Another Ledger Nano Security issue!

[krogothmanhattan]

Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg

[1714154020]

1714154020

[1714154020]

1714154020

[1714154020]

1714154020

[1714154020]

1714154020

[1714154020]

1714154020

[cryptocommoner]

Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg

Thanks for the heads up!  I'll update it ASAP.

[krogothmanhattan]

Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg

Thanks for the heads up!  I'll update it ASAP.

Sure no problem. They also had another issue a few weeks back. You can read this other thread I started

         https://bitcointalk.org/index.php?topic=2897047.msg29789222#msg29789222

[cryptocommoner]

Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg

Thanks for the heads up!  I'll update it ASAP.

Sure no problem. They also had another issue a few weeks back. You can read this other thread I started

         https://bitcointalk.org/index.php?topic=2897047.msg29789222#msg29789222

Thanks for this.  I see your favor the Trezor.

Here ya go. https://preorder.trezor.io

I'm actually concerned with this one having a microSD card slot.  Don't you see that as a huge security vulnerability.  It essentially gives the hackers a way to use larger brute force attacks with the higher storage.

[krogothmanhattan]

Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg

Thanks for the heads up!  I'll update it ASAP.

Sure no problem. They also had another issue a few weeks back. You can read this other thread I started

         https://bitcointalk.org/index.php?topic=2897047.msg29789222#msg29789222

Thanks for this.  I see your favor the Trezor.

Here ya go. https://preorder.trezor.io

I'm actually concerned with this one having a microSD card slot.  Don't you see that as a huge security vulnerability.  It essentially gives the hackers a way to use larger brute force attacks with the higher storage.

Cannot answer that question.

Perhaps someone is more tech savvy can answer here

I usually use paper wallets for large amount of BTCs and cold storage.

[GeckoTrader]

Hi, I bought my nano ledger s last year but since then I never update it because it was in my safety box, would it be better if I will update it or just same as it is? I am just afraid that when I will update it my bitcoin and other coins will be compromised.

[krogothmanhattan]

Hi, I bought my nano ledger s last year but since then I never update it because it was in my safety box, would it be better if I will update it or just same as it is? I am just afraid that when I will update it my bitcoin and other coins will be compromised.

  I am sure you will be fine...make sure you have your seed info.  But you can always reach out to Ledger and ask them directly.

[dadabosade67]

For me, the best wallet is web wallet. I'm too forgetful to always keep a hardware with me everywhere every time. However, I have many tricks with web wallet which is can be hidden easily

[krogothmanhattan]

For me, the best wallet is web wallet. I'm too forgetful to always keep a hardware with me everywhere every time. However, I have many tricks with web wallet which is can be hidden easily

 When you say webwallet do you mean an exchange wallet? If so thst is not the best place to store your btc. If they are hacked which has happened btw you can kiss your btc goodbye.

[vapourminer]

For me, the best wallet is web wallet. I'm too forgetful to always keep a hardware with me everywhere every time. However, I have many tricks with web wallet which is can be hidden easily

 When you say webwallet do you mean an exchange wallet? If so thst is not the best place to store your btc. If they are hacked which has happened btw you can kiss your btc goodbye.

at this point anyone trusting a third party with a decent amount of btc (or other hardware supported coin) is borderline crazy.

now for full disclosure: i still run a hot btc wallet (core wallet) on my 24/7/365 on computer and have for years, since 2011.. this is my original, and still running wallet with a small amount of btc on it for day to day spending. never had it hacked, but im decent with computer security.

as soon as core had passphrases, that went on. ran like that for a couple years. but as soon as i figured out paper wallets and vetted them to my satisfaction, the bulk of my coins went to paper (with passphrases).

now for main storage? trezor one and ledger nano s, with a trezor t on its way. I like the trezor better for various reasons, mainly because i never had a problem accessing coins and never any issues doing firmware updates.

you really need to look into paper and hardware. right now your trust is in a third party. my trust is in myself.

"no private keys? not your coins"