Hardware wallets secure? Ethereum hacker selling databases from shopify hack

[rdbase]

Obtained from the shopify exploit exposed earlier in the past couple of weeks the one who hacked them is giving out, those who use specific hardware wallets, personal information to the highest bidder.

https://twitter.com/underthebreach/status/1264460979322138628?s=21

They can be plugged up by applying hotfixes to those devices for any further attempts at accessing your funds on said devices.

But using the shopify exploit one is still able to get an other information they wish for example from amazon.

So with the partnerships of shopify to facebook and not a crypto payments company coinpayments, they have alot of people in their sql databases which were compromised in these hacks.

https://betakit.com/shopify-partners-with-facebook-to-launch-facebook-shops
https://coinjournal.net/news/shopify-adds-coinpayments-support-to-bring-crypto-payments-to-millions-of-merchants

Maybe changing your passwords if you use these services wouldnt be such a bad idea.

Ledger did put out a statement saying the db info was fake:


I am not too sure but I think they are just doing damage control from that statement.
Because the hacker found a way to look at the sql files shopify has, that stores personal information from other sources such as ledger/amazon/so on.
They does not need to access anything from ledger at this point because ledger gave all the info to the shopify sql already which they are now at the hackers disposal.

I never really trusted in the ledger wallets before after seeing this video from about a year ago:
https://www.youtube.com/watch?v=nNBktKw9Is4

So maybe all hardware wallets in general are never really secure.

[Chris!]

They've never been secure. Use paper wallets. If you don't know how to properly use paper wallets then ask, research and test. Don't trust someone with your trustless currency.

[pakhitheboss]

They've never been secure. Use paper wallets. If you don't know how to properly use paper wallets then ask, research and test. Don't trust someone with your trustless currency.

Paper wallet is not the answer.

All wallets can be hacked as they use codes, there is nothing you can do about it. The only option is to always keep them offline and use it only when you need to trade.

Wallets area users personal responsibility, just like a pocket wallet. They only get compromise when a user let them to be.

[gentlemand]

What the hell are you on about?

It's an ecommerce database that was claimed to have been hacked, which has since been debunked.

https://blog.trezor.io/trezor-e-shop-breach-is-a-hoax-d943ce267b66

And please tell us what this has to do with the actual operation of a hardware wallet. I'd be truly fascinated to know.

[Chris!]

They've never been secure. Use paper wallets. If you don't know how to properly use paper wallets then ask, research and test. Don't trust someone with your trustless currency.

Paper wallet is not the answer.

All wallets can be hacked as they use codes, there is nothing you can do about it. The only option is to always keep them offline and use it only when you need to trade.

Wallets area users personal responsibility, just like a pocket wallet. They only get compromise when a user let them to be.

It seems you missed a big part of my message. Let me try again:

If you don't know how to properly use paper wallets then ask, research and test.

I am 99.999999999999% sure no one will be getting into my paper wallets because I know what I'm doing. If you don't, then that's user error.

Don't blame your computer if you install the OS improperly. Don't blame an offline backup (which is all a paper wallet is) if you can't create and store it in a secure way.

I know you're just shitposting for your measly pittance of sats but figured I'd better correct you so the next wave of shitposters can get educated while they earn pennies for spamming.

[libert19]

Title is clickbait, that database leak has nothing to do with hardware wallet security.

[rdbase]

^^
Changed, is that better

Sure they dont have anything to do with exploiting the devices directly as I stated in the synopsis of what I am posting about but they do have customers physical address including their email addresses registered and other contact information.
And sure ledger will deny nothing was leaked. But with so many data leaks for other institutions including the banks and consumer retailers.
Also to gentlemand: Did you notice I only mentioned ledger and not trezor in what I wrote? Only the screens mention of trezor and I didnt want to black their name out showing to cover up any information.
Since it happened a week ago from when it was made public, did they come out(shopify) with a statement of their own, denying any of the information was fake and a hoax?
They can just lie to cover up any wrong doing unless a class action lawsuit from those customers actually obtaining the leaks some how and verifying their information are on those documents.

[mk4]

I already created a topic about this like 5 days ago, just so if you're interested in the responses.

Topic: Ledger(and Trezor) hardware wallet owners: heads up | EDIT: (debunked) https://bitcointalk.org/index.php?topic=5250862

[rdbase]

^^

Alright thanks for the link.
Will wrap this up there.