Hardware wallets wont fix your terrible pc opsec

[AVE5]

So many people are making mistake that they don't even know the cause of what is happening to them and how they are being attacked, having a hardware wallet is not the end of the security challenge, you must ensure that you are being mindful of the device you are using and what you are doing on it, we are expected to avoid unsolicited links and downloads on our device because we could be hacked through such, also, ledger wallet does not maintain high level of privacy, it's not bad if we can consider any other brands like Trezor.

Once again, not wallet is risk free and that's why even the hardware wallets such as the Ledger, Trezor and the rest alike hardware brand's can't be heartedly trusted to keep you safe from loosing risking your funds in one way or the other.
Although, the hardware wallets has a  high protective gangways against online hackers due to it cold storage encompassment of offline storage.
Perhaps device is vulnerable to be crushed while components MAY resist to function properly at any given timeline.

[CryptoVoyager24]

@promise444c5 brought up the actual fatal flaw: blind signing. Stealers dont even need your seed phrase anymore. They just swap the destination address in the windows clipboard or the browser dom. If u just mash the confirm button on your ledger without matching the address on the tiny hardware screen, your cooked. The hardware did its job perfectly, it signed exactly what u authorized. U just authorized a transaction to a hackers wallet.

[joniboini]

Perhaps device is vulnerable to be crushed while components MAY resist to function properly at any given timeline.

What does this mean? Are you trying to say HW components are fragile and might malfunction anytime without notice? That sounds unlikely to happen, unless you're leaving it on somewhere harsh for the device. Most of them have operating temperature and whatnot; users should probably check that first before they leave their HW on their house. Even then, you shouldn't blame the device for being crushed after you hammer it hard. Not to mention, you should've kept a seed phrase securely to begin with.

[Somegory]

Literally everyday someone is crying here about their ledger getting drained. Nwsflash: the hardware chip is fine. U got social engineered.

Dropping $150 on a physical device is completely pointless if u plug it straight into the exact same windows desktop u use to click sketchy discord links and run pirated games. Fake guis bypass defender easily now. If u actually type 24 words into a desktop popup just cause your monitor asked nicely... thats a layer 8 pebkac issue.

Separate your environments. Boot tails or a strict linux distro for crypto. Stop treating a daily driver gaming rig like Fort Knox.

High price doesn't always mean better, there are cheaper hardware wallet out there that's not even up to $100, but your point is valid, there is no point keeping your coins on  the world most secured hardware wallet if you don't have sense how to use them right.

I also use my computer for pirate games, because I don't always have money for all PC games that I want to play, meaning that there is possibility that my PC is already not safe.

I also have a hardware wallet but I am fully aware of the risks available so I went for a hardware wallet that I can operate without the help of my PC, I don't have to connect my hardware wallet to my PC, I hope people will learn from this.

[AVE5]

Perhaps device is vulnerable to be crushed while components MAY resist to function properly at any given timeline.

What does this mean? Are you trying to say HW components are fragile and might malfunction anytime without notice? That sounds unlikely to happen, unless you're leaving it on somewhere harsh for the device. Most of them have operating temperature and whatnot; users should probably check that first before they leave their HW on their house. Even then, you shouldn't blame the device for being crushed after you hammer it hard. Not to mention, you should've kept a seed phrase securely to begin with.

You obviously had also pointed out some potential risks that can be threatening to the destruction of the hardware device, so is there necessity for further explanations of what I meant about the the malfunction of the components comprising the device?
The truth is that the hardware wallets is the safest means to store bitcoin than the software wallets basically due to their differences in storing crypto keys offline and online.
It also doesn't matter whether you're holding on hardware or software wallets that guarantees your safety but how carefully you secures your keys and maintains privacy to the best you can so that the faulted for any compromise or risk.
When the device is being tampered either fallen from a height and exposed to unbearable temperature or even chemical reactions on the device can lead to malfunction of the device.
However, I specifically mean to highlight the risks of related electronic device as the hardware wallets.

