Setup Ledger without Ledger Live!

[dkbit98]

Few days ago I found out that github developer darosior (Antoine Poinsot) released open source code for setting up Ledger hardware wallet without ever using official Ledger Live app ^{(known for spying and spamming)}.

This is still early Proof of Concept, and there are plans to make updates in future, but for now it supports only Bitcoin (no altcoins) and there is no ledger recover subscription by default.
There is no GUI released yet, so everything is done by commands for now.

Github page:
https://github.com/darosior/ledger_installer


This topic will be updated with in future with more information.
If you find any additional information about this project please post them here.

[AB de Royse777]

This is still early Proof of Concept, and there are plans to make updates in future, but for now it supports only Bitcoin (no altcoins) and there is no ledger recover subscription by default.
There is no GUI released yet, so everything is done by commands for now.

Github page:
https://github.com/darosior/ledger_installer


This topic will be updated with in future with more information.
If you find any additional information about this project please post them here.

I don't understand github. As long as there is a way to install the bitcoin app in a Ledger device then using Electrum a user can use ledger without connecting it with Ledger live. All we need a way to install the Apps in the Ledger device. Does this piece of code allow to do the installation?

[Pmalek]

As long as there is a way to install the bitcoin app in a Ledger device then using Electrum a user can use ledger without connecting it with Ledger live. All we need a way to install the Apps in the Ledger device. Does this piece of code allow to do the installation?

The software allows you to install the bitcoin app, but you can't update it if a new version is available. I also don't see a command to uninstall an app if you want to do that. It will probably be added later. You can also not upgrade the firmware. This 3rd-party software allows you to complete the Ledger genuine check.

It doesn't say anything about seed generation, and if the app can instruct the Ledger to generate a new seed for you. If not, can you import a seed from elsewhere?!

This gets rid of all the tracking and the ads Ledger places through Ledger Live. I am not so sure how it fixes Ledger Recover. Let me expand on that.

The Ledger Recover code is on the firmware. If you buy a Nano X or Nano S Plus, the code is included in the latest firmware. Ledger tells us that you need to give them the permission to extract the keys and distribute them as shards to three different companies. So, it needs the user's permission. Whether or not that is true, is on everyone to decide and trust themselves. Nothing is publicly verifiable at this point so you can't check it.

In other words, you have no idea what the firmware is doing and whether the device can be configured to extract your keys with or without your permission.

Here is the thing, if you believe the keys can't be extracted without your consent, just don't give it to them and continue using the device like before.
If you believe they can get your keys without your permission, this 3rd-party app won't stop them. The code is in the firmware, and can be configured how they want to. Theoretically, the extraction could happen as soon as you generated your seed.

[NeuroticFish]

This is still early Proof of Concept, and there are plans to make updates in future

Since it's open source, there are chances for becoming a great tool.. when it will also offer updates too (even if only for Bitcoin). The only problem I see is that this has to get out of PoC fast, else he may end up with no "customers" "thanks" to the "great" ways Ledger is "attracting" customers in the last few years...

...I just hope Ledger will not come up with some nasty ideas to stop this guy.

[Pmalek]

I just hope Ledger will not come up with some nasty ideas to stop this guy.

I don't think they can. Ledger Live is an open-source software. That license gives everyone the right to play around with it, modify it to their liking, and make it publicly available for others to use. If they try to stop that, they are scumbags. But I don't see this becoming too big for it be seen as a threat to Ledger's business model and something they'll try to stop because it's affecting their sales.

[NeuroticFish]

I just hope Ledger will not come up with some nasty ideas to stop this guy.

I don't think they can. Ledger Live is an open-source software. That license gives everyone the right to play around with it, modify it to their liking, and make it publicly available for others to use. If they try to stop that, they are scumbags. But I don't see this becoming too big for it be seen as a threat to Ledger's business model and something they'll try to stop because it's affecting their sales.

I know what (F)OSS means. But is also the firmware or the apps also open source? Is he allowed to get them and install them himself?
As long as their HW sales go well, he is harmless, of course. But if the overall sentiment on Ledger products is similar to what I know on Bitcointalk bitcoin areas,... then those sales may not look that good... And if Ledger is planning to milk some money from, .. I don't know, advertising and "special offers" in LL, then he may start to matter.
Of course, as usual, I hope I'm wrong.

[Pmalek]

I know what (F)OSS means. But is also the firmware or the apps also open source? Is he allowed to get them and install them himself?

The cryptocurrency apps are open-source. Some are natively-developed by Ledger, others are created by the developers of various cryptocurrencies. The firmware was always closed-source. Ledger talked about releasing a part of their Ledger Recover code to the public. But nothing is happening on that front. There was even a timeline somewhere. That's ridiculous, of course. It's like agreeing to empty one of the pockets of your choice on your clothes as proof that you didn't steal something. Nice, but what about all your other pockets?