How often is right and safe to keep installing latest patches

[VRExpress]

How often is best to upgrade hardware wallet software releases? I know that they come with security updates and patches which can be dangerous to rush and also dangerous if you don't keep them updated.

I have read online about bad latest update that opened a door to attack from the hardware wallet creators, do you think it is wise to let the latest update be out for a while before updating?

 

[rdluffy]

Which wallet are you talking about that had problems in the last update?
I don't remember if there were any such problems with Ledger or Trezor (wallets that I own)

I never like to update any app, program, or operating system on the first day
I always like to wait at least a week to see if it's safe, if there are any bugs or any other problems

[BitMaxz]

I heard a lot of complaints about having trouble updating Ledger Nano. So, as mentioned above, I do not recommend updating your ledger immediately. In the majority of cases, I heard that it could died after installing the latest firmware and  some people having issues with other coins that could not open wallets.

However, I do not recommend Ledger because it is a closed source wallet, and I have heard that Ledger is discontinuing support for the Nano S.

Trezor is a much better hardware wallet, and it is open source.
I never heard that they had problems updating trezor.

[VRExpress]

Then it is a false that leaving your Ledger not updated for many years can cause loses later in the future? Wow, so many bad information available on the Internet this days, thank you all for your replies, I was dead worried because it's been a year since I update last.

[Meuserna]

Then it is a false that leaving your Ledger not updated for many years can cause loses later in the future? Wow, so many bad information available on the Internet this days, thank you all for your replies, I was dead worried because it's been a year since I update last.

There may come a time where Ledger's firmware updates won't work if the device isn't already running a certain version of the firmware, and that version may not be available.  You need to remember: Ledger's code is closed source.

Since Ledger's firmware isn't open source, you shouldn't be using a Ledger anyway.  There's no way to prove their firmware is safe.  And since Ledger Live is loaded with trackers, I wouldn't go anywhere near it either.

You can get a Trezor for under $80, and Trezor is open source, which means you can trust the firmware since so many people have evaluated it line by line, and many of them are using parts of it for their own projects (and they can since it's open source).  This also means lots of eyes are on every line of code for every patch and update.  With Ledger, on the other hand, you have to just trust them since the code isn't open.  And Ledger has lied so many times to their users, so I question the judgment of anyone who trusts them.

[Forsyth Jones]

I almost always update my Trezor Suite as soon as I see the notification. Recent updates tend to keep the software updated with new features and bug fixes, without posing a security risk.

The worst a software update can do is cause operational instability, etc. But new versions are well tested by the developers, and most of the time, new versions aren't available to all users.

Then it is a false that leaving your Ledger not updated for many years can cause loses later in the future? Wow, so many bad information available on the Internet this days, thank you all for your replies, I was dead worried because it's been a year since I update last.

That's why it's so important to back up your wallet so you can restore it and all your funds to other hardware wallets from other brands.
It's better to lose your device than all your funds.

[Lucius]

There may come a time where Ledger's firmware updates won't work if the device isn't already running a certain version of the firmware, and that version may not be available.  You need to remember: Ledger's code is closed source.
~snip~

This has already happened in the past, and as far as I remember, people who did not upgrade the firmware for a very long time could not even do it anymore due to some restrictions. I recently finally transferred some alts from my Ledger (X), but for one alt it wouldn't allow me to transact until I upgraded to the latest firmware, so sooner or later everyone will be forced to use firmware that enables one of the biggest stupidities (perhaps the biggest) we've seen so far when it comes to hardware wallets.

~snip~
I have read online about bad latest update that opened a door to attack from the hardware wallet creators, do you think it is wise to let the latest update be out for a while before updating?

You didn't write what exactly it's about, but in general you shouldn't rush into things like that. First, check if there are any bad experiences and what exactly the upgrade brings, and only when you are sure everything is fine, do the upgrade.

[The Sceptical Chymist]

And since Ledger Live is loaded with trackers, I wouldn't go anywhere near it either.

When you say "loaded with trackers" what are you referring to specifically?  Has anything nefarious been uncovered since it was revealed they have access to all of their customers' private keys when the Recover feature revealed them to be dishonest as the worst snake oil salesman?  I'm asking this sincerely, as I haven't heard about any other spyware loaded onto their devices or software (not that the Recover thing wasn't bad enough, mind you).

Someone here (the HW wallet section) or on the Electrum child board suggested waiting a while before updating anything, with the logic being that this would give people time to audit the code and make sure that there's nothing funny going on.  I took that to heart--but like you said, with Ledger being closed-source you don't really know what you're getting when you download an update, and I agree that people shouldn't be using Ledger devices for their own sake.  And if enough people stopped doing that, it'd weed out another scammy crypto company.  Unfortunately, a lot of people just don't care.

