Bitcoin Forum

Economy => Service Discussion => Topic started by: dkbit98 on October 25, 2020, 01:56:22 PM



Title: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: dkbit98 on October 25, 2020, 01:56:22 PM
We all see that hardware wallet manufacturers are constantly competing for customers, but let's see how much they value our privacy and what are they thinking about tracking.

For this purpose I used Blacklight, A Real-Time Website Privacy Inspector from The Markup website.

Test Subject number 1 - Ledger wallet website      ll     Test Subject number 2 - Trezor wallet website

https://i.imgur.com/8Ipt6rZ.png
https://themarkup.org/blacklight?url=www.ledger.com
https://themarkup.org/blacklight?url=www.trezor.io

As we can see Ledger wallet website has 13 Ad trackers, 17 third-party cookies, they are monitoring keystrokes and mouse clicks, they inform Facebook when you visit their website, and they allow google analytics to follow us across the internet.

Trezor wallet website has 7 Ad trackers, 1 third-party cookie, they are monitoring keystrokes and mouse clicks, they inform Facebook when you visit their website, and they allow google analytics to follow us across the internet.

Nothing to be proud here, but Trezor is winner in this competition and has less trackers and cookies but I think there should be no trackers for something like hardware wallets.
Great example is Bitcointalk forum website with ZERO tracking: https://themarkup.org/blacklight?url=bitcointalk.org






Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: The Pharmacist on October 25, 2020, 08:41:19 PM
Nice research, OP.  I find this info to be....depressing, for lack of a better word.  What I really don't like is that apparently if you visit Ledger's website, they give data (I'm not sure what, exactly) to Facebook, a corporation I detest with every neuron in my CNS.

Shame on both of these companies for this.  I'm pretty sure they know how important privacy is to people who are interested in their products.  I'm sure there's a way to know beforehand about these cookies, but in practice that's something the vast majority of people don't bother to look at, lest they waste multiple hours per day simply figuring out what data each website is sharing with what companies.  Jesus.


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: Coin-Keeper on October 25, 2020, 09:30:00 PM
Great find!  I try to mitigate further on my own, but I shouldn't have to!


"Pharmacist", I sent 2 merits to you instead of OP.  Enjoy, LOL!   :)


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: bitmover on October 26, 2020, 01:17:52 AM
Very sad to see good products that are ignoring the best private practices.

I suggest that everyone who cares about privacy just use Firefox + uBlock + Privacy Badger to have a better internet experience.
You can see many good privacy recommendations here:

https://www.privacytools.io/browsers/#browser
Quote
Firefox is fast, reliable, open-source, and respects your privacy. Don't forget to adjust the settings according to our recommendations:  Privacy Add-ons  WebRTC  about:config tweaks.


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: o_e_l_e_o on October 26, 2020, 01:57:42 AM
It is grim, but it is not really surprising. Pretty much every website you frequent is filled with ads, trackers, and third party cookies. Google and Facebook follow you across the internet, even if the individual site doesn't include their trackers or services. You should never rely on websites, even ones like this which should know better, to take your privacy seriously. Your privacy is your responsibility.

Stop using Google and Facebook products. Install uBlock Origin to block ads and trackers. Disable all third party cookies. Use at least Firefox, but preferably Tor. Use Linux. Use disposable emails and fake credentials.


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: ETFbitcoin on October 26, 2020, 11:22:43 AM
Aside from cookie and tracking, don't forget the fact that some part of Ledger website uses CloudFlare ::)

Very sad to see good products that are ignoring the best private practices.

It's not surprising since business comes first and they only offer limited privacy (such as you can connect to their server/use their tools with VPN/Tor connection).


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: 1GUARDIAN on October 30, 2020, 12:42:40 PM
In order not to be a guinea pig whose behavior is studied on every site you should install a blocker. For example, I have been using a tunnelbear blocker for this purpose for a long time.

You can read about it here -

https://www.tunnelbear.com/apps/blocker


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: bob123 on November 02, 2020, 03:08:32 PM
And that's exactly why people who (at least somewhat) care about their privacy should use software (e.g. browser extensions) to block ads, trackers and javascript.

uBlock origin (for easy usage) or uMatrix (for advanced user) together with HTTPS Everywhere and NoScript are enough to not get tracked across the whole web by everyone while also browsing securely and limiting the attack surface.
Definitely recommendable.


Title: Re: Ledger vs Trezor Tracking & Cookie privacy competition
Post by: ETFbitcoin on November 03, 2020, 10:36:55 AM
In order not to be a guinea pig whose behavior is studied on every site you should install a blocker. For example, I have been using a tunnelbear blocker for this purpose for a long time.

You can read about it here -

https://www.tunnelbear.com/apps/blocker

They're talking about privacy, but it's ironic to see their website have some ad-tracker & third-party cookies (https://themarkup.org/blacklight?url=www.tunnelbear.com (https://themarkup.org/blacklight?url=www.tunnelbear.com)).
Additionally, their software isn't open software while some VPN and browser extension does.