4 ms·
There might (in theory) be some kind of backdoor on the device, that could allow the chrome app to send the private key or seed somewhere...
by xnzakg 9y ago
There might (in theory) be some kind of backdoor on the device, that could allow the chrome app to send the private key or seed somewhere...
- charlesdm 9y agoI think the idea is that the seed and associated private keys are stored securely on a secure element, and they cannot be transferred to your computer. Only a signed message that allows broadcasting of a signed message can. But I could be mistaken?
- josephagoss 9y agoIs this just a technical possibility or is there evidence that this could be the case?
- stef25 9y agoNo evidence afaik. Plenty of scenarios involving unknowingly buying a "pre owned" wallet, hacked firmware updates etc ...
- annabellish 9y agoYou don't even need that, there's been a bunch of fraud in hardware wallets from people simply pre-setting the seed and shipping them with a "this is your seed, don't forget it" slip. Not everyone will use that seed, but some do, and then they lose their money. Basically, unless you're 100% vigilant literally all of the time, you're in trouble. This is just one reason why we invented banks, to centralize risk and mitigation.
- sethgecko 9y agoThe chrome app doesn't know the private key and the nano itself only runs signed code unless you imply that the Ledger Company itself planted the backdoor.