Quote from: The Sceptical Chymist on Today at 08:19:11 AM

Quote from: Learn Bitcoin on Today at 07:10:05 AM

Many have a bad impression of Ledger since the last changes. But it's not mandatory anyway.

If you're referring to the firmware update that allowed the Recover "option" to work, it doesn't matter if you sign up for it or not; Ledger admitted they can pinch your private keys out of the secure element at any time, which they had previously said wasn't possible (and someone please correct me if I've got any of that wrong, but what I wrote is my understanding of what Ledger did and how it works).

Did they admit that? If so, how can this be seen as a secured wallet? If I am not wrong, Ledger claims, "Here at Ledger we strongly believe in open source. It's one of our core values, a great philosophy that advocates openness, and verifiability. Open source allows developers and security experts to review the code and ensure it is secure and not malicious. Open source means you don't need to trust" ^[1]

If they are open source, can't developers verify that the Ledger has a chance to steal users' private keys? Did nobody try it? Now, I am curious about it. Do you remember the recent hack of Atomic Wallet, where thousands of users reported that their wallet was hacked and they did not use any phishing? If users did not use phishing, how was their wallet hacked? These wallets are not non-custodial anymore.