Quote from: Lucius on Today at 10:00:54 AM

Quote from: NinjaMan35 on May 24, 2020, 10:32:22 PM

I'll read that later, but even if I personally had your drive. Unless I had whatever pass phrase is set up. I couldnt do anything with it. Unless I missed something, I would need your drive and the wallet / system its tied to, to steal your funds. But just the drive itself, last I knew, wasnt even close to enough.

Let’s take a hypothetical situation of someone coming into the physical possession of your hardware wallet, and that this wallet has some kind of vulnerability that can be exploited with the help of cheap equipment and little technical knowledge. This currently exists with Trezor models which are extremely vulnerable in case the user has not set up passphrase, the seed can be extracted within minutes. The conclusion is that all those who are not aware of this vulnerability and do nothing to insure themselves, have at least one additional risk when it comes to protecting their assets.

For now, Ledger is definitely at an advantage because there is no such vulnerability - if there was one, Trezor would surely make it public. But what some people don't like about Ledger is the fact that it's not open source, for which Ledger again gives somewhat logical reasons.

Every device has its weak points, it's only a matter of time before someone discovers them. What plays the biggest role in the case of hardware wallets are possible remote attacks, which have not been recorded so far (or at least no one has made it public).

Quote from: NinjaMan35 on Today at 09:42:24 AM

Broke down, bit the bullet and bought the Trezor Model T using some of the LTC I have.

Congratulations on your purchase, although it didn't seem to me that you would choose the most expensive option at the moment. Just a week ago you could get Nano S for some 30+ EUR, and Trezor T is 180 EUR now (VAT included).

Attacks aside. Short of someone stealing it from me / breaking into my home. As you or someone else pointed out. They'd have to know what their doing and have the right equipment. Would hope by the time i know it's missing I could xfer anything on it.

Not to sound like a smartass, but who wouldnt setup a passphrase? Even if it came as an after thought. Or maybe it's just that no one considers it. I'm not much of a techie in terms of things like this. But if it's an option of added security, I'm going to use it.

As for my purchase, it was sort of an impulse buy. But that being said. I do love the larger screen. They also seem to have better support I'd rsther have when needed than need it and have Apu from quickemart. Or better yet. Tech support from the show IT Crowd.

I could have gotten the model one. But something kept nagging at me to get the T.

But ya, $170 USD (149 EUR) wasn't easy but felt kind of right besides hurting while doing it lmao

Also, as for remote attacks. Unless I'm overly tired and not on the same page as you. That only seems feasible with the Nano X and its BT... unless your also considering how someone may leave the wallet connected to a computer even if its not actively being used (the wallet).

Anyway, going back to the trezor vulnerability. Might sound stupid, but even with a passphrase. Isnt that attack still feasible but just taking longer ?