And my prediction?  Once a big enough HW wallet maker goes rogue and absconds with a huge amount of their users' funds, it'll draw the attention of regulators and there'll suddenly be laws governing HW wallets when it could've been avoided had there not been so many halfwits with fingers stuck in their ears and blinders on, i.e., the ones you can see defending Ledger to the hilt on reddit.  It's a case of an ounce of prevention being worth a pound of cure, you know?

[Meuserna]

And since Ledger Live is loaded with trackers, I wouldn't go anywhere near it either.

When you say "loaded with trackers" what are you referring to specifically?  Has anything nefarious been uncovered since it was revealed they have access to all of their customers' private keys when the Recover feature revealed them to be dishonest as the worst snake oil salesman?  I'm asking this sincerely, as I haven't heard about any other spyware loaded onto their devices or software (not that the Recover thing wasn't bad enough, mind you).

If you care about your privacy, don't use Ledger.

Ledger Live Tracking Reveals Privacy Concerns

IP address tracking

Ledger Live collects and stores users’ IP addresses for up to five years, raising concerns about potential identification and tracking. This information, combined with transaction data, could theoretically be used to profile user behaviour and potentially link them to specific transactions.

Data sharing with third-party services

While Ledger claims minimal data sharing, concerns linger about potential partner integrations and future changes to their privacy policy. Users have limited control over what data is shared and how it’s used.

Limited transparency

Ledger’s documentation and information about data collection and usage practices are often vague and lack specific details on who holds the data, who has access to that data and how that data is used. This lack of transparency makes it difficult for users to make informed decisions about their privacy and security.

Closed yet open source

Ledger’s firmware is closed source, meaning the software that runs the device can only be reviewed by developers from the company itself, leaving a lack of transparency to flaws and possible backdoors. While the Ledger Live source code is open-source, the lack of transparency of the full stack makes it difficult for security experts to verify the app’s functionality and identify potential vulnerabilities independently.

https://thebitcoinmanual.com/articles/ledger-live-privacy/

[dkbit98]

How often is best to upgrade hardware wallet software releases? I know that they come with security updates and patches which can be dangerous to rush and also dangerous if you don't keep them updated.

It all depends on model of hardware wallet.
Trezor for example is often releasing updates for Trezor Suite app, and they are still releasing updates even for oldest Trezor One wallet.
It's more likely new devices will have more firmware update, and support should in theory be longer.

I have read online about bad latest update that opened a door to attack from the hardware wallet creators, do you think it is wise to let the latest update be out for a while before updating?

I never heard those stories, but anything is possible with closed source wallets.
It doens't hurt to wait some time before updating firmware, unless there is emergency security update.

[VRExpress]

How often is best to upgrade hardware wallet software releases? I know that they come with security updates and patches which can be dangerous to rush and also dangerous if you don't keep them updated.

It all depends on model of hardware wallet.
Trezor for example is often releasing updates for Trezor Suite app, and they are still releasing updates even for oldest Trezor One wallet.
It's more likely new devices will have more firmware update, and support should in theory be longer.

I have read online about bad latest update that opened a door to attack from the hardware wallet creators, do you think it is wise to let the latest update be out for a while before updating?

I never heard those stories, but anything is possible with closed source wallets.
It doens't hurt to wait some time before updating firmware, unless there is emergency security update.

How will a trezor user know that a emergency security update is out when they are the type that have made up their minds that updating hardware wallet softwares isn't always necessary? I read on this forum that your hardware wallet might be useless if they start in the drawer for long without updating the firmware version, now I am even lost I don't know which one to do.

I guess updating is important and should not be ignored for too long, maybe two weeks after every latest update been released I will update mine. Thanks for the reply sirs.

[dkbit98]

How will a trezor user know that a emergency security update is out when they are the type that have made up their minds that updating hardware wallet softwares isn't always necessary?

If you have working brain and eyes you can easily check the github release page before making any updates.
Generally speaking if hardware wallet is not updated for a long time than you need to update it for sure.
If you are not making any transactions for a long time than maybe you don't need hardware wallets.

[VRExpress]

How will a trezor user know that a emergency security update is out when they are the type that have made up their minds that updating hardware wallet softwares isn't always necessary?

If you are not making any transactions for a long time than maybe you don't need hardware wallets.

So the general purpose of owning one is to not be too far away from making transactions? So what's the best option for someone who want to buy Bitcoin and only look back after 10years then?

[rat03gopoh]

So the general purpose of owning one is to not be too far away from making transactions?

It doesn't mean you need to increase your Bitcoin activity just because you've just purchased it. Having a hardware wallet for extra security purposes because you'll frequently make transactions or interact with third-party services.

So what's the best option for someone who want to buy Bitcoin and only look back after 10years then?

A paper wallet with a durable medium. Check out some of these suggestions: https://bitcointalk.org/index.php?topic=5434799.0