[PSA] If you use Bitcoin on a Ledger device, you need to update

themarkymark in #hive-167922 • 2 years ago

If you use a Ledger device with Bitcoin, you are going to want to update your device immediately. A vulnerablity has been discovered that allows you to spend Bitcoin without signing the transaction due to a bug in the included miniscript software.

The bug was discovered back in April and patched in an update released yesterday.

This is the update you are looking for, it is a software app upgrade and not a firmware upgrade.

The update is really quick and you want to be running version 2.1.2 of the Bitcoin app.

This vulnerability is limited to Ledger devices and no known flaws currently exist on the Trezor device.

I recommend doing this update immediately rather than waiting for the next time you use the device and potentially forget.

You can read more about this vulnerability by checking out the full disclosure here.

_{Image Sources: 1}

Posted Using LeoFinance Alpha

#leofinance #bitcoin #hive-engine #ledger #ctp #neoxian #vyb #pob #palnet

2 years ago in #hive-167922 by themarkymark

46.69 VYB

Sort:

Trending

[-]

deeanndmathews 2 years ago

Thanks for the heads up.

0.00 VYB

[-]

sommylove 2 years ago

You really made me loss so much which is very bad from My both post it unfair that two posts which is supposed to be at 5 dollar is now at 0.5 something please desist from My Blog I Beg you 🙏🙏, your reasons for the downvote is best known to you but it's really affecting my blog I generally it's really uncalled for.
Every penny I make has its use am trying to manage it downvoting adds no value to you and I don't see reasons you keeps doing it to to hivers in the general Blockchain like yourself.
Please allow me use my little Earnings Thanks 🙏

0.00 VYB

5 votes

[-]

crypticat 2 years ago

You made me get up to go grab my hardwallet but sadly I don't have any bitcoin to protect :(

0.00 VYB

[-]

harhess 2 years ago

@themarkymark
Thanks for sharing
I see a high risk exposing vulnerable on device.i got zero Bitcoin for now
Lolzzzz

0.00 VYB

[-]

nickydee 2 years ago

Eh... I was anticipating another Rick Roll. 😔

But thanks for the info.

0.00 VYB

[-]

fijimermaid 2 years ago

Thank you @themarkymark :)

0.00 VYB

[-]

manniman 2 years ago

ay... Self Custody they said, safu they said. That thing is literally one job, ONE JOB.

0.09 VYB

1 vote

[-]

themarkymark 2 years ago

All software has bugs you just don’t know it yet. It is how they are handled.

0.15 VYB

13 votes

[-]

invest4free 2 years ago

That! 👆

0.02 VYB

7 votes

[-]

redditposh 2 years ago

https://reddit.com/r/cybersecurity/comments/13f8kc5/psa_if_you_use_bitcoin_on_a_ledger_device_you/
_{The rewards earned on this comment will go directly to the people sharing the post on Reddit as long as they are registered with @poshtoken. Sign up at https://hiveposh.com.}

0.00 VYB

2 votes

[-]

pocketrocket 2 years ago

only btc on ledger is vulnerable? eth is safe?

0.00 VYB

[-]

themarkymark 2 years ago

Yes only specific to BTC.

0.00 VYB

4 votes

[-]

pocketrocket 2 years ago

thanks, good to know!

0.00 VYB

[-]

poshthreads 2 years ago

https://leofinance.io/threads/view/alokkumar121/re-leothreads-wl7ysgfe
https://leofinance.io/threads/view/thetimetravelerz/re-leothreads-pukhhelt
_{The rewards earned on this comment will go directly to the people ( alokkumar121, thetimetravelerz ) sharing the post on LeoThreads,LikeTu,dBuzz.}

0.00 VYB

2 votes

[-]

woelfchen 2 years ago

that allows you to spend Bitcoin without signing the transaction due to a bug in the included miniscript software

lol

0.00 VYB

[-]

krabgat 2 years ago

Thank you for the notice. It is really important to be aware of these things, as we regard cold wallets to be the safest form of storage. I am very glad that I stumbled upon your blog.

0.01 VYB

1 vote

[-]

justinparke 2 years ago

Please stop downvoting my posts just because an account you dislike upvoted them. My family is working class, and every dollar we make we need. Your ego downvote war just has seen me lose thousands of dollars in potential wars. I wish you would explain to my daughters how your whale wars cause us to lose gas money used to take our kids to school.

This blockchain represents real life pretty well, trickle down economics to the fullest. And if I downvoted this post there would be hell to pay and repercussions I can't even imagine. Seems like an imbalance of power, you downvote my content without reason other than you simply dislike the account that upvoted me. I am tired of explaining to ASEAN Hivers that you don't downvote their posts because the quality is poor, but merely because you have a voting war with another rich person.

This has left a bad taste in the mouths of many of my community members, and because you don't even explain the reason, your actions drive many people away from this blockchain. I wish you and your xeldal war would just stay out of ASEAN Hive and keep your politics far away from us.

You could at least take the time to make a post explaining your actions to those living in developing countries who need every penny they can earn on Hive.

0.00 VYB

3 votes

[-]

unit102 2 years ago

People should be required to write at least 1000 words why they feel the need to down vote.

0.00 VYB

[-]

bcarolan639 2 years ago

They can which is why you need to just make sure you create new accounts unfortunatly they dont bother to really care as long as they make money off mosty ppl otherwise they could not accumulate the money they have think about it works just like the real economy if there are ppl making money ppl are losing money. For larger accounts there must be people that are kept small. Just figure out howthey work and put in a system to avoid the bs but dont break the basic rules obv like copying ppls articles but self voting ther are constructive ways to do so and if you buy hp you should be able to do this no matter what ppls opinions are.

0.00 VYB

[-]

humdingerpaul 2 years ago

Honestly,I do not understand until I just read your comment,been overthinking lately on what could have possibly gone wrong with my posts or account getting downvoted by this account,chatted his account,made several complains and I've lost alot on the little votes I get,infact I'm starting to feel people would have marked my account and not want to vote my post because what's the point if it will get downvoted,I'm just tired,this is really cyber bully,thanks for this comment,at least I know i haven't done anything wrong

0.00 VYB

5 votes