What would be the important announcement then? That Ledger is a shitty company that has not only been so careless that it has let its customers' data be stolen several times but is also going to implement a program that goes against the principles of bitcoin and what a HW should be?

It's a topic worthy of debate but they're not going to send anyone's seeds if they don't pay, at least in theory.


Seeing that the last thread in Important Announcements was: Reminder: do not keep your money in online accounts and that the previous ones were 4 years before that, I don't see the issue as important, but maybe theymos does.

I tend to agree with OP on this one, given how popular Ledger wallets are and how big this story is.  There might be people who aren't members of the forum doing google searches about this unholy debacle and who might find their way here for some good discussion about it--and guaranteed it'll be better than Reddit.

There have been a lot of important things that have happened in the world of bitcoin that don't warrant mention in the important announcements section, but man....I seriously think this ought to be one of them.  This whole situation is fucked, and I really should have listened to dkbit98 a long time ago.

For me it was more important the Ledger Database Leak, twice at least, and I don't see anything in that section although there is a thread about the MtGox database leak. At the end of the day this is a voluntary thing.

The link to the board is in the OP, and the topic you are referring to is at the very top -> Reminder: do not keep your money in online accounts

---

Ledger claims that it is exactly so, but my opinion (as well as many others) is that this company can no longer be trusted - because what they do is the complete opposite of what every hardware wallet represents, which is that seed can never leave the device in such a way that it can be sent electronically, regardless of whether it is a voluntary consent or the possibility that someone inside the company or some hacker can use it.

The risk definitely exists, even for those who decide to use this service, because regardless of the way to protect such sensitive information (seed), it is just an additional risk that is also paid $9.99 per month, and requires KYC. We can only guess what the possible implications are for those who will use the new firmware without this option, but I think that people should be warned about what is happening.

Thanks Lucius.

https://bt.irlbtc.com/view/5421039.0
I would suggest theymos to edit the Ledger part. We don't want anything that is highly skeptical to trust. Not after what is happening right now surrounding the update from these scammers. I feel like they betrayed us all. We have no idea what they have in those close source codes. They can not be trusted anymore.

Can we ever trust what people from Ledger say anymore?
Only a few months ago, they claimed something completely different.

I hadn't seen this before, and it makes me wondering: if Bob would get their hands on Alice's Ledger, would it be possible to upgrade the firmware and upload it online? I always thought the whole point of a hardware wallet is to make it impossible for private keys to touch the internet, but now it's starting to look like an expensive hot wallet.

I'm not going to rehash my statements from the main thread about this, as I've been pretty clear over there what a complete disaster this is and how Ledger have obviously been blatantly lying in the past. In my opinion no one should ever touch another Ledger device again.

However, why are we singling out this even for an important announcement? Why no important announcement about Trezor's unfixable seed extraction vulnerability? Why no important announcement about Trezor/Wasabi's government sanctioned surveillance and censorship? Why no important announcement about Coinomi sending seed phrases to Google servers? What about Block's hardware wallet which is specifically built on this exact idea of sending your seed phrase to a bunch of third parties? And if people are so concerned about the fact your private keys can be extracted from the secure element in Ledger wallets, then what about all the hardware wallets which don't even have a secure element in the first place? They are just as risky.

There are a plethora of critical vulnerabilities and horrible business decisions out there that we don't have announcements about. Why do we need an announcement about this one specifically?

They have partnered with Wasabi and implemented Wasabi's permissioned and censored coinjoins directly in to Trezor suite.

Unfortunately, they are both, there is no need to doubt that because their actions speak for themselves. Although it seems to me that there is something else, and that is the possibility that both companies that have positioned themselves as leading manufacturers of hardware devices suddenly make very strange decisions, possibly under someone's pressure. The US is waging its own battle against "cryptocurrencies", and it seems that the EU is not sitting idly by on this issue either.