dkbit98
Legendary
Offline
Activity: 2324
Merit: 7373
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 28, 2023, 08:08:27 AM |
|
Keep in mind, those older devices use closed source firmware too, so you have no way of knowing if your device has a backdoor giving Ledger - or whoever - access to your seed:
I hope they didnt fire btchip co-founder and worst reddit mod just because of that statement, this was just one of his many semi-truths he said ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) On a serious note, this does bring up an interesting question. What happens if someone cancels their automated payment for Ledger Recover? Will they destroy the seed phrase from their storage and all their backups? I find that hard to believe, and you can't know for sure. Or will they just keep your seed phrase, but deny you acces if you ask for it? Or will they just charge you a much higher "manual recovery fee" when you need it? Either way, I'm not going to find out ![Tongue](https://bitcointalk.org/Smileys/default/tongue.gif) Good question. This should be clearly written and explained on their website, like with any subscription services. Maybe some ledger fanboy is willing to do a test sacrifice for all of us, and tell us what happens after cancelation ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif)
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1750
Merit: 4780
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 28, 2023, 10:58:04 AM |
|
On a serious note, this does bring up an interesting question. What happens if someone cancels their automated payment for Ledger Recover? Will they destroy the seed phrase from their storage and all their backups? I find that hard to believe, and you can't know for sure. Or will they just keep your seed phrase, but deny you acces if you ask for it? Or will they just charge you a much higher "manual recovery fee" when you need it? Either way, I'm not going to find out ![Tongue](https://bitcointalk.org/Smileys/default/tongue.gif) Good question. This should be clearly written and explained on their website, like with any subscription services. Maybe some ledger fanboy is willing to do a test sacrifice for all of us, and tell us what happens after cancelation ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif) I didn't sign up for the service to check, but according to the official website, you have up to 9 months to recover the subscription with an additional fee of €50, after 9 months it will no longer be possible to use the service. Since it is an extended period, I believe that the information will be deleted later. What happens if I stop paying my subscription? If you don't update your payment info and pay the subscription within 7 days, you won't be able to restore your private keys using Ledger Recover. If you don't regularize your payment within 3 months, your subscription will be suspended. After your subscription is suspended, you have 9 months to contact Ledger Recover Support and reactivate your subscription. You will need to pay an administration fee of 50 EUR along with any outstanding balance. In turn, Coincover says it will never give up its share of the key, even if it receives court orders. Unless it's extremely radical, but... Coincover will never pass your information to a third-party unless it has a legal obligation to do so. For example, law enforcement agencies often have extensive criminal investigation powers, including the ability to obtain production orders requiring information to be produced. It may result in a criminal offence for any entity supporting Ledger Recover to fail to comply with a production order, but Coincover would always take all reasonable steps to verify a production order before complying with it.
You should also note that the Recovery Seed Phrase (RSP) is encrypted and split into three fragments – all of which are held by independent companies established in separate legal systems. Since a minimum of two of three fragments would be required to gain access to your wallet, it is likely that an order would need to be obtained in at least two jurisdictions. These individual fragments are not exploitable on their own. Two of them would need to be recombined and decrypted with separate keys. Any order of this nature would realistically only ever be obtained in the most serious cases of criminality (such as where terrorist financing is suspected).
Coincover will never be able to access your seed phrase. Coincover or the other backup providers will only ever manage one encrypted fragment. We do not hold nor have access to the other fragments that make a complete seed phrase.
|
█████████████████████████ ████████▀▀████▀▀█▀▀██████ █████▀████▄▄▄▄██████▀████ ███▀███▄████████▄████▀███ ██▀███████████████████▀██ █████████████████████████ █████████████████████████ █████████████████████████ ██▄███████████████▀▀▄▄███ ███▄███▀████████▀███▄████ █████▄████▀▀▀▀████▄██████ ████████▄▄████▄▄█████████ █████████████████████████ | BitList | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | List #kycfree Websites |
|
|
|
Pmalek
Legendary
Offline
Activity: 2856
Merit: 7403
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 28, 2023, 12:01:55 PM |
|
In turn, Coincover says it will never give up its share of the key, even if it receives court orders. Unless it's extremely radical, but... Of course they will. They will never protect anyone other than their own business interests. They are obliged to share such information with the right government agencies if it's requested from them. They explain that in the first sentence in the quoted part that you shared. The second sentence states it's a criminal offence not to cooperate with law enforcement. The third one means absolutely nothing and is only there to make you feel safe. Saying that they will verify if the requests are legitimate is of no importance.
