A review and teardown of the Ledger Nano S crypto currency hardware wallet. Installation, setup, and transferring bitcoin cash, ethereum, and ripple.
And a comparison with the Trezor, which one is better?
Buy them here:
https://kit.com/EEVblog/crypto-hardware
Secure chip: http://www.st.com/content/ccc/resource/technical/document/data_brief/ac/ed/36/cb/1c/04/43/a8/DM00240763.pdf/files/DM00240763.pdf/jcr:content/translations/en.DM00240763.pdf
Verify your Ledger Nano S hardware here:
https://ledger.zendesk.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-
Forum: http://www.eevblog.com/forum/blog/eevblog-1048-ledger-nano-s-crypto-hardware-wallet/'>http://www.eevblog.com/forum/blog/eevblog-1048-ledger-nano-s-crypto-hardware-wallet/
EEVblog Main Web Site: http://www.eevblog.com
The 2nd EEVblog Channel: http://www.youtube.com/EEVblog2
Support the EEVblog through Patreon!
http://www.patreon.com/eevblog
Donate With Bitcoin & Other Crypto Currencies!
https://www.eevblog.com/crypto-currency/
EEVblog Amazon Store (Dave gets a cut):
http://astore.amazon.com/eevblogstore-20
T-Shirts: http://teespring.com/stores/eevblog
๐Ÿ’— Likecoin โ€“ Coins for Likes: https://likecoin.pro/ @eevblog/dil9/hcq3

Hi, we're gonna take a look at the Legend Nos cryptocurrency. Hardware What Click I don't know here somewhere or at the end of the video if you want to see the trees or tear down and I kind of do a bit of a comparison with the trees or now this is actually a cheaper solution. The Legend Nos for hardware wallet, then the trees or the trees ores about a hundred and seventy Australian dollars. The Legend Nos is about a hundred and nineteen Australian dollars.

It's about a hundred and five us versus like seventy US or something like that. Uh, but prices vary greatly on these things and by the way, you should only buy these things from the official suppliers. Don't buy it from someone hung low, shop on eBay that's for sure. But anyway, let's take a look at this.

the look and feel of this thing. This is the first time I've actually had it. It's a not short type of plastic that is. Is it some sort of Delrin I'm not sure but I expected this one to feel a bit better because the trees or one of the main complaints I had about it is that it was quite flimsy.

Um, yes, that's not normally there. I've actually dremeled open this case and then I've used my soldiering iron to close it. It still works a treat so it's fine. but yeah, it's just it's just flimsy.

It's not like I want like a proper I don't know a like a diecast or machined alloy case or something like that. but yeah, the ledger. No nowhere so it doesn't feel any better. I'm not a fan of these flippy things some people are anyway.

they've both got the Micro USB and they're on them. So that's one of my fears is that you know if I plug this in and out too much I use it too much I'm gonna wear and tear on the micro USB socket there. Anyway, We've got two buttons on the side, a little OLED screen presumably on there. It's some smaller than the Traceur.

the Traceur is already hard enough to read that thing. anyway. I'm hardware cryptocurrency wallet. so these are the places that you want to store your coins.

be they bitcoins or alt coins. You want to store them on a hardware wallet because it's the most secure location possible. The advantage of a hardware wallet is that when you actually set it up and you generate your seed key, your private seed key which we'll see here. Let's actually do a little bit of an unboxing tada and we get the requisite USB cables and whatnot.

And let's see if a few little lanyards. Whoopee-doo Let's open this welcome and we should have a recovery card sheet. Did you notice there is no anti tampering sticker on this box? Yes, I did there it was I wrapped. It was like shrink wrapped, but there was no security sticker.

Why? Because this one actually has a separate secure chip inside there that does a check. Some sort of checksum presumably to check the integrity of the ledger devices internal software each time it's powered on. So that's an advantage of the legend NOS over the tresor. That, but the tresor is completely open-source hardware and software.
So not only can you make your own version of this, if you're ultra paranoid, you can actually get the schematics and your light in the PCB files. You can get your own manufactured, all the firmware. everything is open-source This one is not. I don't believe there's a schematic for this at all, and it's some of it is open-source The applications and the interface are open-source but they do not release the firmware as open source and one of the reasons for that is that the cryptographic chip.

It uses a chip solution. There's a regular micro in here just like that res or and. but it uses a separate cryptographic chip which has hardware, various hardware protections built into the die to stop. You know, reverse engineering penetration and things like that.

But yes, the cryptographic chip in here is actually you can't buy it. Yeah, and you can't get the datasheet for it's an under NDA and non-disclosure agreement. That's what white res or specifically didn't use. What are those chips is because they wanted this to be completely open-source And it is.

so anyone can come along and check the integrity of this. The legend: Nos: Not so much so For the ultra paranoid out there, the Traceur is a better bet. but hate like there's nothing wrong for Legend Nos. Let me tell you so.

