Ledger: The new firmware of cryptocurrencies does not compromise user cid-frase-Bits Media

Ledger said, that the subscription to the Ledger Recovery service is voluntary, and the company is deprived of any remote control and update of devices.

The latest update of the Ledger Nano X hardware cryptocurler allows users to subscribe to the tool Ledger Recovery recovery, which makes it possible to restore the original phrase after passing the personality check.

"The update is not mandatory"

Ledger representatives assure Ledger, that the Ledger Recovery service divides the original phrase into three encrypted parts, Using
Shamir Secret Sharing, and sends these parts for storage to three third -party companies. Unification of parts and their decoding are possible only after, how the user confirms his personality on the Ledger device.

“Third -party companies do not have access to your initial phrase, it is not stored in the cloud, and the backup copies themselves are encrypted, Fragmented and deciphered only directly in your Ledger ", - Assume company representatives.

General Director Ledger Pascal Gauthier (Pascal Gauthier) Wrote on Twitter, that rumors about the creation of Backdor for attackers are unfounded. Update is not mandatory, The general director assured, and no one prohibits customers to stay on previous firmware versions, independently ensuring data storage.

“We do not control the Ledger devices and are not able to launch automatic updates. Only you can use the functions of the device, And no one else can introduce your pin code ", - wrote Pascal Gauthier.

Ledger clients were so scared by the news about updating the firmware, that they began to actively criticize the company on social networks and the opening scope for abuse. The most executed participants in the crypto community called on Ledger Nano owners to abandon the company's services and generally from using hardware cryptocurrencies, Since the innovation of Ledger can open a door for potential theft of personal data.

"Keys can get into an unsafe environment"

Perceiving soothing words from LEDGER representatives is not worth it, The founder of Bits.media Ivan Tikhonov is sure:

“We must wait for a technical description of the process for a complete understanding, But while I see three ways, which can be transmitted by SEED, And I don't like all of them.

From the Ledger device after updating the firmware. That is, previous assurances about that, that the key is stored in an element secur, And he cannot leave him - myth.

The user himself will introduce the phrase into the Ledger Life wallet, there it will be divided into parts and sent in an encrypted form. But in this case, the sid-fraz will be entered on the computer, That is, in an unsafe environment, What makes any meaning the use of an external hardware wallet.

The user himself will introduce the phrase on the website Ledger Recover, What is worse: The phrase will go entirely online via the Internet for subsequent breakdown, encryption and not important, What is really there. Because SEED has already left online.

The main idea of a hardware wallet implies, that the keys will never fall into an unsafe environment, that transactions go on a signature in a hardware wallet and returned to the computer as verified and signed, And the keys never leave the hardware wallet. Therefore, hardware wallets are often used as cold wallets for long -term storage of large sums. If the key can leave a hardware wallet, you can’t trust such a wallet, It will be no better than a regular program on a computer. So for the company, producing hardware wallets, The first option is the worst. In my understanding, Ledger will kill the whole meaning of its product for the sake of convenience of unskilled users or regulatory requirements. The second and third options at least imply, that the Ledger's hardware wallet can continue to use, If you do not apply the Ledger Recover service ".

In April, the American business magazine Fortune formed
Crypto rating 40, Where the companies entered, "Having the most significant impact on the crypto industry". The leader in the category of hardware wallet providers was called Ledger.