Ledger may be centralized, but there is no proof of

Don't wanna defend ledger here, but "ledger connect kit" is a Javascript library that implements a button allowing users to connect their Ledger device to third party DApps (wallet-connected Web sites). Whereas the video I showed above shows someone who breaches into Trezor's hardware

0

5 месяцев назад

Hel

Prytaneis
Don't wanna defend ledger here, but "ledger connec...

In the CVSS scoring scheme, Network attack is way way way more critical than Physical attacks (where you need a physical access of the device/machine) Thus, being a library allowing an attacker to drain funds remotely is indeed critical more critical than drain funds while having physical access on the machine Also what matters when it comes to security is, how many vulnerability were detected (the more does NOT mean its worst, and a lack of found vulnerability in a product is concerning) but more importantly how many were mitigated. Trezor being Open-Source means more eyes looking at the code for vulnerability, and generally researchers do that to mitigate them. You have to trust ledger, but you can verify trezor and in crypto, don't trust, verify, hence why we have blockchain tech

0

5 месяцев назад

Prytaneis Автор вопроса

Hel
In the CVSS scoring scheme, Network attack is way ...

Yeah, you are right on that

0

5 месяцев назад