LedgerWallet - Nano S - Does not Work

[Montoya]

45 minutes ago, Max Entropy said:

You folks are not developers... you won't get it... please carry on, nothing to see here.

--

This is Mike Novogratz speaking about Joe Lubin of Ethereum... and the Ethereum Eco-system... and why Bitcoin Core developers exist and can work for free in their Eco-system.

Time is tight for Ripple... 

 

The Herd is Coming... Mike Novogratz

 

 

 

Dude, get over yourself. 

[aye-epp]

7 minutes ago, Max Entropy said:

@Sharkey

I have no interest in being motherly... I expect companies and individuals to do their jobs.

I have no interest in belabouring issues here in a public forum, but as open source has yielded open responses, and these companies are clearly failing to function as if. we paid money for their products. I expect the products to work. I am not naive. All software has bugs, but I expect developers to be attentive to fixing reported problems... and not expect designers to design 'quick and dirty' implementations which lack common sense security features,

I have stated each of my issues clearly.

It is up to you, to deal with it.

:-)

3

while I agree that there's a gaping hole when it comes to supporting XRP storage, however, the product isn't for consumers.  Why would they need a wallet to hold XRP whose primary use is for institutional transfers?

[Sharkey]

12 minutes ago, Max Entropy said:

I have no interest in being motherly...

 

Works for me!  

 

[Guest]

@Max Entropy, thanks for posting your concerns.  While I am not a developer, I understand what your concerns are.  It will be interesting to see if anyone from Ripple responds. 

However, it is my understanding Ripple cannot provide an official wallet due to the FinCEN order.

I am not sure if you have read the following (very long) story, but it is about a man who lost his PIN to his Trezor.  He was able to successfully hack the device (with the help of a white hacker) to recover his Bitcoin.  Trezor has since fixed the vulnerability.

https://www.wired.com/story/i-forgot-my-pin-an-epic-tale-of-losing-dollar30000-in-bitcoin/

Quote

The 24 seed words I’d written on an orange piece of paper in December and lost in March had risen from the cryptographic confines of the bulletproof Trezor and were now gently glowing on the screen of my computer. I could stop here if I wanted. Those 24 words were the only thing I needed to recover my 7.4 bitcoins. I could just reinitialize the Trezor and enter the words back into it and I would be done. But there was one more thing I needed to do, and it was even more important than the money. I wanted to force the ******* Trezor to cough up my PIN.

Following Saleem’s instructions, I copied a string of text from the terminal window and added it to a Linux command Saleem had supplied. The PIN appeared instantly.

Months of soul-crushing anxiety fell away like big clods of mud that had been clinging to my shoulders. I stood up, raised my arms, and began laughing. I’d conquered the Trezor with its nerdishly cruel PIN delay function, and one-upped the part of my brain that thought it could keep a secret from its owner. **** the both of you, I thought. I won.

 

Edited November 20, 2017 by Guest

[Edm22]

10 minutes ago, aye-epp said:

while I agree that there's a gaping hole when it comes to supporting XRP storage, however, the product isn't for consumers.  Why would they need a wallet to hold XRP whose primary use is for institutional transfers?

Not sure if this is on point, as I am quite new to this space but there have been a handful of instances where an individual's XRP wallet was hacked and all of their XRP stolen....through phishing sites etc... This one of the reasons I invested in the ledger blue, which has worked beautifully.

 

[Edm22]

2 hours ago, Sharkey said:

Same, but I can't say that I fully grasp the specific concerns raised above by @Max Entropy.  

I was also under the impression that it would be difficult for a third party to hack the physical device without having access to it,.  Is that incorrect?   

Also, I don't quite understand why @Max Entropy believes that "Like the BitGo software, the Ledger Wallet software sucks," or, for that matter, what is bad about BitGo.  I thought that BitGo was used primarily by large corporate customers. 

 

.....Not sure we're meant to

[Edm22]

1 hour ago, Max Entropy said:

You folks are not developers... you won't get it... please carry on, nothing to see here.

...I can appreciate your concerns at the level of your understanding, but please in future post the stuff "we won't get" somewhere else unless you're willing to provide detailed explanation and some potential solutions. 

[Hodlezerper]

1 hour ago, Edm22 said:

Not sure if this is on point, as I am quite new to this space but there have been a handful of instances where an individual's XRP wallet was hacked and all of their XRP stolen....through phishing sites etc... This one of the reasons I invested in the ledger blue, which has worked beautifully.

 

I've been around for a few months and the only times I've ever seen people legitimately lose their coins is when they get successfully phished. 

Recently someone mentioned their Ledger sent all their XRP to their exchange while it was locked in a safe. No way to verify any of that so I can't speak to the authenticity of the claim. 