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
joker_josue
Legendary
Offline
Activity: 1750
Merit: 4780
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 28, 2023, 12:24:21 PM |
|
In turn, Coincover says it will never give up its share of the key, even if it receives court orders. Unless it's extremely radical, but... Of course they will. They will never protect anyone other than their own business interests. They are obliged to share such information with the right government agencies if it's requested from them. They explain that in the first sentence in the quoted part that you shared. The second sentence states it's a criminal offence not to cooperate with law enforcement. The third one means absolutely nothing and is only there to make you feel safe. Saying that they will verify if the requests are legitimate is of no importance. I was curious when they said that the other two parts of the key are in different jurisdictions. What jurisdictions will these be? United States, Cuba, and Cayman Islands? ![Roll Eyes](https://bitcointalk.org/Smileys/default/rolleyes.gif)
|
█████████████████████████ ████████▀▀████▀▀█▀▀██████ █████▀████▄▄▄▄██████▀████ ███▀███▄████████▄████▀███ ██▀███████████████████▀██ █████████████████████████ █████████████████████████ █████████████████████████ ██▄███████████████▀▀▄▄███ ███▄███▀████████▀███▄████ █████▄████▀▀▀▀████▄██████ ████████▄▄████▄▄█████████ █████████████████████████ | BitList | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | List #kycfree Websites |
|
|
|
Pmalek
Legendary
Offline
Activity: 2856
Merit: 7403
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 28, 2023, 12:53:44 PM |
|
I was curious when they said that the other two parts of the key are in different jurisdictions. What jurisdictions will these be? As we knew from before, Ledger is headquartered in France. The second shard holder is Coincover located in Wales. Lastly, we have EscrowTech, headquartered in the United States. The US and UK entities will find an agreement in no time if the shards need to be compiled by law enforcement. And France's Ledger isn't going to get themselves in harm's way if the right documentation gets presented to them.
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
Meuserna
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 28, 2023, 07:42:23 PM Merited by vapourminer (1) |
|
Ledger's key extraction includes other companies. What happens if those companies want to give up your keys? Here's what Ledger's CEO says: Take a moment to really think about what he just said. It's scary if you actually think about it. This could easily be the next cycle's disaster in the making. "Great, so now the Department Of Justice calls you and says "We are charging so and so with X, Y and Z. Get two of your vendors to send us the Bitcoin keys." -- Harry Sudock, discussing Ledger Recover with Ledger CEO Pascal Gauthier https://youtu.be/M3VjQUcyZSY?t=2608Even Ledger says not to use Recover if you care about your privacy: Anybody who trusts Ledger with their keys, and thus their coins, is an idiot. An idiot.
|
|
|
|
LoyceV
Legendary
Offline
Activity: 3402
Merit: 17183
Thick-Skinned Gang Leader and Golden Feather 2021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 29, 2023, 12:36:34 PM |
|
Are we allowed to call people who fall for this idiots? ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif) Anybody who trusts Ledger with their keys, and thus their coins, is an idiot. Is this worse or better than people who trust exchanges or soon ETFs with their Bitcoins?
|
|
|
|
m2017
Legendary
Offline
Activity: 1904
Merit: 1382
keep walking, Johnnie
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 29, 2023, 02:16:50 PM |
|
Even Ledger says not to use Recover if you care about your privacy: Anybody who trusts Ledger with their keys, and thus their coins, is an idiot. An idiot. Ledger should make this phrase the main slogan and place it in capital letters on its website. This would be the best most honest marketing move on their part. Are we allowed to call people who fall for this idiots? ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif) Anybody who trusts Ledger with their keys, and thus their coins, is an idiot. Is this worse or better than people who trust exchanges or soon ETFs with their Bitcoins? It's the same as trying to figure out the types of crap. But the most amazing thing is that there are people willing to take advantage of both.
|
| | . .Duelbits. | │ | ..........UNLEASH.......... THE ULTIMATE GAMING EXPERIENCE | │ | DUELBITS FANTASY SPORTS | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ████████████████▀▀▀ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | . ▬▬ VS ▬▬ | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ███████████████████ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | /// PLAY FOR FREE /// WIN FOR REAL | │ | ..PLAY NOW.. | |
|
|
|
HeRetiK
Legendary
Offline
Activity: 3024
Merit: 2146
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 29, 2023, 05:50:49 PM |
|
Anybody who trusts Ledger with their keys, and thus their coins, is an idiot.
