Bitcoin Forum
May 25, 2018, 05:38:27 PM *
News: Latest stable version of Bitcoin Core: 0.16.0  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2] 3 »  All
  Print  
Author Topic: Ledger Nano S  (Read 553 times)
crypt0heaven
Full Member
***
Offline Offline

Activity: 182
Merit: 100


https://imgur.com/WJkvPXp


View Profile
January 10, 2018, 12:18:45 PM
 #21

Did anyone buy Ledger from their site and pay Bitcoin for it?
It scares me a bit because Bitcoin has no supervision.
Is there anyone who did it and everything was fine with him and he got the Ledger without problems?

Yes, I bought my ledger nano s with bitcoin and everything went smooth as a whistle.

Dont worry about it, these guys are as legit as it gets.

1527269907
Hero Member
*
Offline Offline

Posts: 1527269907

View Profile Personal Message (Offline)

Ignore
1527269907
Reply with quote  #2

1527269907
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1527269907
Hero Member
*
Offline Offline

Posts: 1527269907

View Profile Personal Message (Offline)

Ignore
1527269907
Reply with quote  #2

1527269907
Report to moderator
HCP
Hero Member
*****
Offline Offline

Activity: 616
Merit: 782

<insert witty quote here>


View Profile
January 10, 2018, 01:30:41 PM
Merited by Kakmakr (1)
 #22

I've just bought a nano s ledger wallet and I'm not having great success with it. I'm pretty sure its me and not the wallet.
i can't seem to get the userinterface onto the nano so it interacts on screen.
it does state the ledgerwallet needs to be downloaded onto the computer (which I've done) but i can't download it onto the nano this must be the reason why the interface doesn't seem to interact on the computer.
can i change the 24 word passphrase and reset it and start again?
There are TWO components that you'll need to make the most of your Ledger Nano S.

Firstly, you want the Ledger Manager: https://chrome.google.com/webstore/detail/ledger-manager/beimhnaefocolcplfimocfiaiefpkgbf?hl=en

This is the software that lets to install and uninstall the individual coin "apps" onto he ledger device... as well as update the firmware etc. I suggest that you install this, open it up, then connect your ledger (unlock it using your PIN) and the manager app will detect your device. This will confirm that your device is working OK and is detected by the PC ok.

Then, close the Manager app, as you cant have the Manager and Wallet apps running at the same time.

Secondly, install the "Ledger Wallet Bitcoin": https://chrome.google.com/webstore/detail/ledger-wallet-bitcoin/kkdpmhnladdopljabkgpacgpliggeeaf?hl=en

Run that, connect the Ledger Nano S, unlock it with the PIN and then select the Bitcoin "app" on the Ledger device. The wallet app should detect you device and open up the Bitcoin wallet UI. It should prompt you to select "Bitcoin" or "Bitcoin Cash".

NOTE: You may need to disconnect and reconnect the Ledger from the PC, if it isnt detected after you had the Manager app open.


ps. In the future, you should really create your own topic rather than hijacking other topics Wink

