Quote from: squatter on August 02, 2020, 10:56:16 PM

I'm also concerned about things like possibly insecure RNG for key generation and bugs at the software or firmware level. More than anything else, I'm worried about supply chain attacks.

The ideal for long term storage is a method that leverages open source software, general purpose hardware, and a source of entropy than can be verified.

I may once have believed that hardware wallets are impenetrable if used in accordance with all the rules, but over time I increasingly doubt that this is the case. Technology is advancing unstoppably, but not only for the manufacturers of such devices, but also for those who are trying in all possible ways to break their protection. Attack vectors that require physical contact with the device worry me less than some possible remote attacks that could in some way seriously compromise the security of the hardware wallets. Therefore, it is only right to always doubt everything and try to minimize the risk.

Quote from: bbc.reporter on Today at 04:13:22 AM

Are you telling everyone that breaking into home crimes on Ledger users will increase because of this hack? I reckon it might not be. They might have many Nigerian scam in their inbox, however hehehe.

I think I was pretty clear about that, but you're obviously going in the wrong direction all the time. 9500 Ledger customers are potentially compromised because their data has been stolen (not just email, but full/last name, physical address, mobile phone number). This opens up opportunities not only for physical attacks, but also for various other methods of social engineering that includes not only e-mail spam/phishing, but also all other methods that can be performed via a mobile number or physical address.

By the way, I don't think there's anything funny here - but if it entertains you, enjoy it.