3 ms·

I have a feeling that MyEtherWallet could pull off the same thing. https://www.myetherwallet.com/ https://www.myetherwallet.com/

Torn 9y ago
Get a hardware wallet then -- the Ledger Nano S is great.
- xnzakg 9y ago
  There might (in theory) be some kind of backdoor on the device, that could allow the chrome app to send the private key or seed somewhere...
  - charlesdm 9y ago
    I think the idea is that the seed and associated private keys are stored securely on a secure element, and they cannot be transferred to your computer. Only a signed message that allows broadcasting of a signed message can. But I could be mistaken?
  - josephagoss 9y ago
    Is this just a technical possibility or is there evidence that this could be the case?
    - stef25 9y ago
      No evidence afaik. Plenty of scenarios involving unknowingly buying a "pre owned" wallet, hacked firmware updates etc ...
  - annabellish 9y ago
    You don't even need that, there's been a bunch of fraud in hardware wallets from people simply pre-setting the seed and shipping them with a "this is your seed, don't forget it" slip. Not everyone will use that seed, but some do, and then they lose their money. Basically, unless you're 100% vigilant literally all of the time, you're in trouble. This is just one reason why we invented banks, to centralize risk and mitigation.
  - sethgecko 9y ago
    The chrome app doesn't know the private key and the nano itself only runs signed code unless you imply that the Ledger Company itself planted the backdoor.
stef25 9y ago
I sincerely hope you're wrong. The only way to store ETH on a Trezor through integration with myetherwallet. Unless you're just referring to seed generation? https://blog.trezor.io/trezor-integration-with-myetherwallet-3e217a652e08 https://blog.trezor.io/trezor-integration-with-myetherwallet...
AlphaWeaver 9y ago
One of the differences is that my ether wallet actively discourages you from running the code off of their website. They insist that you clone it off of GitHub for security purposes. In addition myetherwallet has undergone several security audits.

Torn 9y ago

Get a hardware wallet then -- the Ledger Nano S is great.

xnzakg 9y ago
There might (in theory) be some kind of backdoor on the device, that could allow the chrome app to send the private key or seed somewhere...
- charlesdm 9y ago
  I think the idea is that the seed and associated private keys are stored securely on a secure element, and they cannot be transferred to your computer. Only a signed message that allows broadcasting of a signed message can. But I could be mistaken?
- josephagoss 9y ago
  Is this just a technical possibility or is there evidence that this could be the case?
  - stef25 9y ago
    No evidence afaik. Plenty of scenarios involving unknowingly buying a "pre owned" wallet, hacked firmware updates etc ...
- annabellish 9y ago
  You don't even need that, there's been a bunch of fraud in hardware wallets from people simply pre-setting the seed and shipping them with a "this is your seed, don't forget it" slip. Not everyone will use that seed, but some do, and then they lose their money. Basically, unless you're 100% vigilant literally all of the time, you're in trouble. This is just one reason why we invented banks, to centralize risk and mitigation.
- sethgecko 9y ago
  The chrome app doesn't know the private key and the nano itself only runs signed code unless you imply that the Ledger Company itself planted the backdoor.

stef25 9y ago

I sincerely hope you're wrong. The only way to store ETH on a Trezor through integration with myetherwallet. Unless you're just referring to seed generation? https://blog.trezor.io/trezor-integration-with-myetherwallet-3e217a652e08 https://blog.trezor.io/trezor-integration-with-myetherwallet...

AlphaWeaver 9y ago

One of the differences is that my ether wallet actively discourages you from running the code off of their website. They insist that you clone it off of GitHub for security purposes. In addition myetherwallet has undergone several security audits.