Quote from: Pmalek on Today at 04:24:27 PM

Quote from: LoyceV on Today at 08:19:04 AM

You missed a step: the possibility should never have been built into the hardware.

Many believed it wasn't possible on a hardware level. Ledger claimed numerous times that extracting data from the chips can't be done. Turns out that the only thing preventing data extraction is the accompanying software that wasn't there in the past. Ledger has now created it and included it in their firmware.

What we now know is that key extraction is and has always been possible from secure element chips and the hardware built-into hardware wallets. The developers only needed to write the necessary code. Ledger was the the first company that did that (that we know of), and they introduced a new potential attack vector.

Exactly.

This is why I moved on to a different hardware wallet and workflow with the following features:

Open Source. Never trust closed source code.
Airgapped. Online hackers can't reach the device.
Stateless. The seed & wallet aren't saved on the device.
Encrypted Seed QR. Loading the seed is quick, easy, and safe.

It's actually faster and easier to use an encrypted seed QR to load a seed & wallet than it is to type a PIN to unlock a device that already has your seed.

By not having your seed on the device, there's no threat of a thief extracting your keys manually.

By having no internet connection to the device, there's no threat of internet hackers or malicious coders reaching the keys on the device. And yes, I do consider the possibility of Ledger's employees (or ex employees?) being malicious. Or their partner companies employees. Or their partner companies ex-employees? There's just too much potential for too many things to go wrong.

I think the combo of airgap/stateless/encrypted seed QR is a much safer way of keeping Bitcoin secure. And it's actually easier once you set it up.

Krux does all of this natively, on off the shelf K210 devices with touchscreens (the WonderMV K210 is currently the best device for Krux, and it can be found for less than $60). There's also an excellent SeedSigner fork that adds encrypted seed QR (and the encrypted QRs are compatible with Krux, which is a nice bonus).