An idiot.
An idiot that pays for the privilege of being an idiot. Are we allowed to call people who fall for this idiots? ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif) Anybody who trusts Ledger with their keys, and thus their coins, is an idiot. Is this worse or better than people who trust exchanges or soon ETFs with their Bitcoins? To be fair the ETFs are targeted towards an audience that would not get exposure to Bitcoin otherwise, though I'm not quite sure who those people would be outside of institutional investors. But maybe there's still some folks out there that prefer paying a management fee over learning how to secure the coins themselves -- as we can see with Ledger, the pitfalls of keeping coins secure are plenty.
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
LoyceV
Legendary
Offline
Activity: 3402
Merit: 17183
Thick-Skinned Gang Leader and Golden Feather 2021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 30, 2023, 12:17:20 PM |
|
But maybe there's still some folks out there that prefer paying a management fee over learning how to secure the coins themselves I can imagine it "feels" safer and especially more familiar to see a number in your broker's account, than having to deal with your own transactions. People are used to buying ETFs this way. But the management fee is a good one: I hate those! I wish I could just keep my own shares and store them by myself, instead of paying my broker and the fund owner.
|
|
|
|
dkbit98
Legendary
Offline
Activity: 2324
Merit: 7373
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 31, 2023, 07:59:08 PM |
|
Coincover says it will never give up its share of the key, even if it receives court orders. Unless it's extremely radical, but...
It doesn't say anything ''radical'', they simply say legal obligation, that is just one phone call or visit from any law enforcement agency. One interesting thing I heard recently about new upcoming ''law'' in EU is that police could have legal right to seize and take away crypto from you even if they don't have any proof against you, only suspicion is enough for them.
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1750
Merit: 4780
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 31, 2023, 11:44:05 PM |
|
One interesting thing I heard recently about new upcoming ''law'' in EU is that police could have legal right to seize and take away crypto from you even if they don't have any proof against you, only suspicion is enough for them.
I don't remember having heard of such a law, so "dramatic". What happened was that the United Kingdom approved a law that now makes it possible to seize cryptocurrencies. But this only happens through legal action, at the same level that is done to seize other assets (houses, cars, properties, etc.). Furthermore, they are always dependent on whether the person agrees to give access to their wallets or not.
|
█████████████████████████ ████████▀▀████▀▀█▀▀██████ █████▀████▄▄▄▄██████▀████ ███▀███▄████████▄████▀███ ██▀███████████████████▀██ █████████████████████████ █████████████████████████ █████████████████████████ ██▄███████████████▀▀▄▄███ ███▄███▀████████▀███▄████ █████▄████▀▀▀▀████▄██████ ████████▄▄████▄▄█████████ █████████████████████████ | BitList | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | List #kycfree Websites |
|
|
|
|
Pmalek
Legendary
Offline
Activity: 2856
Merit: 7403
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 08:18:35 AM |
|
<Snip> And various versions of Ledger phishing emails are still making their rounds. Considering how profitable it is (based on the fact that over 16 BTC has been deposited to a scammer only since the end of October), I don't see it stop any time soon. There are so many people that aren't ready to have complete control over their money that it's frightening.
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
LoyceV
Legendary
Offline
Activity: 3402
Merit: 17183
Thick-Skinned Gang Leader and Golden Feather 2021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 08:40:18 AM Merited by vapourminer (1) |
|
the scammers are still on the move and have made a fake Ledger Live app available for download in the microsoft store in the last few days. this app has generated almost 17BTC! How does that work? Someone installs malware, enters their PIN on the Ledger, doesn't verify the address on the Ledger, and clicks send? If that's the case, why did they bother buying a hardware wallet? Or is it much more advanced, like this: The user installs malware, enters their PIN on the Ledger, (fake) Ledger Live extracts the seed phrase and sends it to the attacker? I guess this scenario didn't happen yet, but that's just a matter of time now.
