Ethereum

<div class="cryptonews">
 <p class="is-style-lead">A <a rel="noopener noreferrer nofollow" title="researcher" href="https://thebittimes.com/tag/researcher.html">researcher</a> revealed questionable practices by Ledger that raises important privacy concerns about the leading crypto wallet.</p>
 <p>In a recent X thread a cryptocurrency <a rel="noopener noreferrer nofollow" title="researcher" href="https://thebittimes.com/tag/researcher.html">researcher</a> unveiled practices by Ledger that raise concerns about privacy for Ledger Live users.</p>
 <p>The <a rel="noopener noreferrer nofollow" title="researcher" href="https://thebittimes.com/tag/researcher.html">researcher</a> particularly raised concerns regarding how Ledger Live manages user data and the limited options for offline use on Ledger hardware wallets.</p>
 <p>According to @rektbuildr’s findings, Ledger Live actively monitors users and gathers data, performing a device check whenever a Ledger device connects.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Ledger Live embeds the genuine check into the apps listing procedure. As it is, they always doxx your device when installing or updating apps and firmware. I removed most tracking in Lecce Libre, but they still track you regardless.<br><br>For the past couple days I'd been trying to… pic.twitter.com/Q1aF1qpjge</p>— REKTBuildr (@rektbuildr) December 27, 2023
   </blockquote>
  </div>
 </figure>
 <p>Ledger’s code, according to @rektbuildr, prevents users from operating the hardware wallets anonymously.</p>
 <p>The Paris-headquartered company is always aware of the device’s connection, making it impossible for users to disable remote <a rel="noopener noreferrer nofollow" title="track" href="https://thebittimes.com/tag/track.html">track</a>ing without disrupting functionality, the <a rel="noopener noreferrer nofollow" title="researcher" href="https://thebittimes.com/tag/researcher.html">researcher</a> adds.</p>
 <blockquote class="wp-block-quote">
  <p>“Which means Ledger knows it’s you every time you plug the device in. During that procedure it lists which apps are installed in your device, so they also know what you’re running on your HW [hardware].”</p>
  <p>@rektbuildr</p>
 </blockquote>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Ledger ex-staff phished in library compromise
 </div>
 <p>The code sleuth urged users not to update their Ledger firmware and expressed skepticism about the necessity of the upgrade and highlighting concerns about the company’s ability to read the secure enclave and even extract private keys.</p>
 <blockquote class="wp-block-quote">
  <p>“If they’re embedding device doxxing in simple things like apps listing code, what else are they doing? We now know their secure enclave is readable. They have a recover function which extracts private keys from the secure chip.”</p>
  <p>@rektbuildr</p>
 </blockquote>
 <p>This is not the first time @rektbuildr has exposed Ledger-related issues.</p>
 <p>In early December, he revealed that Ledger Live software tracks a big set of data including clicks, page visits, redirects, crypto transactions, page scrolls, account numbers, crypto asset names, and session durations. As of the time of writing, Ledger has not issued a public statement on the new revelations.</p>
 <p>In 2023, Ledger faced challenges as its customers reportedly suffered significant losses in Bitcoin (BTC) and Ethereum (ETH) due to a fraudulent version of the app, which sneaked into Microsoft’s App Store. Additionally, the wallet manufacturer received criticism for its recovery service, which offered users a means to regain access without requiring their secret seed phrase.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Ledger to launch controversial recovery service
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/crypto-dashboard-ledger-live-tracks-user-data-researcher-says-tbt74989.html">https://thebittimes.com/crypto-dashboard-ledger-live-tracks-user-data-researcher-says-tbt74989.html</a></p>

Crypto dashboard Ledger Live tracks user data, researcher says

TheBitTimes

Other articles published on Dec 28, 2023

Dogwifhat (WIF) Coming to Binance? New Solana Meme Coin on High Alert After This Post

XRP Detractor Switches To Buy Mode, What Changed?

Bitcoin (BTC) Fees Set New Highs in 2023, Here's Explanation Behind Surge

Gas Optimization Audit: Everything You Need To Know

DeFi Report 2023: Analyzing Trends, Insights, and New Peaks of Decentralized Finance

Coinbase insiders sold over $120m worth of COIN in December alone, data shows

Join our free newsletter for daily crypto updates!