Warum verlangt Ledger Live, dass der Nano angeschlossen wird, um Geld zu erhalten?

[root_s2yse8vt]

Up

0

Down

::

Warum ist es notwendig, dass der Nano angeschlossen ist, nur um Geld zu erhalten? Inwiefern wird die Sicherheit erhöht, wenn der Nano physisch eingesteckt ist oder nicht, wenn man einfach einen öffentlichen Schlüssel erhält und ihn zum Empfang von Geldern verwendet?

​

Mit anderen Worten: Welches Risiko besteht beim Empfang von Geldern, ohne den Nano anzuschließen? Ist es möglich, dass Ledger Liver einen falschen öffentlichen Schlüssel erstellt und damit riskiert, dass Ihre Transaktion verloren geht?

​

Ich verstehe nicht, warum es notwendig oder vorteilhaft sein soll, dass der Nano eingesteckt ist, nur um Geld zu erhalten?

[Rannasha]

Up

0

Down

::

First of all, you never need the device to be connected to receive funds. Transactions take place on the blockchain and they don’t care at all whether a hardware wallet is connected somewhere.

What I’m assuming is going on is that Ledger Live is asking to connect the device when you generate a new receiving address. In principle, you don’t need the device for that. Ledger Live stores the so-called „extended public key“ (xpub) which is roughly equivalent to a master public key from which you can generate new addresses.

With the xpub, you can generate a new address without needing to use the seed (which is used to generate the associated private keys). So the xpub is not a security critical piece of data and can therefore be stored on a computer or phone without worries.

However, when Ledger Live presents you with a newly generated address, how do you know that this address was indeed generated from your xpub and isn’t instead an address belonging to an attacker who has managed to compromise Ledger Live or your computer?

That’s where the hardware wallet comes in. Ledger Live wants you to connect the device so that the device can generate an address at the same time that Ledger Live generates one. You can then check the address shown on the display of your device and confirm that it matches what Ledger Live is showing you. This tells you that the address was derived from your seed and not inserted by a compromised piece of software.

This verification step is important, but it’s not strictly necessary. If you trust that your Ledger Live installation and your computer are not compromised, you could skip it. The last time I generated a receiving address in Ledger Live (which is a while ago, admittedly), the software allowed you to simply skip the verification step and just use the address shown on your computer as is.

[Darkman5696]

Up

0

Down

::

It doesn’t need to be plugged in to receive funds at all, that’s just to verify your address.

[Canuckchill]

Up

0

Down

::

It doesn’t have to be plugged in to receive funds, when you hit that prompt it gives you an option bottom right to proceed without connecting.

They just want you to connect it and verify the address bc it’s possible that a wrong address may be given. This has been a common theft vector outside of ledger live, malware on a person’s computer will modify a copied address in the clipboard and paste the thieves address instead.

[AmeerAftab]

Up

0

Down

::

You don’t need it to be plugged in to receive the funds. Sounds like a scam or a hacked version of Ledger Live. Can u share the screenshot of what the prompt looks like?

[Linvkz]

Up

0

Down

::

It ask you to plug it to verify the address but you can skip it by pushing the option to continue anyway.

It is for safety reasons, ledger live could be displaying a wrong address if the install is comprised so is better to allways check the address in the ledger screen

[hashgraph9]

Up

0

Down

::

the way ledger live did that is rather confusing first time. it’s just a user interface for you to verify receiving address before you do the actual sending. it has nothing to do with the actual receiving. let’s say you have already saved your ledger address on an exchange, and you have tested a send before. you can send again without every opening your ledger live.

in short, it’s just to help the user verify that they have the right address when they do the send.

[Foreign_Jackfruit_70]

Up

0

Down

::

It doesn’t need to be. Just press „Continue without my Ledger“. You only NEED it to be plugged in to sign an outgoing transaction.

[whiskeytangosunshine]

Up

0

Down

::

Nano works differently than other cryptos when it comes to receiving deposits. Deposits to Nano addresses must publish a deposit broadcast in order to complete the transaction.

This means that a) the transaction time stamp is the time that your wallet was opened and scanned the network and b) if your ledger wallet is locked (or not connected) it will not broadcast this deposit transaction and you will not receive your funds.

[United-Oil6950]

Up

0

Down

::

The last time I generated a receiving address in Ledger Live (which is a while ago, admittedly), the software allowed you to simply skip the verification step and just use the address shown on your computer as is.

[account4cryptopostin]

Up

0

Down

::

It’s not a good interface. It’s not surprising people get confused.

[Autor]

Beiträge