revelacaogr
Legendary
*
Offline Offline

Activity: 1120
Merit: 1008

2009 Alea iacta est


View Profile
February 03, 2018, 04:32:51 PM
 #23

SECURITY

Ledger Receive Address Attack

https://www.docdroid.net/Jug5LX3/ledger-receive-address-attack.pdf


Overview
Crypto wallets consist of a private key for spending funds, and a public key for receiving funds.
Modern Crypto clients usually create a new receive address after every transaction.
This is done to better protect the privacy of the user, by spreading his funds across multiple addresses,
rather than one.
Receive addresses are normally generated automatically and are transparent to the wallet owner.
The Attack
Ledger wallets generates the displayed receive address using JavaScript code running on the host
machine.
This means that a malware can simply replace the code responsible for generating the receive address
with its own address, causing all future deposits to be sent to the attacker.
Because receive addresses are consistently changing as part of the usual activity of the wallet, the user
has no trivial way (like recognizing his address) to verify the integrity of the receive address.
As far as he knows, the displayed receive address is his actual receive address.
What Makes This Even Worse
-  All the ledger wallet software is located in the AppData folder, meaning that even an
unprivileged malware can modify them (no need to gain administrative rights).
-  The ledger wallet doesn’t implement any integrity-check/anti-tampering to its source files,
meaning they can be modified by anyone.
-  All the malware needs to do is replace one line of code in the ledger software, this can be
achieved with less than 10 lines of python code.
-  New ledger users would typically send all their funds to the wallet once initialized.
If the machine was pre-infected, this first transaction may be compromised causing the user to
lose all of his funds.
-  The attack changes the receive address during its generation, causing even the automatically
generated QR to be updated to the attacker’s address. Meaning that both the string and QR
representations of the address are compromised.
Proof of Concept
Open the file:
C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User
Data\Default\Extensions\%EXTENSION_ID%\%EXTENSION_VERSION%\src\wallet\wallet.js
Replace the line:
return (_ref = this.wallet.cache) != null ? _ref.get(this.getCurrentPublicAddressPath()) : void 0;
With:
return “MY_MALICIOUS_ADDRESS”;
The next time you receive funds, all the funds will be sent to MY_MALICIOUS_ADDRESS.
Mitigation
Un undocumented feature, that isn’t even part of the official “Receiving BTC to your Ledger” article, can
in some cases help verify the integrity of the receive address.
On the bottom right part of the receive screen, a small monitor button exists. Pressing this button will
cause the receive address to show up on the hardware wallet’s screen.
This can be used to verify that the address is valid and has not been tampered.
Note that this process is not part of the default receive process, and is not enforced by the wallet.
A proper solution would be to enforce the user to validate the receive address before every receive
transaction, just like the wallet enforces the user to approve every send transaction.
Also, this undocumented feature only exists in the Bitcoin App.
The Ethereum App (and possibly other apps as well) has no mitigation, the user has no way to validate if
the receive address has been tampered.
Advice for Existing Ledger Customers
If you’re using the Bitcoin App – Before every receive transaction validate the integrity of the address
using the monitor button.
If you’re using the Ethereum App – Treat the ledger hardware wallet the same as any other software-
based wallet, and use it only on a Live CD operating system that is guaranteed to be malware-free. At
least until this issue receives some kind of fix.
Responsible Disclosure
Unfortunately, Ledger doesn’t have an organized vulnerability disclosure program.
Nonetheless we contacted the CEO and CTO of Ledger directly in order to privately disclose and fix the
issue. We’ve received a single reply, asking to hand over the attack details. Since then all our mails have
been ignored for 3 weeks, finally receiving an answer that they won’t issue any fix/change.
Timeline:
4, January, 2018 – First contact with general information.
4, January, 2018 – CTO of Ledger requested the full details of the vulnerability.
4, January, 2018 – Full Details were sent.
10, January, 2018 – We’ve requested an update, no response.
13, January, 2018 – Again, we’ve requested an update, not response.
27, January, 2018 – CTO of Ledger replies that no fix/change would be done (our recommendation to
enforce the user to validate the receive address has been rejected), but they will work on raising public
awareness so that users can protect themselves from such attacks.

http://cryptorus.info/ledger-addresses-man-in-the-middle-attack-that-threatens-millions-of-hardware-wallets/

Angel35
Jr. Member
*
Offline Offline

Activity: 126
Merit: 0

Global Risk Exchange - gref.io


View Profile
February 07, 2018, 03:55:59 PM
 #24

I had also thought about buying such wallet. Yeah, it's really safe but it has one disadvantage - it depends on the website. What do you think about that, is it really worthy to buy this wallet?

▐▐ █     GRE   ≣   GLOBAL RISK EXCHANGE     █ ▌▌
━━━━━━━  ((     WWW.GREF.IO     ))  ━━━━━━━
ohzeih5n
Member
**
Offline Offline

Activity: 111
Merit: 10


View Profile
February 07, 2018, 06:34:21 PM
 #25

I've never bought one. I think that those keys are for those who hold big ammounts of btc not like the normal people that holds less than 1 btc. When I get more btc I will buy one for sure!!

