5 ms·
Makes sense, they've been emailing me 4 times per week. Clearly to get rid of old stock. Didn't even have the decency to delete my email from their spam list a
by psychphysic 4y ago
Makes sense, they've been emailing me 4 times per week. Clearly to get rid of old stock.
Didn't even have the decency to delete my email from their spam list after hackers got my name address, phone number and that I have a ledger.
No matter how much I unsubscribe from their mailing list.
- influxmoment 4y agoYep there are better wallets Passport is my recommended bitcoin wallet
- lxgr 4y agoWhy would you recommend that? It seems to expose private keys to non-secure hardware, if I'm reading the FAQ right.
- influxmoment 4y agoLink? The private key stays on the secure element
- lxgr 4y agoFrom https://docs.foundationdevices.com/en/faqs https://docs.foundationdevices.com/en/faqs: > Like Coldcard, the Bitcoin private keys are encrypted on the processor and stored on the secure element And from https://coldcard.com/docs/faq https://coldcard.com/docs/faq: > The ATECC608 is a fixed-function device for private key storage. [...] To be able to read the secrets (ie. wallet seed) out of the secure element [...] Finally, you can apparently just display it in the "advanced" menu: https://coldcard.com/docs/advanced https://coldcard.com/docs/advanced So it seems to me like the secure element limits PIN attempts, but when successfully enter it, the keys are indeed exposed to the main processor.
- influxmoment 4y agoExporting the key with the advanced menu is not a normal use for the signing device. It's an optional advanced feature
- lxgr 4y agoWhat prevents an attacker from using it?
- influxmoment 4y agoThe pin for the secure element storage from their info
- skazazes 4y agoIt's my experience that having had any crypto-adjacent accounts associated with my main email over the last decade has caused the single largest increase in email spam of anything I have ever done. I used to engage in the industry (in the mid to late 2010's when most trading was done through centralized exchanges) and it seems a few of the old platforms have leaked/lost/sold their email databases. I get ~2-3 emails daily now that I assume are all scams saying various things along the lines of "You have n free XYZ token waiting to be collected!" and "Ensure you update your ledger for the latest security patches! Here is a link to it! Please ignore that its not to an official ledger domain!" A lot of the spam seems to be either proxied through insecure wordpress comment plugins or simply signing my email up for accounts on random websites and somehow injecting their phishing attempts into the account confirmation emails. They come from all sorts of domains, most of which having nothing to do with crytpo, and nearly all of the messages are embedded in some sort of broken HTML email body. Although I no longer follow or have much interest in the industry, I am hesitant to outright blacklist crypto terms. Has anyone come up with a good solution to combating crypto email spam?
- hanniabu 4y ago> Has anyone come up with a good solution to combating crypto email spam? Yeah, stop using centralized services
- deleted 4y ago[deleted]