[CryptoVoyager24]

The whole debate about hardware failing or getting crushed physically is totally missing the point. The physical device is completely disposable. U could throw your ledger into an active volcano right now and your funds are perfectly fine as long as the seed phrase is backed up properly on steel.
A hardware wallet is just a glorified signing calculator. Treating it like a physical vault holding your coins is exactly why beginners panic when the screen glitches.

[dansus021]

1000% You are right, The chip is actually fine, even tho there is a problem with the chip, the company would know and started creating a new chip heck probably trezor and ledger already a creating new cpu a better one another hackproof one.

Just if you want to do transaction this and there created another wallet and act it as a hot wallet, big exchange like bybit and binance use this hot and cold mechanism even tho they guard their seed phrase like insane

[DubemIfedigbo001]

Dropping $150 on a physical device is completely pointless if u plug it straight into the exact same windows desktop u use to click sketchy discord links and run pirated games. Fake guis bypass defender easily now. If u actually type 24 words into a desktop popup just cause your monitor asked nicely... thats a layer 8 pebkac issue.

Separate your environments. Boot tails or a strict linux distro for crypto. Stop treating a daily driver gaming rig like Fort Knox.

Why even think about plug-in devices when there are air-gapped ones? Although some people probably wouldn't be helped by such devices because they don't understand what a seed actually is, so they share it with others just because they asked nicely.

Lol, Scammers are the nicest people on earth and they feed off people's ignorance. Most people decided not to learn since every wallet creation process always attach serious warning like this one from electrum:

Please save these 12 words on paper (order is important). This seed will allow you to recover your wallet in case of computer failure.
WARNING:

• Never disclose your seed.
• Never type it on a website.
• Do not store it electronically.

Hardware wallets also come with special paper to put down your seed phrases securely offline alongside the warnings.

At least they should be able to read and adhere to instructions, one problem I see people have is that they find it difficult to stick to instructions most times until they have had some real bad experiences.

[Peanutswar]

Literally everyday someone is crying here about their ledger getting drained. Nwsflash: the hardware chip is fine. U got social engineered.

Dropping $150 on a physical device is completely pointless if u plug it straight into the exact same windows desktop u use to click sketchy discord links and run pirated games. Fake guis bypass defender easily now. If u actually type 24 words into a desktop popup just cause your monitor asked nicely... thats a layer 8 pebkac issue.

Separate your environments. Boot tails or a strict linux distro for crypto. Stop treating a daily driver gaming rig like Fort Knox.

Most of these attacks are sometimes based on the user's action which is allowing the software, and their mind are floating above the air. They type their seed phrase, even you have a hardware wallet but if you are the one who put the seed phrase at your own risk you are the one who made the mistake not the hardware wallet because at the first place we keep saying in the crypto space is dont reveal your seed phrase and have a backup of it and store in a safe place now if at the first place.

This is why it's ideal to have a separate wallet for active transactions, a hot wallet, and a hardware wallet if you want to store your assets on a long-term basis, which you usually don't use, to avoid large amounts stored in the hardware wallet getting compromised.

[Outhue]

Literally everyday someone is crying here about their ledger getting drained. Nwsflash: the hardware chip is fine. U got social engineered.

Dropping $150 on a physical device is completely pointless if u plug it straight into the exact same windows desktop u use to click sketchy discord links and run pirated games. Fake guis bypass defender easily now. If u actually type 24 words into a desktop popup just cause your monitor asked nicely... thats a layer 8 pebkac issue.

Separate your environments. Boot tails or a strict linux distro for crypto. Stop treating a daily driver gaming rig like Fort Knox.

Ledger is even a terrible recommendation for anyone, they aren't good and their ratings online is lower compared to others, like Keystone and Trezor which are my favourite two, Ledger is not a open source wallet I guess they thought that been closed source keeps some eye away from their security but the history of their reputation is saying the opposite, I won't recommend Ledger to anyone, their new hardware wallets are looking very good but it doesn't matter as buying hardware wallet for secure purposes is way better than buying one because they look very good.

