Quote from: abercrombie on October 16, 2017, 03:42:14 PM

Quote from: Dr Bloggood on October 16, 2017, 03:18:43 PM

A bit off topic: I'm on the fence whether to buy a Trezor or a Ledger S. I know they are both good. BUT:

1. I recently heard that Trezor had some security vulnerability exposed (with its recovery seed, I believe). What happened there, and is this a danger for the future?

2. Once my device arrives, I want to test the recovery seed (pretend I lost my device, and use the recovery seed to recover my wallet). As I understand, if I do this with the Ledger, the seed and thus my device will be worthless afterwards; whereas with the Trezor this is possible without problems. Correct?

Any hints of knowledgeable people would make me a happy hodler!

I'm partial to Ledger, since I've had the Ledger HW.1, Nano original, and now Nano S.

Trezor patched it in the latest firmware. Physical access to the Trezor is required for that vulnerability.

As for testing Ledger or Trezor seeds, download these Bip39 files from Github. Disconnect Internet and load in an incognito/private browsing session. I like to boot offline to a Ubuntu trial CD, load up the HTML file, then plug in your seed to make sure the same destination addresses are produced. Even the optional passphrase works. Don't do this if you don't trust your computer.

Or, a more secure way is just to erase your hardware wallet, and start from scratch restoring the previous seed (takes a long time with spelling via button pushes).

Great, thank you!!

I would choose the second, more secure option, for my peace of mind. I knew you could do that on Trezor, but thought it wasn't possible with the Ledger.