Wie sicher ist der Ledger mit injiziertem web3?

[root_s2yse8vt]

Up

0

Down

::

Ich verband meine Ledger zu Meta-Maske und es hatte sofort alle meine Adressen in Meta-Maske aufgeführt, die ich nicht wusste, Scannen der Ledger würde metamask alle meine Brieftaschen sagen, aber meine Frage ist mein Seed verlassen meine Ledger?

Wenn ich Remix IDE benutze, um einen Smart Contract zu implementieren, was passiert dann?

Wie kann der Ledger den Seed sicher verwenden, ohne dass er abgefangen wird?

Ich bin nicht sehr vertraut damit, wie es genau funktioniert, ich denke, der Seed verlässt den Ledger nie, aber ich bin mir nicht 100% sicher.

Auch gibt es überhaupt irgendwelche Schwachstellen bei der Verwendung eines Ledgers oder ist es im Grunde narrensicher, solange ich meinen Seed nicht herausgebe

[Spades223]

Up

0

Down

::

Also just tried launching a smart contract, is blind signing safe or is it a vulnerability?

[AndyBonaseraSux]

Up

0

Down

::

There are no known cases of a ledger device being hacked. All cases where users lose funds are either a result of them sharing their recovery phrase, PIN or signing a malicious transaction.

The ETH app allows your device to derive public keys from your private key without exposing your private key to the internet. Through the ETH app, your MetaMask is given a list of the addresses that can be derived from your recovery phrase, but it’s impossible for attackers to work there way back up to your seed.

Deploying contracts I have no idea, just verify transactions on your device screen and don’t sign anything that looks wrong.

If you’re deploying contracts but don’t understand the basics behind signing transactions, you may wanna read a bit. Not tryna be a sick, just sayin.

[FewMagazine938]

Up

0

Down

::

Anyone know if there is a cold wallet that does not need a PC to work? android compatible.

[Vittorio792]

Up

0

Down

::

At the moment you can update the driver only using a PC ad far as I understand it

[Tabea_Ledger]

Up

0

Down

::

Hello,

Yes, your keys and seed phrase can’t leave the device. You can learn more about it here [https://www.ledger.com/academy/not-your-keys-not-your-coins-why-it-matters](https://www.ledger.com/academy/not-your-keys-not-your-coins-why-it-matters)
And here you can learn how Ledger devices keep your private keys safe with the secure element [https://www.ledger.com/academy/security/the-secure-element-whistanding-security-attacks/](https://www.ledger.com/academy/security/the-secure-element-whistanding-security-attacks/)

If you have blind signing enabled you can encounter risks because you don’t know what you are signing on your device. [Here](https://www.ledger.com/academy/enable-blind-signing-why-when-and-how-to-stay-safe) you can read more about it

[Autor]

Beiträge