated their own publicly stated advertisements selling the ledger as a device where the seed phrase will NEVER EVER leave the device. Hundreds of thousands of now angry customers bought a ledger device based upon this promise that Ledger Recover would violate. They’ll find some workaround and do it anyways. Imho.
-
-
-
-
-
-
-
-
I think no one won in this case, as delaying the launch of the service doesn’t change the issues which have been uncovered.
Ledger has hurt their business badly, and its users have realised that the secure element of their hardware wallet is less secure than what they believed until last week.
-
-
-
- Du musst angemeldet sein, um auf dieses Thema antworten zu können.