DeepOnion    ▬▬  Anonymous and Untraceable  ▬▬    ENJOY YOUR PRIVACY  •  JOIN DEEPONION
▐▐▐▐▐▐▐▐   ANN  Whitepaper  Facebook  Twitter  Telegram  Discord   ▌▌▌▌▌▌▌▌
Get $ONION  (✔Cryptopia  ✔KuCoin)  |  VoteCentral  Register NOW!  |  Download DeepOnion
HCP
Hero Member
*****
Offline Offline

Activity: 616
Merit: 782

<insert witty quote here>


View Profile
February 07, 2018, 07:25:23 PM
 #26

I had also thought about buying such wallet. Yeah, it's really safe but it has one disadvantage - it depends on the website. What do you think about that, is it really worthy to buy this wallet?
What do you mean it depends on the website? If you mean you have to use the "Ledger Wallet Bitcoin" chrome app, then that is not true. The Nano S is compatible with a lot of wallets like Electrum, Mycelium, MyEtherWallet etc. You are not limited to just using the Ledger wallet chrome apps.


I've never bought one. I think that those keys are for those who hold big ammounts of btc not like the normal people that holds less than 1 btc. When I get more btc I will buy one for sure!!
Given that the device costs somewhere around US$100... If you have an amount of BTC worth more than this, then you should consider a hardware wallet. For instance, if you have 0.1 BTC... Granted with the recent decline in BTC value, 0.1 BTC is only worth around $800 but still... with Ledgers new pricing (including shipping) of €79 (~US$100), then you're "investing" 1/8th of your bitcoins in security.

How much do you value your BTC? $100 is a relatively small price to pay for peace of mind...

Kakmakr
Legendary
*
Offline Offline

Activity: 1302
Merit: 1067

★ ChipMixer | Bitcoin mixing service ★


View Profile
February 08, 2018, 06:59:11 AM
 #27

I've just bought a nano s ledger wallet and I'm not having great success with it. I'm pretty sure its me and not the wallet.
i can't seem to get the userinterface onto the nano so it interacts on screen.
it does state the ledgerwallet needs to be downloaded onto the computer (which I've done) but i can't download it onto the nano this must be the reason why the interface doesn't seem to interact on the computer.
can i change the 24 word passphrase and reset it and start again?
There are TWO components that you'll need to make the most of your Ledger Nano S.

Firstly, you want the Ledger Manager: https://chrome.google.com/webstore/detail/ledger-manager/beimhnaefocolcplfimocfiaiefpkgbf?hl=en

This is the software that lets to install and uninstall the individual coin "apps" onto he ledger device... as well as update the firmware etc. I suggest that you install this, open it up, then connect your ledger (unlock it using your PIN) and the manager app will detect your device. This will confirm that your device is working OK and is detected by the PC ok.

Then, close the Manager app, as you cant have the Manager and Wallet apps running at the same time.

Secondly, install the "Ledger Wallet Bitcoin": https://chrome.google.com/webstore/detail/ledger-wallet-bitcoin/kkdpmhnladdopljabkgpacgpliggeeaf?hl=en

Run that, connect the Ledger Nano S, unlock it with the PIN and then select the Bitcoin "app" on the Ledger device. The wallet app should detect you device and open up the Bitcoin wallet UI. It should prompt you to select "Bitcoin" or "Bitcoin Cash".

NOTE: You may need to disconnect and reconnect the Ledger from the PC, if it isnt detected after you had the Manager app open.


ps. In the future, you should really create your own topic rather than hijacking other topics Wink

I just want to add, it is crucial to select the Bitcoin "app" on the Ledger device, otherwise it will not detect the wallet on the computer side. In the beginning, I plugged it in and then the screen just waited to detect the device. I thought that there was something wrong with the device, because it only seem to hang there.

It was only when I selected the Bitcoin wallet on the device that the software on the computer, detected the hardware wallet. This might be what is happening with him.

I have to say, the delivery of the device was pretty quick. < It was send from Paris in France >?

EtherSpin
Copper Member
Jr. Member
*
Offline Offline

Activity: 42
Merit: 0


View Profile
February 10, 2018, 04:29:59 AM
 #28

The Ledger Nano S is a good tool to hold your Bitcoin securely for sure. Paying with Bitcoin as an option is always good!
Monodont
Jr. Member
*
Offline Offline

Activity: 57
Merit: 0


View Profile
February 10, 2018, 12:29:29 PM
 #29

SECURITY

Ledger Receive Address Attack

If you’re using the Ethereum App – Treat the ledger hardware wallet the same as any other software-
based wallet, and use it only on a Live CD operating system that is guaranteed to be malware-free. At
least until this issue receives some kind of fix.

