Bitcoin Forum
September 23, 2018, 09:22:59 AM *
News: ♦♦ New info! Bitcoin Core users absolutely must upgrade to previously-announced 0.16.3 [Torrent]. All Bitcoin users should temporarily trust confirmations slightly less. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: 'Technical Data' in Ledger Live  (Read 76 times)
tarball
Jr. Member
*
Offline Offline

Activity: 68
Merit: 3


View Profile
July 14, 2018, 08:20:37 PM
 #1

Why is 'Technical Data' in Ledger Live App mandatory?



https://media.discordapp.net/attachments/454371654769049642/467787081108815872/unknown.png

Thanks for reading my post.
1537694579
Hero Member
*
Offline Offline

Posts: 1537694579

View Profile Personal Message (Offline)

Ignore
1537694579
Reply with quote  #2

1537694579
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1537694579
Hero Member
*
Offline Offline

Posts: 1537694579

View Profile Personal Message (Offline)

Ignore
1537694579
Reply with quote  #2

1537694579
Report to moderator
1537694579
Hero Member
*
Offline Offline

Posts: 1537694579

View Profile Personal Message (Offline)

Ignore
1537694579
Reply with quote  #2

1537694579
Report to moderator
TryNinja
Hero Member
*****
Offline Offline

Activity: 770
Merit: 760


ChipMixer's Badge of Honor


View Profile
July 14, 2018, 08:22:59 PM
 #2

From Ledger's CEO on reddit:

Quote
We are very transparent about what we collect. You can see the details here: https://i.imgur.com/NuysGcH.png This is less that what a web session is collecting (we don't log IP addresses), and much less than was Google was collecting with the Chrome app system.

Sending Ledger Live version, OS & language, and a unique anonymous ID (to count usage) is not invasive, doesn't breach any privacy issue, and is fully shown in a transparent way. If you do not wish to give your consent, you have the possibility not to use the app (please note that nothing is send to our servers unless you complete the onboarding and therefore agree to the technical data collection).

Compared to the Chrome apps, there is a massive progress in data collection as we were able to reduce to the minimum. It is important however for us to have a basic understanding of usage, the same way that a web page is having some basic analytics.

No personal information are sent, in any case.
Source: https://www.reddit.com/r/ledgerwallet/comments/8xdgfi/_/e22jqdi

tarball
Jr. Member
*
Offline Offline

Activity: 68
Merit: 3


View Profile
July 14, 2018, 08:25:29 PM
 #3

Thanks.

Also, is there a way to view bitcoin testnet coins on Ledger Live?

Thanks for reading my post.
tarball
Jr. Member
*
Offline Offline

Activity: 68
Merit: 3


View Profile
July 14, 2018, 08:31:02 PM
 #4

Nevermind, I found it. 'Developer mode' in settings.

Thanks for reading my post.
HCP
Hero Member
*****
Offline Offline

Activity: 728
Merit: 923

<insert witty quote here>


View Profile
July 14, 2018, 09:57:44 PM
 #5

Also, due to the wonders of FOSS, I'm sure it would be possible to actually just fork the code on GitHub, modify it to include "dummy" (or no) data and then compile it again... Wink


bob123
Hero Member
*****
Offline Offline

Activity: 686
Merit: 568



View Profile WWW
July 14, 2018, 10:32:31 PM
 #6

I'm sure it would be possible to actually just fork the code on GitHub, modify it to include "dummy" (or no) data and then compile it again... Wink

Definitely possible, but it would require someone to look through massive amounts of javascript(!) code.  Roll Eyes
It may be easier to simply (find and) drop/block this specific packet  Grin

HCP
Hero Member
*****
Offline Offline

Activity: 728
Merit: 923

<insert witty quote here>


View Profile
July 15, 2018, 12:16:06 AM
Merited by DarkStar_ (2), bob123 (2)
 #7

Definitely possible, but it would require someone to look through massive amounts of javascript(!) code.  Roll Eyes
It may be easier to simply (find and) drop/block this specific packet  Grin
Wasn't really that difficult, thanks to the helpfully named "analytics" folder Wink Tongue

https://github.com/LedgerHQ/ledger-live-desktop/blob/develop/src/analytics/segment.js

bob123
Hero Member
*****
Offline Offline

Activity: 686
Merit: 568



View Profile WWW
July 15, 2018, 02:20:19 PM
 #8

Wasn't really that difficult, thanks to the helpfully named "analytics" folder Wink Tongue

https://github.com/LedgerHQ/ledger-live-desktop/blob/develop/src/analytics/segment.js

Oh, i was looking at the repository for about 5 or 10 minutes but completely overlooked that  Grin
I am glad ledger does use meaningful variable-/class-/file- names. Definitely makes it more appealing to read  Grin

gentlemand
Legendary
*
Offline Offline

Activity: 1764
Merit: 1257


Hello You


View Profile
July 15, 2018, 09:12:27 PM
 #9

From Ledger's CEO on reddit:
Quote
you have the possibility not to use the app
Source: https://www.reddit.com/r/ledgerwallet/comments/8xdgfi/_/e22jqdi

Thanks Mr. CEO. Or you could let me opt out but I guess you're not going to do that. I hope people keep a very close eye on this. And using one with Electrum or Mycelium may be made harder too.

With their talk of partnering with operations like Google I see the future of hardware wallets, or at least this one, as retrogressive and heading towards the same old shit.

TryNinja
Hero Member
*****
Offline Offline

Activity: 770
Merit: 760


ChipMixer's Badge of Honor


View Profile
July 16, 2018, 01:14:26 AM
 #10

Thanks Mr. CEO. Or you could let me opt out but I guess you're not going to do that. I hope people keep a very close eye on this. And using one with Electrum or Mycelium may be made harder too.

With their talk of partnering with operations like Google I see the future of hardware wallets, or at least this one, as retrogressive and heading towards the same old shit.
You can also just fork the code and remove it yourself. At least that's what the CEO said when people asked him to remove the "Exchanges" tab from the wallet. Tongue

bob123
Hero Member
*****
Offline Offline

Activity: 686
Merit: 568



View Profile WWW
July 16, 2018, 06:35:01 AM
 #11

Thanks Mr. CEO. Or you could let me opt out but I guess you're not going to do that. I hope people keep a very close eye on this. And using one with Electrum or Mycelium may be made harder too.

With their talk of partnering with operations like Google I see the future of hardware wallets, or at least this one, as retrogressive and heading towards the same old shit.


I totally disagree with you.

Information being gathered:

OS: Name, Version, language, region
LedgerLive: Version, language, region and an anonymous unique identifier


The only thing which can be somewhat critical is the anonymized identifier. But, as already mentioned, you can easily just remove that lines of code. HCP even linked the file of the code.

IMO those information are extremely basic. If you have used the google chrome application, you have given WAY more information away (and not just to ledger, but mostly to google).
And google already made money off these information.


There is no possibility to tie this gathered data to your real-life personality (unless someone reverse engineers your PC and looks for the unique identifier, and then afterwards asks ledger about all information tied to this identifier).
Those are really some very basic information.

Each website you are using gatheres WAY more (e.g. most critical: IP addresses).


Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!