Kompromittiertes Ledger Live

[root_s2yse8vt]

Up

0

Down

::

Hallo sachkundige Leute,

In einem unwahrscheinlichen Szenario, dass Ledger Live kompromittiert ist, kann eine böswillige Ledger Live-App die Seed-Phrase aus dem Ledger-Gerät extrahieren oder anderweitig Zugriff auf die privaten Schlüssel erhalten? Oder gibt es einen Mechanismus, der verhindert, dass das Ledger-Gerät private Schlüssel/Seed-Informationen weitergibt, selbst wenn die Anfrage von der Ledger-Live-App kommt?

​

edit: Ich antworte nicht auf DMs, also sparen Sie sich etwas Zeit.

[jvsephii]

Up

0

Down

::

> *“Can a malicious ledger live app extract the seed phrase from the ledger device, or otherwise get access to the private keys?“*

Simply put, No.

Further reading: https://www.ledger.com/academy/security/the-secure-element-whistanding-security-attacks

[Rannasha]

Up

0

Down

::

The seed or associated private keys can’t be extracted from the device. That’s the entire point of the device.

A compromised Ledger Live could modify transactions you’re trying to create, sending coins to the attacker rather than to the intended recipient. But you still have to confirm the transaction on the device. Carefully verifying the address of the recipient is necessary to prevent this.

[SafeMoonJeff]

Up

0

Down

::

Not possible , private key or seed are not store or access by ledger app but physically on the ledger itself

[EliasChew1999]

Up

0

Down

::

On a related note, is it possible someone can hack into your device via Bluetooth to get your private keys?

[Autor]

Beiträge