Kann die Passphrase das Hauptbuch speichern?

[root_s2yse8vt]

Up

0

Down

::

Ich möchte die Passphrase zur Diskussion stellen, weil ich noch niemanden gesehen habe, der darüber gesprochen hat. In einem hypothetischen Szenario, in dem ich mein Ledger weiterhin verwenden möchte, was wäre, wenn ich einfach eine Passphrase zu meiner Seed-Phrase hinzufüge, um das Problem der “Ledger-Wiederherstellung” zu beheben, so dass, selbst wenn es einen Exploit für diese neue Firmware-Funktion gibt, sie nicht in der Lage sein werden, Zugang zu erhalten, weil sie immer noch meine Passphrase benötigen würden, richtig? Dieser Fall wirft nun eine weitere Frage auf: Kann die Passphrase das Gerät verlassen, sobald sie erstellt wurde?

[BuriedInTheYard]

Up

0

Down

::

On the face of things, it might. However, you’re still left with trusting Ledger as we had to do before.

There’s nothing saying that when you type your passphrase in that it won’t transmit to a server, short of USB snooping (which if they encrypt it, you’d just get nonsense) but at least you’d know *something* was sent.

We’re just left with lots of “what ifs” and questions when things are left closed source. As I said before, that particular aspect I don’t blame Ledger for because of the NDA, but it’s something they have to deal with by choosing this approach.

[Xen7963]

Up

0

Down

::

It works if Ledger indeed only transmits seed phrases out not the private keys. Considering each blockchain app has its own private keys derived from same seed phrase, the most economical way is transmitting seed phrase. Make sure you don’t attach a pin to the passphrase.

[pringles_ledger]

Up

0

Down

::

Hi, Ledger Recover does not support passphrases (the 25th word). If you’re using a passphrase, you will need to restore your passphrase after going through the Recover process. Recover can neither access your seed phrase or your passphrase in any way.

The (firmware) update runs on the Secure Element. Downloading the latest OS update for your Nano X does not mean that your Secret Recovery Phrase can be extracted. Your security is paramount to Ledger and this will not change. This article explains more:
https://support.ledger.com/hc/en-us/articles/11022833583261?docs=true

[BusinessBreakfast3]

Up

0

Down

::

Yes. They confirmed it.

[Trudahamzik]

Up

0

Down

::

No it doesn’t. You should check out this interview with Keystone’s CEO. He gives a TL;DR on the entire situation: https://twitter.com/technologypoet/status/1659264602977316866?s=20

I’d advice moving over to an open source wallet like Keystone.

[Autor]

Beiträge