Quote from: ThatRandom8543 on December 06, 2019, 11:39:57 AM

Quote from: bitmover on December 06, 2019, 10:04:40 AM

Quote from: Ann1989 on December 06, 2019, 09:41:23 AM

Ledger is not completely open source. Trezor is.

You are right.
Every software should be open source, as it is much safer.
However trezor has vulnerabilities which ledger doesn't like this one

So everyone with a trezor device should use a strong passphrase to protect yourself against this vulnerability
https://cryptobit.media/en/news/other/1789/

Yea, but this is a physical attack and still need the right tools and skills to take advantage of it, so the likelihood of such an attack being taken place is close to 0, though if someone has access to the device, knowledgeable and know it would be worth it (and assuming that there isnt additional security measures in place), they could do it. I do agree that people should be using a additional passphrase with their hw wallet (or any wallet in that matter).

However, with ledger, with it being close source, we dont know of any vulnerabilities that may not be fixable (I suspect that their ledger blue has an security bug that cannot be fixed, though it could just be that they know that was really a failure product). Furthermore, with them relying on a third party security chip (secure element), that raises alot more question about how reliable such a third party may be, if there are unknown backdoors, etc.

It's not close to 0. Trezor has already been a victim of counterfeiting: https://cointelegraph.com/news/trezor-one-wallets-forgery-reveals-new-techniques-used-to-steal-crypto. I'm a strong advocate of open source, but in this case maybe it's not such a good idea to have everything out in the open, that even hackers can access.