Author

Topic: Another Ledger Nano Security issue! (Read 286 times)

legendary
Activity: 4354
Merit: 3614
what is this "brake pedal" you speak of?
May 19, 2018, 07:35:20 AM
#10
For me, the best wallet is web wallet. I'm too forgetful to always keep a hardware with me everywhere every time. However, I have many tricks with web wallet which is can be hidden easily

 When you say webwallet do you mean an exchange wallet? If so thst is not the best place to store your btc. If they are hacked which has happened btw you can kiss your btc goodbye.

at this point anyone trusting a third party with a decent amount of btc (or other hardware supported coin) is borderline crazy.

now for full disclosure: i still run a hot btc wallet (core wallet) on my 24/7/365 on computer and have for years, since 2011.. this is my original, and still running wallet with a small amount of btc on it for day to day spending. never had it hacked, but im decent with computer security.

as soon as core had passphrases, that went on. ran like that for a couple years. but as soon as i figured out paper wallets and vetted them to my satisfaction, the bulk of my coins went to paper (with passphrases).

now for main storage? trezor one and ledger nano s, with a trezor t on its way. I like the trezor better for various reasons, mainly because i never had a problem accessing coins and never any issues doing firmware updates.

you really need to look into paper and hardware. right now your trust is in a third party. my trust is in myself.

"no private keys? not your coins"
legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
May 15, 2018, 03:48:39 AM
#9
For me, the best wallet is web wallet. I'm too forgetful to always keep a hardware with me everywhere every time. However, I have many tricks with web wallet which is can be hidden easily

 When you say webwallet do you mean an exchange wallet? If so thst is not the best place to store your btc. If they are hacked which has happened btw you can kiss your btc goodbye.
newbie
Activity: 129
Merit: 0
May 15, 2018, 02:53:29 AM
#8
For me, the best wallet is web wallet. I'm too forgetful to always keep a hardware with me everywhere every time. However, I have many tricks with web wallet which is can be hidden easily
legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
April 19, 2018, 03:43:20 AM
#7
Hi, I bought my nano ledger s last year but since then I never update it because it was in my safety box, would it be better if I will update it or just same as it is? I am just afraid that when I will update it my bitcoin and other coins will be compromised.

  I am sure you will be fine...make sure you have your seed info.  But you can always reach out to Ledger and ask them directly.
jr. member
Activity: 196
Merit: 3
April 18, 2018, 11:04:55 PM
#6
Hi, I bought my nano ledger s last year but since then I never update it because it was in my safety box, would it be better if I will update it or just same as it is? I am just afraid that when I will update it my bitcoin and other coins will be compromised.
legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
March 07, 2018, 10:43:40 AM
#5
Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg


Thanks for the heads up!  I'll update it ASAP.

Sure no problem. They also had another issue a few weeks back. You can read this other thread I started

         https://bitcointalksearch.org/topic/m.29789222

Thanks for this.  I see your favor the Trezor.

Quote

I'm actually concerned with this one having a microSD card slot.  Don't you see that as a huge security vulnerability.  It essentially gives the hackers a way to use larger brute force attacks with the higher storage.

Cannot answer that question.

Perhaps someone is more tech savvy can answer here

I usually use paper wallets for large amount of BTCs and cold storage.
jr. member
Activity: 112
Merit: 5
March 07, 2018, 10:33:23 AM
#4
Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg


Thanks for the heads up!  I'll update it ASAP.

Sure no problem. They also had another issue a few weeks back. You can read this other thread I started

         https://bitcointalksearch.org/topic/m.29789222

Thanks for this.  I see your favor the Trezor.

Quote

I'm actually concerned with this one having a microSD card slot.  Don't you see that as a huge security vulnerability.  It essentially gives the hackers a way to use larger brute force attacks with the higher storage.
legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
March 07, 2018, 10:23:11 AM
#3
Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg


Thanks for the heads up!  I'll update it ASAP.

Sure no problem. They also had another issue a few weeks back. You can read this other thread I started

         https://bitcointalksearch.org/topic/m.29789222
jr. member
Activity: 112
Merit: 5
March 07, 2018, 10:18:54 AM
#2
Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg


Thanks for the heads up!  I'll update it ASAP.
legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
March 06, 2018, 04:13:43 PM
#1
Quote from twitter.  https://twitter.com/spudowiar/status/970977060134023168

As one of the security researchers, I urge to update now. This article doesn't make it clear enough how dangerous this issue can be.

Potential issues include compromised recovery seed generation or private key extraction. https://t.co/Z2WGFZnFAA


https://pbs.twimg.com/media/DXmXpYEW4AAX33N.jpg
Jump to: