Replying to Avatar dr.fred

every opensource wallet can push a malicious code on your device with an update which steals your mnemonics and your funds.

how long does it take before anyone will notice? when the funds are gone.

you have to ask these questions:

how long are these manufacturers on the market?

where do they come from? in some countries you have impunity for fraud, in the usa it could come from a cia company

how many hacks did they have?

how can you verify the hardware components of your device?

i trust the french/singapore ledger. if they do anything illegal, they go to jail.

they never had a hack in 8 years, never had a backdoor in 8 years. the ledger nano s is even too small for the new service. you do not even have to update the device. i am not worried about anything other than the deteriorating purchasing power of btc.
Avatar
JoySun 2y ago

Thoughts on this comment, everybody?

nostr:nevent1qqsd4lkkp4v599kzukr5da5wy23cfpv3x6jldzzqu9n7ftgdv4lh4ngpp4mhxue69uhkummn9ekx7mqzyzlyjpz5wnvzxjkm6wxl7eamhxhz5mgxj6lcp8jya8x392kqaf33sqcyqqqqqqgr2wf7a

Reply to this note

Please Login to reply.

Discussion

Avatar
πŸ₯©β„π•–π•Ÿπ•–π•˜π•’π••π•– ₿𝕦π•₯π•”π•™π•–π•£βš‘ 2y ago

This shows a misunderstanding of cold storage.

Some people have some very interesting opinions.

A cold storage device should not be getting any new software pushed to it, ever, or it isn't cold storage.

Avatar
dr.fred 2y ago

all wallets, does not matter if hardware or software, need to be updated

because they get attacked all the time

new attacks on all angles, new angles

if not updated, they will rot and become less secure over time

Avatar
OriginalSize 2y ago

It's good to be vigilant. I wouldn't have autoupdate for any wallet apps.

Being connected to the social sphere around all this stuff is still important. You want to know when attacks or vulnerabilities are discovered so you can decide on updating in an informed manner.

To sum up, update yourself before you update your software.