[hd49728]

Ledger is even a terrible recommendation for anyone, they aren't good and their ratings online is lower compared to others, like Keystone and Trezor which are my favourite two, Ledger is not a open source wallet I guess they thought that been closed source keeps some eye away from their security but the history of their reputation is saying the opposite, I won't recommend Ledger to anyone, their new hardware wallets are looking very good but it doesn't matter as buying hardware wallet for secure purposes is way better than buying one because they look very good.

Ledger is not a good hardware wallet to use because of many reasons.

It's close source, while we all know recommended wallets should be open source.
https://walletscrutiny.com/?platform=allPlatforms&page=0&query-string=Ledger

It has many data breaches.
https://www.efani.com/blog/ledger-security-breaches-history

It has bad products like Ledger Recover.
Ledger Recovery - Send your (encrypted) recovery phrase to 3rd parties entities

[Mahiyammahi]

In fact, if we just dismiss everything as User Error, then it is a big understatement to the real problem. If the entire ecosystem is not safe, then it is not right to blame only the user, even though there are enough Secure Elements inside the Ledger device. In fact, not everyone is an Advance User, so I think UX, Clear warning and Phishing resistance should be made stronger and more robust.

On the other hand, although it is reasonable to use Strict Linux, this is not practical for everyone. And we should not just dismiss the Layer 8 issue, otherwise real improvement will never come.

[salad daging]

I used to be a pirated app user and all apps use cracks, but when I knew how risky it was then I decided to leave it all out.
Start using Windows Official License, using all official paid apps so that it will be safer.

Yes, now I have abandoned this habit long ago after knowing the risks, where pirated applications can have dangerous malware viruses embedded in the files we download.

To surf the internet use additional premium anti-ads and antivirus applications that will secure our internet and be safe from all kinds of malware attacks that can enter at any time if we are careless.
The hardware wallet connected to our Device will be secure and the implementation of maximum security for the Hardware wallet can work well.

I don't use premium antivirus but for surfing now use Brave browser which blocks ads so it's free to access in this browser, it's different from Chrome if you don't install addblock extensions or the like ads are always there and even appear continuously, on the other hand install addblock in this browser the signature does not appear on bitcointalk.

[taufik123]

I don't use premium antivirus but for surfing now use Brave browser which blocks ads so it's free to access in this browser, it's different from Chrome if you don't install addblock extensions or the like ads are always there and even appear continuously, on the other hand install addblock in this browser the signature does not appear on bitcointalk.

even if you are already using Brave, you need to use an additional antivirus as double security.
Brave may only work in the Browser environment, but not for your device's entire system.
If your device is infected with some malware that suddenly enters from any path, it will threaten your device's main system.

The use of premium antivirus is not only for surfing the internet, but for the overall security of your device,
and if you only rely on Windows Defender on Windows it is still lacking in my opinion.

[BlackBoss_]

I don't use premium antivirus but for surfing now use Brave browser which blocks ads so it's free to access in this browser

Brave is not a good browser because their team broke their own slogan and promise to provide a private browser for users. You know their slogan was like that but years ago, they required their users to do KYC for claiming the BRAVE token.

Breaking their own slogan and promise truly damage their browser reputation.

even if you are already using Brave, you need to use an additional antivirus as double security.

Antivirus software, Internet security software are good to use but bought accounts (premium) are better than free accounts. In addition, they are only second layer of security protection for people while people must have their good habit and practice on their devices and Internet as a first most important layer of security protection against any threats.

[taufik123]

-snip-
Antivirus software, Internet security software are good to use but bought accounts (premium) are better than free accounts. In addition, they are only second layer of security protection for people while people must have their good habit and practice on their devices and Internet as a first most important layer of security protection against any threats.

Yes I also advise about using a premium account and that would be better.
Then it will also depend on how the user uses their device, If they are not vigilant enough and ignore how to use it correctly, whatever the security certainly will not work properly.
Some people can only buy but can't use it, can't maximize the security of the device. When everything is lost due to hacking, it is the device that is to blame, not their own stupidity.