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1750
Merit: 4780
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 08:50:25 AM |
|
How does that work? Someone installs malware, enters their PIN on the Ledger, doesn't verify the address on the Ledger, and clicks send? If that's the case, why did they bother buying a hardware wallet?
I believe it's more the opposite, instead of sending it's receiving. The fake wallet creates an address allegedly from Ledger, and then the victim thinks he is going to load his Ledger wallet, but he is actually loading the hacker's wallet.
|
█████████████████████████ ████████▀▀████▀▀█▀▀██████ █████▀████▄▄▄▄██████▀████ ███▀███▄████████▄████▀███ ██▀███████████████████▀██ █████████████████████████ █████████████████████████ █████████████████████████ ██▄███████████████▀▀▄▄███ ███▄███▀████████▀███▄████ █████▄████▀▀▀▀████▄██████ ████████▄▄████▄▄█████████ █████████████████████████ | BitList | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | List #kycfree Websites |
|
|
|
LoyceV
Legendary
Offline
Activity: 3402
Merit: 17183
Thick-Skinned Gang Leader and Golden Feather 2021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 09:01:08 AM |
|
I believe it's more the opposite, instead of sending it's receiving. The fake wallet creates an address allegedly from Ledger, and then the victim thinks he is going to load his Ledger wallet, but he is actually loading the hacker's wallet. That comes down to the same problem: not verifying the address on the hardware wallet. It could also work with a fake version of Electrum, hooked to a hardware wallet. It's convenient to copy the address only from Electrum, but it doesn't give you the security for which you bought the hardware wallet. Then again, some people would just enter their seed phrase into a phishing website. Some people just don't want to learn.
|
|
|
|
Pmalek
Legendary
Offline
Activity: 2856
Merit: 7403
Playgram - The Telegram Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 09:09:00 AM |
|
How does that work? I am pretty sure there is currently no malware capable of extracting a user's private keys except the official Ledger Recover program. These fake apps could work in various ways. The spammers are mostly interested in your seed. So, they will think of a way why you need to enter your seed phrase into the fake app and not the Ledger hardware wallet. Next, Ledger HWs can't connect to fake Ledger Live software and 3rd-party servers pretending to be Ledger Live. The scammers can develop a malicious firmware that allows the device to connect to their software and servers. You would then generate a seed they know about or everyone is shown the same pre-generated one. It could be a combination of things.
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
LoyceV
Legendary
Offline
Activity: 3402
Merit: 17183
Thick-Skinned Gang Leader and Golden Feather 2021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 10:23:53 AM |
|
I am pretty sure there is currently no malware capable of extracting a user's private keys except the official Ledger Recover program. That would be my guess too. It makes you wonder though: how many hackers are trying to do this now? I would assume the seed leaves the device after encryption, and Ledger decrypts it on their end. But it might even be dumber than that. Just imagine malware that extracts the seed phrase right after connecting the device! Someone could earn scam billions if they pull it off!
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1750
Merit: 4780
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
November 05, 2023, 12:22:08 PM |
|
I believe it's more the opposite, instead of sending it's receiving. The fake wallet creates an address allegedly from Ledger, and then the victim thinks he is going to load his Ledger wallet, but he is actually loading the hacker's wallet. That comes down to the same problem: not verifying the address on the hardware wallet. It could also work with a fake version of Electrum, hooked to a hardware wallet. It's convenient to copy the address only from Electrum, but it doesn't give you the security for which you bought the hardware wallet. Then again, some people would just enter their seed phrase into a phishing website. Some people just don't want to learn. But here comes another hardware issue. You cannot directly browse the addresses it has on the hardware. You always need software to validate. At least, in the test I did today, if I simply connect the Ledger to the PC, without opening any software, using just the Ledger display, I cannot see any address. In this sense, if the software a person uses is fake, they run into serious problems and have no way of validating it.
|
█████████████████████████ ████████▀▀████▀▀█▀▀██████ █████▀████▄▄▄▄██████▀████ ███▀███▄████████▄████▀███ ██▀███████████████████▀██ █████████████████████████ █████████████████████████ █████████████████████████ ██▄███████████████▀▀▄▄███ ███▄███▀████████▀███▄████ █████▄████▀▀▀▀████▄██████ ████████▄▄████▄▄█████████ █████████████████████████ | BitList | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | List #kycfree Websites |
|
|
|
|