Quote from: Pmalek on Today at 07:03:01 AM

Quote from: Lucius on May 26, 2023, 01:03:26 PM

Nothing happens by chance, everything is well thought out, and apart from profit, the point is to put as many users of this HW as possible in a position where they can be controlled. Of course, not everyone will accept the new service, some because of the price and KYC, others because they understand how absurd and dangerous it is, but let it not surprise anyone if Ledger turns that service into something mandatory in the future, because their "mothers" and maybe even 200 millions of users are super satisfied and they will ask the company to protect those of us who don't understand it.

Btw, who stores the KYC data?
Ledger, because it worked perfectly with other data in the past?

I checked for you, it's done via KYC provider Onfido. Make of that what you will.

Quote from: Pmalek on Today at 07:03:01 AM

Ledger + the two other companies for triple the risk?

Despite all the risks, I wouldn't say having your seed phrase sharded to three companies is higher risk than simply having Ledger "look after it" for you. Clearly there would be slightly less risk, as all three companies would need to be hacked. Not that I'm defending Ledger here, but just pointing out the reality as I think you're not looking at the most vulnerable angle. The real risk is that Ledger's servers are far from secure based on past hack as you pointed out, and therefore the sharded seed phrase going through Ledger servers in order to "safely" get to the other two companies is a massive risk.

All it would therefore take is to gain access to Ledger's servers (again) and bingo, you can intercept an encrypted seed phrase, even if sharded. They do claim the seed can only be decrypted with the same Ledger that created it, but I imagine with any Ledger there would be a simple workaround for this, such as spoofing the device's log number in order for the encrypted shard to think it's the same one.