 |
January 19, 2025, 10:54:03 PM |
|
I don't want to downplay any reports of suspicious wallet drainages. I don't trust Ledger at all, never used any Ledger and certainly won't want to do it in the future.
The problem is hard evidence and most reports lack a lot of details to properly judge and assess what really happened.
I would still have little doubts when someone writes he only wrote down the mnemonic recovery words to paper. People who don't understand the potential leak paths, don't even think about it when they additionally took a picture with their smartphone of the written words. They're so used to take an additional digital picture as "backup" of important stuff, that they don't think about possible consequences.
Pictures are usually synced with some cloud galleries. Picture galleries nowadays have all sorts of fancy AI picture recognition/analysis/classification. And no-one has any control whatsoever happens with your pictures to train whatever f***ing piece of software in those clouds. Consider every picture taken and synced to such a cloud as non-private.
It's really hard to tell if a device was compromised or a user did something stupid where he's not even aware of the latter.
And wallet apps on mobile phones is another story because usually most people do all sorts of internet shit with their phones, install whatnot apps on them, where I would say, the security status of such devices is likely a bit questionable. So how much can you trust a mobile phone app telling you your hardware wallet is genuine? Phew... (a bit far stretched maybe, just want to raise questions)
|