That sounds really bad. So much for security. What's the point of a hardware wallet if it is just as vulnerable as a software wallet?

bob123
Sr. Member
****
Offline Offline

Activity: 574
Merit: 419



View Profile
February 10, 2018, 05:15:27 PM
 #30

That sounds really bad. So much for security. What's the point of a hardware wallet if it is just as vulnerable as a software wallet?

A hardware wallet is much more secure than a software wallet (desktop wallet).

The current attack can't be prevented. This problem is tied to the OS.
The only thing which can be modified is what you see on your desktop. This can't be prevented without directly modifying the OS.

Ledger already has a 'fix' published. The recieving address has to be confirmed on the nano s.
Everything which appears on your nano s (confirming via pressing the button) is safe to use and you can be certain this address has been created by the nano s.

propagate
Jr. Member
*
Offline Offline

Activity: 36
Merit: 0


View Profile
February 10, 2018, 07:27:28 PM
 #31

Did anyone buy Ledger from their site and pay Bitcoin for it?
It scares me a bit because Bitcoin has no supervision.
Is there anyone who did it and everything was fine with him and he got the Ledger without problems?

I purchased a nano s with bitcoin and had no issues at all.

SHOP_
Copper Member
Jr. Member
*
Offline Offline

Activity: 61
Merit: 0

Open eCommerce Protocol


View Profile WWW
February 11, 2018, 06:46:47 AM
 #32

Buying with BTC is seamless, just use the official site, it's all well integrated. Volatility on the other hand...

Mainstream eCommerce protocol that leverages decentralization to provide incentives to brands and shoppers. Open sourced with APIs for Stripe, Shopify, and all the major shipping companies. Get your business on the blockchain and fight monopolistic middle men.
george888055
Sr. Member
****
Offline Offline

Activity: 434
Merit: 250


One Token to Move Anything Anywhere


View Profile
February 11, 2018, 03:03:49 PM
 #33

I bought 2 ledger nano s with Bitcoin. Get it after 4 weeks. Strongly recommend to buy it from the official site.  Paying with crypto is always good!

                                                                               
███████████████▄▄▄                     ▄█▄     ▀█████▄                     ▄█████▀
████████████████████▄                ▄█████▄     ▀█████▄                 ▄█████▀
              ▀▀█████▄             ▄█████████▄     ▀█████▄             ▄█████▀
                 █████▌          ▄█████▀ ▀█████▄     ▀█████▄         ▄█████▀
                 ▐█████        ▄█████▀     ▀█████▄     ▀█████▄     ▄█████▀
                 █████▌      ▄█████▀         ▀█████▄     ▀█████▄ ▄█████▀
              ▄▄█████▀     ▄█████▀     ▄█▄     ▀█████▄     ▀█████████▀
████████████████████▀    ▄█████▀     ▄█████▄     ▀█████▄     ▀█████▀
███████████████▀▀▀     ▄█████▀     ▄█████████▄     ▀█████▄     ▀█▀
                                    ▀███████▀
                                      ▀███▀
                                        ▀
bobq
Sr. Member
****
Offline Offline

Activity: 602
Merit: 277



View Profile
May 10, 2018, 10:14:17 AM
 #34

I am very happy with my Nano Ledger, even though I am not so happy with their latest software update - now it is more complex to log in the Ledger each time you have to and it takes more time. This security measure was not necessary at all, it was paranoia based vs reality based.

Gonzo1977
Jr. Member
*
Offline Offline

Activity: 69
Merit: 0


View Profile
May 10, 2018, 12:32:49 PM
 #35

Does anyone know the price in Bitcoin?

▅ ▅ ▅ ▅ ▇ ▇ ▇ ▉▉    TokenUnion.io    ▉▉ ▇ ▇ ▇ ▅ ▅ ▅ ▅
Reinventing Savings via Cryptoeconomically Incentivized Holding
bob123
Sr. Member
****
Offline Offline

Activity: 574
Merit: 419



View Profile
May 10, 2018, 12:40:22 PM
 #36

Does anyone know the price in Bitcoin?

