Top all-time · #5066
Ledger
Company blog · ledger.frsecurityhardware
Ledger is the company blog at ledger.fr, writing about security and hardware. Since 2017, 15 different Hacker News readers have linked it 18 times, most often “Ledger Firmware 1.4: deep dive into security fixes”. No feed was found, so read it on the site itself.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
HN readers link Ledger's company blog for its responses to security research on its hardware wallets, such as the firmware 1.4 deep dive and a reply to the wallet.fail talk. Most links are cited as context.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Secure your crypto assets such as Bitcoin, Ethereum, XRP, Monero, and more. Give yourself peace of mind by knowing that your cryptocurrencies are safe
Most-linked posts?
- Ledger Firmware 1.4: deep dive into security fixes4 people · 5 mentions · first linked 2018-03-20
- Still Got Your Crypto: In Response to Wallet.fail’s Presentation4 people · 4 mentions · first linked 2018-12-28
What Hacker News says?
Ledger | Senior Software Engineer, Software Engineer, Embedded Application Engineer | Paris, France | ONSITE We build crypto-security solutions related to the blockchains with our unique technology: Blockchain Oriented Ledger OS (BOLOS). We provide this OS in 3 products: - Cold storage Hardware Wallet solution for BtoC: Ledger Nano S ( https://www.ledger.com/products/ledger-nano-s ) - Software and Hardware enterpris…
Comment linking /2018/10/10/engie-and-ledger-partner-to-develop-the-first-blockchain-hardware-securing-data-at-the-source-of-energy-production/
on “Ask HN: Who is hiring? (November 2018)”Submitted Still Got Your Crypto: In Response to Wallet.fail’s Presentation as a story · 49 points
HN discussionThe "Ledger Bounty Program Reward Agreement" appears to have a clause that may allow Ledger to prevent a researcher from publish their own report. >"You have complied and will continue to comply with the responsible disclosure process described in the Ledger Bounty Program which includes your agreement (a) not to disclose the security related bug to anyone without Ledger’s prior written consent," - [0] I'm not a law…
Comment linking /wp-content/uploads/2018/03/Ledger-Bounty-Program-Reward-Agreement.pdf
on “Breaking the Ledger Security Model”Submitted Chaos Communication Congress: In response to wallet.fail’s presentation as a story · 8 points
HN discussionOn the ledger blog: https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-secu... > We would like to congratulate the three security researchers who found these bounties. > Saleem Rashid – MCU fooling > We fully appreciate their contribution, and they certainly deserve their rewards. > We have asked each security researcher to sign our Ledger Bounty Program Reward Agreement, that you can review as part of our tran…
Comment linking /2018/03/20/firmware-1-4-deep-dive-security-fixes/
on “Breaking the Ledger Security Model”Submitted How to properly secure cryptocurrencies exchanges (2016) as a story · 2 points
HN discussionLedger's synchronized post[0] is a nice read. [0] https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-secu...
Comment linking /2018/03/20/firmware-1-4-deep-dive-security-fixes/
on “Breaking the Ledger Security Model”Submitted Ledger Goes Mobile – Ledger Live App Now Available for iOS and Android as a story · 1 points
HN discussionI just saw Ledger posted this. https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-secu... Sounds like it will check if it is compromised via the update.
Comment linking /2018/03/20/firmware-1-4-deep-dive-security-fixes/
on “Breaking the Ledger Security Model”Submitted Ledger releases new Nano S firmware update as a story · 1 points
HN discussionSeems like Ledger finally published a security advisory[0]. It also seems like they finally accepted OP's bug report as part of their bounty program. [0]: https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-secu...
Comment linking /2018/03/20/firmware-1-4-deep-dive-security-fixes/
on “Breaking the Ledger Security Model”Submitted Ledger Nano X and Bluetooth – Security Model of a Wireless Hardware Wallet as a story · 1 points
HN discussionResponse from Ledger : https://www.ledger.fr/2018/12/28/chaos-communication-congres... nothing critical
Comment linking /2018/12/28/chaos-communication-congress-in-response-to-wallet-fails-presentation/
on “Hacking the most popular cryptocurrency hardware wallets [video]”Submitted Ledger Firmware 1.4: deep dive into security fixes as a story · 1 points
HN discussionLedger has for a long time been grossly inept in security, there's really nothing absurd about this attack at all. In the Bitcoin industry we frequently see very detailed setup for long timeframe attacks and substantial effort going into identity theft and physical compromise. Worse, for these deices in particular a backdoored device is almost undetectable due to the way ECDSA can be used to transmit encrypted data…
Comment linking /2018/08/03/important-message-concerning-the-ledger-wallet-ethereum-chrome-app/
on “Still Got Your Crypto: In Response to Wallet.fail’s Presentation”Submitted New firmware update 1.4.1 available for the Nano S as a story · 1 points
HN discussionI didn't watch the 35c3 presentation, but it certainly looks like it's an absurd attack. Kudos to Ledger people for constructively replying to it. Some talks in 35c3, defcon, etc remind me of the rubber hose security ( https://xkcd.com/538/ ). On the other hand, www.ledger.fr web site does not properly redirect to HTTPS (e.g http://www.ledger.fr/bounty-program/ ) and that would've been a more practical one.
Comment linking /bounty-program/
on “Still Got Your Crypto: In Response to Wallet.fail’s Presentation”https://www.ledger.fr/2018/12/28/chaos-communication-congres...
Comment linking /2018/12/28/chaos-communication-congress-in-response-to-wallet-fails-presentation/
on “Ledger Nano X – A Bluetooth-enabled secure device that stores private keys”