I am not a developer either and so can't necessarily refute anything anyone is saying from a technical standpoint. I think that paying attention to negative reviews regarding wallets is important. So far I don't think Ledger has had any major issues, but hey, I'm not the expert. 

I cannot imagine that there aren't some other companies out there working on developing other wallets. Seems to be too much money to be made right now. But, who knows. 

 

[Guest]

@Sebastian Hi...

You are exactly correct... Ripple can not... and therefore they are in a difficult spot. But it is one of their making.

I continue to hold them accountable until there are competing products on the Ripple Network.

--

There are a lot of things that Ripple could do, that I would value. Please let me belabour this point:

1. If the developers of Ledger Wallet can not provider better Quality Assurance than this... then the conclusion is that WE should not be buying their products. It sounds to me like there are 'kids' developing products and do not have the experience with 'bugs in the field'. I can not state clearly enough... that this should have been caught really early on in testing... and if it did get to the field, as reported in the Ledger Wallet thread on Reddit... then Ledger Wallet should have fixed it immediately. I have looked at the Ledger Wallet on Github and it appears that 'they' do not take feedback but rather simply Close Issues... and make the problem report go away. Additionally, there are not enough problem reports to appear real. I think there are eight (8) only, if this is the case, then no one was thinking about the product... hence no issues... out of sight, out of mind.
2. The fact, that they changed their security model... is the biggest issue for me. I say this because, if they had a Chrome security model, there must have been a good reason for it. They, Ledger Wallet, people used their Chrome Security model for all cryptos EXCEPT Ripple... why?? I would bet they were incentivized to get the 'product' out early. Hence, the change to the security model. Windows is not known for its security. These are rather technical issues which I mostly understand, but do not have the hands on skills with debugging/reverse engineering tools to crack. But there are lots of guys in foreign countries who do, which is why I worry most about the security model issue.
3. The lack of signing the executable/installer is just silly. I do not understand this. Maybe they outsourced the installer to another company.

--

Friends have been bothering me, this evening, about what to do... re: this issue. I am thinking the following un-popular thoughts:

• I do not trust the competency of the Ledger Wallet company, after this.
• I do not know anything about Trezor, but they have a silly small device.
• I like the KeepKey but they (and I have inquired) are not working on a Ripple version for the near future.
• I do trust the competency of Eric Voorhees, so if I were Ripple et al, then I would cause ShapeShift to implement Ripple support in KeepKey.
• Further, whoever is the product development company or a significant recipient/client of Ripple... they should formally contract 3-5 hackers/developers at a reasonable salary to find and report design and runtime issues on the say, the KeepKey device. They would be further rewarded for stuff found. I would want the people to compete amongst each other. They would know that they were competing with others, and they would not know who the others were. There would be a reasonable NDA. One would need to avoid collusion. I think this is the only way to get a product that is well tested... and trustworthy.

Edited November 20, 2017 by Guest

[Guest]

Hi @Edm22

Not being difficult, but this is the only site that Ripple pays attention too.

This is a Ripple problem.

:-)

[Edm22]

4 minutes ago, Max Entropy said:

Hi @Edm22

Not being difficult, but this is the only site that Ripple pays attention too.

This is a Ripple problem.

:-)

Completely undertsood...just frustrating as the potential for large increases in XRP value also increase one's nervousness around issues stated. 

[Guest]

This is the situation that Ripple placed itself in...

The following is a URL to five (5) pages of unhappy Ledger Wallet - Ripple users... citing precisely what I have stated in my posts. Five (5) pages is about 100 posts. Notice that neither Ripple nor Ledger Wallet people have done anything about this.

Missing in Action 

https://www.reddit.com/r/ledgerwallet/search?q=ripple&restrict_sr=on&sort=relevance&t=all&count=75&after=t3_73glwe

--

This is the reference to the Ledger Wallet - Ripple repository. Notice, that Ledger people dismissively 'Close' the problem report about connecting to Nano S.

https://github.com/LedgerHQ/ledger-wallet-ripple/issues?q=is%3Aissue+is%3Aclosed

 

Edited November 20, 2017 by Guest

[Montoya]

Why don't you actually do something about it then? If you are as brilliant and talented as you like to think then it shouldn't be a problem. 

[PaulKim]

@Max EntropySo are you saying there is no good hardware wallets for XRP in your opinion?

What kind of solution do you personally use for your personally owned XRP?

Edited November 20, 2017 by PaulKim

[Guest]

@PaulKim Hi..

I was an early adopter of Ripple... I used the Ripple Trade system. I use those addresses and I use Kraken. I also like Quoine/Qryptos because they are in Japan/Singapore where crypto is accepted by the government and hence there will be adequate funding for the difficult work in maintaining secure systems.