Visit the official site, click 'Add to cart' -> 'Checkout' -> Scroll down and choose your payment method BTC.
Price will be displayed.
To check the shipping costs, enter your deilvery address.

Lucius
Legendary
*
Offline Offline

Activity: 1064
Merit: 1043


Fortis Fortuna Adiuvat


View Profile WWW
May 10, 2018, 12:51:22 PM
 #37

I am very happy with my Nano Ledger, even though I am not so happy with their latest software update - now it is more complex to log in the Ledger each time you have to and it takes more time. This security measure was not necessary at all, it was paranoia based vs reality based.

Do you mean on pin changed to random number?For me it is almost the same, you just need to pay attention when you pick number-as before it was always start with 5 and now it is just random.Maybe user can lost few seconds on that, but nothing more.I agree that this option makes sense only when using your device in public places and someone is targeting you because knows you have cryptocurrency.

Does anyone know the price in Bitcoin?

In Ledger site price is set from 94.80 Euros + free shipping, and probably may vary in price because of VAT (value-added tax) which can be different in each country.So to get the exact price just go to Ledger site and add 1 device on your cart-at the end you will see final price in Euros.Just click on BTC as option for payment I you will get price in Bitcoin.

   ███                       
   █████                     
  ███████                    
 ██████████        █         
  █████████      ████        
  ████████      ██           
     ██████    ██            
       ██████████            
            ██████   ███████ 
         █████  ██████████████
       ███ ███  ████████████ 
       ██ █          █       
      █                      
     █                       
.
                          ██ 
                       █████ 
                      ███████
           █        ██████████
          ████      █████████
             ██      ████████
              ██    ██████   
              ██████████     
   ███████   ██████          
 ██████████████  █████       
   ████████████  ███ ██      
    ██████          █ ██     
                        █    
                         █  




███           
██████        
████████     
██████████    
████████████ 
██████████████
██████████████
████████████  
██████████    
████████      
██████        
███           
.

██████████
██████████
██████████
██████████
.

          ████
        ██████
      ████████
    ██████████
  ████████████
██████████████
██████████████
  ████████████
    ██████████
      ████████
        ██████
           ███
Kakmakr
Legendary
*
Offline Offline

Activity: 1302
Merit: 1067

★ ChipMixer | Bitcoin mixing service ★


View Profile
May 10, 2018, 02:08:22 PM
 #38

I am very happy with my Nano Ledger, even though I am not so happy with their latest software update - now it is more complex to log in the Ledger each time you have to and it takes more time. This security measure was not necessary at all, it was paranoia based vs reality based.

Do you mean on pin changed to random number?For me it is almost the same, you just need to pay attention when you pick number-as before it was always start with 5 and now it is just random.Maybe user can lost few seconds on that, but nothing more.I agree that this option makes sense only when using your device in public places and someone is targeting you because knows you have cryptocurrency.

Does anyone know the price in Bitcoin?

In Ledger site price is set from 94.80 Euros + free shipping, and probably may vary in price because of VAT (value-added tax) which can be different in each country.So to get the exact price just go to Ledger site and add 1 device on your cart-at the end you will see final price in Euros.Just click on BTC as option for payment I you will get price in Bitcoin.

Also keep in mind that you might need to pay import duties on the device. I had to pay a large sum of money on top of the courier fees to take ownership of the device. You might be lucky if custom did not open your package, because some friends of mine had their package opened and inspected. They are now uncertain if the device was tampered with. <I doubt if custom officials have the expertise to pull off a "man in the middle" attack, but you never know if one of these guys are a Bitcoiner> Roll Eyes

 

lukex
Newbie
*
Offline Offline

Activity: 9
Merit: 0


View Profile
May 10, 2018, 04:52:54 PM
 #39

I got my ledger without any problems directly from the website. Payed with Btc.
okocrypto
Jr. Member
*
Offline Offline

Activity: 37
Merit: 0


View Profile
May 11, 2018, 06:26:17 AM
 #40

I want to know if the hardware wallet can be sent to purchasers any part of the globe as long as payment is confirmed? Or must one be resident in the country of the manufacturer's or vendors to be able to purchase. Am asking because I don't think there is a store where such is sold in the part of the world I come from.
Pages: « 1 [2] 3 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!