Pascal

<p>Over the past two weeks, Ledger, a crypto security firm, found itself at the center of a major controversy. This controversy revolved around the new product called Ledger Recover. It is an optional update presented as a useful tool for recovering lost wallet keys. However, Ledger users were not pleased with this technical evolution. They suspected that the company was violating their fundamental right to privacy.</p><div class="thumbnail post-cover-image"><img src="https://www.cointribune.com/app/uploads/2023/05/ledger-1024x683.webp" srcset="https://www.cointribune.com/app/uploads/2023/05/ledger-1024x683.webp 1024w, https://www.cointribune.com/app/uploads/2023/05/ledger-300x200.webp 300w, https://www.cointribune.com/app/uploads/2023/05/ledger-768x512.webp 768w, https://www.cointribune.com/app/uploads/2023/05/ledger.webp 1200w" sizes="(max-width: 1024px) 100vw, 1024px" class="post-cover-image--img" alt="Ledger Recover"></div><div class="my-4"></div>



<h2 id="h-the-origins-of-the-ledger-recover-controversy">The origins of the Ledger Recover controversy</h2>



<p>It all started on Tuesday, May 16. On that day, Charles Guillemet, the CTO of <a href="https://www.cointribune.com/la-controverse-du-cold-wallet/" target="_blank" rel="noreferrer noopener">Ledger</a>, posted an update on his Twitter feed. In the update, he explained the ins and outs of Ledger Recover, the new product implemented by the company. The concept behind accessing this optional but chargeable service ($10 per month) is relatively simple.</p><div class="my-4"><div class="ads ">
    </div>
</div>



<p>Ledger wanted to allow its users to recover the keys to their Ledger wallets in case of loss. In a context where such an option simply isn’t available, this initiative is quite ambitious. However, the realization of this concept requires a Know Your Customer (KYC) identity verification process.</p>



<p>This verification procedure involves third-party companies, namely Tessi and FIDO Alliance. Each of these companies is responsible for conducting the KYC identification process, which includes access to users’ facial recognition and national identification cards.</p>



<p>Additionally, two other companies, Coincover and EscrowTech, along with Ledger itself, are involved in the process. Each of them will have a portion of the wallet key that may potentially be requested for recovery. This is done through three end-to-end encrypted channels, making the operation independent. Unexpectedly, <a href="https://www.cointribune.com/ledger-declenche-la-polemique/" target="_blank" rel="noreferrer noopener">Guillemet’s announcement of the project had a bombshell effect</a>. Users did not hesitate to express their criticism and concerns regarding an initiative considered risky in many ways.</p>



<h2 id="fierce-criticism-from-ledger-users">Fierce criticism from Ledger users</h2>



<p>Users quickly criticized the optional update for operationalizing Ledger Recover. They raised concerns about the privacy of user data, which is justified given the platform’s insufficient security measures.</p>



<p>For instance, in 2020, Ledger experienced a hacking attack that resulted in the <a href="https://www.cointribune.com/crypto-une-legislation-sur-la-confidentialite-simpose/" target="_blank" rel="noreferrer noopener">personal data</a> of thousands of users being exposed online. This highlights Ledger’s privacy vulnerabilities. This is also the second major concern of users that has sparked so much resistance.</p>



<p>Many fear that hackers might succeed in obtaining information that is supposed to be confidential. Moreover, a secret agreement detrimental to users’ interests cannot be ruled out. In many cases, users take a backseat when faced with significant issues, as is the case here. These technical concerns raise another legal concern regarding the transferability of user data to authorities.</p>



<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<div class="entry-content-asset"><div class="social-embed-container video-container"><iframe title="&#x1f632; Mon Avis Sur Le Fiasco Ledger (et Quelles Leçons en Tirer)" width="500" height="281" src="https://www.youtube.com/embed/dXA_aO2TXIE?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe></div></div>
</div></figure>



<h2 id="what-about-the-transferability-of-user-data-to-authorities">What about the transferability of user data to authorities?</h2>



<p>This is one of the most vehement criticisms directed at Ledger Recover. The remark is so relevant that it <a href="https://cointelegraph.com/news/crypto-community-reacts-to-ledger-wallet-s-secret-recovery-phrase-service" target="_blank" rel="noreferrer noopener">forced the company’s executives to respond</a>. That is precisely what Ledger’s CEO did a few days later, on Monday, May 22.</p>



<p>In a podcast, Pascal Gauthier, <a href="https://cointelegraph.com/news/ledger-sharded-wallet-keys-shared-if-subpoenaed" target="_blank" rel="noreferrer noopener">the CEO of Ledger, addressed the Ledger Recover controversy</a>. Unfortunately, he brought unsettling news for subscribers to this service. According to Gauthier, information regarding the wallet keys of users could potentially be shared with authorities.</p><div class="my-4"><div class="ads ">
    </div>
</div>



<p>However, he clarified that this possibility would only be considered in the event of a judicial procedure involving a subpoena. In cases deemed serious, such as terrorism-related crimes, the company would comply and share the information it possesses.</p>



<p>Gauthier emphasized that this possibility would not apply to all users. He stated, “<em>It’s not true that the average person is summoned to court every day.</em>”</p>



<h2 id="ledger-reassures-its-users">Ledger reassures Its users</h2>



<p>To mitigate concerns, Gauthier reminded users what subscribing to Ledger Recover entails. “<em>What you create, if you opt for Ledger Recover, is an encrypted backup divided into pieces. These fragments are completely useless unless the user restores the backup on a Ledger device, and only on a Ledger device, where multiple parties are required for decryption. If you don’t want to use Ledger Recover, nothing changes for you,</em>” explained the Ledger CEO.</p>



<p>Perhaps users are worrying unnecessarily? The Twitter user 0xFoobar doesn’t see it that way. For them, this Ledger update is simply a blatant violation of user privacy.</p>



<p>While several users, like 0xFoobar, view this innovation negatively, Ledger aims to reassure them. Pascal Gauthier took the opportunity to apologize for the “poor communication” from the company.</p>



<p>Furthermore, the CEO made an announcement. His company is committed to making a larger part of its codebase accessible to the public. This initiative aims to improve Ledger’s transparency and involve users more actively. It includes the core components of the Ledger Recover operating system.</p>



<p>In addition, Charles Guillemet, Ledger’s CTO, stated that a <a href="https://www.cointribune.com/quest-ce-quun-whitepaper/" target="_blank" rel="noreferrer noopener">whitepaper</a> on the Recover protocol will be published soon. Technical blog articles are also planned to “<em>explain the operational principles of Recover.</em>” The big question is whether all these planned initiatives will yield positive results. In any case, the issue of privacy and personal data preservation is a major concern. That is also one of the reasons why blockchain presents itself as a relevant alternative.</p>

Cryptos and privacy: The Ledger Recover scandal decoded

Table of Contents

Cointribune EN

Other articles published on Jun 1, 2023

Hackers hijack Orbiter Finance’s Discord to post fake airdrop

OKX Introduces BRC-30, to Bring in Staking Mechanism for BRC-20 or Bitcoin

Singapore’s MAS grants license to Crypto.com

Jimbos Protocol Turns To Law Enforcement As Hacker Ignores Bounty

Ex-SEC Chief Warns Crypto Influencers of Prosecution for Price Manipulation

7 Signs That Can Make Cardano Unstoppable

Join our free newsletter for daily crypto updates!