Anyway, the advantage of a hardware wallet like the is that not only are you in physical possession of it, the keys stored in there. When you set this up, you're setting up the seed key which is everything. Let's have a look in the back here. we should get a sheet to store it.

Yep, there it is to store our 24 word recovery phrase on here. And anyone who has these lists of 24 words they're not just random characters are actually words I'll show you in a minute. they don't need your hardware wallet, you keep it in your wallet and somebody steals your wallet like your physical actual wallet that you put in your pants then or down your darks if you're super paranoid with one of those RFID shields in it. Anyway, I've done a video on that.

um, which I might link in at the end of this tinfoil hat people. So anyone who acts has access to these keys which will write down doesn't need this at all to steal your coins. They can just recover it anywhere. So actually keeping this secure with your keywords on is more important than keeping this secure.

You can lose either of these and if they don't have your pin code or password to get in, then they're screwed, right? But if they get access to this recovery seed, they can can just recover that too. And Eve another hardware device will recover it to a software wallet. That, in the case of both the ledger and the traceur, there's 24 words here. So any wallet, software or hardware that supports the Bip 39 protocol bit 39/40 4 can use this recovery seed and you can get your coins back.
So don't fear if one of these fails. A lot of people ask, well what happens if I lose my hardware wallet or it breaks or the connector breaks or whatever like that will no big deal. As long as you've got this, you can recover. So the advantage of these Hardware bowlers is that the seed is actually generated on this physical hardware itself, which can't be intercepted by the USB.

It doesn't travel over the USB so if your computer's infected with spyware or malware or whatever where possible, it cannot read the seed out of this while you're setting. So unless someone is physically looking over your shoulder at these keywords when you install it or they've got a copy of this somehow, then it's completely secure. The problem with setting up a wallet, a software wallet on your phone, or your PC is that you can have spyware malware on there. Which Don't visit those porn sites kiddies.

I'm telling you, they'll steal your crypto currency see that from you quicker than you can set the thing up. I Suspect or they'll steal it now and hack you later. Anyway, you don't know that your PC or your phone is secure when it could have a screen grabber in there. It could have a key tracker or whatever and it can log the seeds.

So yeah, you don't want that. That's the advantage of the hardware wallet. You can physically set it up completely isolated from the outside world. Beauty So anyway, it doesn't feel as great as I suspect it is.

that can I pop the back off. there is that ultrasonically welded. I Know no. I might try and get my knife in there anyway.

we will do a teardown of this thing. but yeah, it's just not as bulky and secure. Give it a bit of a twist. test there.

I can twist. There's a bit of twisting that not as much as the tress or the tress. Or you know, if you put it in your back pocket, you could really get in trouble. In fact, if you sat on it could squash the damn thing anyway.

Maybe it's a bit more robust and trees or a little bit. but I Expected more robustness inside like a hardware wallet. I would happily pay for a premium version of any of these where I could actually you know, like get a more physically robust out unit and I'm thinking about designing my own version of the Tresor because it is open-source hardware into a more robust version. but they've got the new Model T coming out very shortly.

I have our pre-ordered one. It's a bit more expensive than this one, so hopefully I'll do a video on that soon. So anyway, let's configure the device. We've got to go to the website, don't All we do is plug it in and I'm sure it'll tell us what we need to do and write down our recovery phase cuz that's the first step to setting up your hardware, wallet or right for you ultra tinfoil hat people.

I'm not gonna hook it up the computer I'm gonna power from an external battery pack. But as I said, you don't have to do this because the recovery seed is going to generate here does not ever travel over. The USB is generated internally and displayed internally anyway. Oh jeez, that's a tiny tiny little pissant screen, Isn't it? Welcome! Jeez.
I Can my old eyes I Can barely read that welcome? Press both buttons to begin. Jeez, this is like, really, if you haven't got great eyesight, these things are terrible. Use left/right buttons to change values and interact and navigate through multiple first-choice lists. Yeah, great.

Okay. Configure our new device. It'll gives you different options to ever configure a new device to recover an existing device I believe or whatever. So anyway, we're setting up the new device.

Choose a pin code so you can actually go up and down and this one actually allows you to enter a pin code of zero which the throughs or doesn't do by the way so he can do that and then just press both buttons and then that's put it in so it's going to ask us to confirm our pin code. It's a little bit tedious, but yeah, you've got to do it. So you can have at minimum a four-digit pin code. I've put in a 6 digit pinko, but you can have up to 8 as well.

That's very nice phrase. Here we go. This is the most important part because if you get this: if you write this down wrong and you lose your hardware wallet, you are screwed. You've lost your coins.

That's it all over. Red Rover Word Number One Bunker I've got a bunker? Cool. Um, so you just write these down on your sheet here. make sure you get it right.

The reason that they use words is that if you like random, digits are harder to write down properly. but words are much easier. So even if you misspelled it on here, you kind of can. you know you're not completely screwed.

You can, you know, get the word correct when you re-enter it. But this is the point where you don't want anyone to look over your shoulder. I Really love Yuri Panda Anyway, you can scroll back and forth at will for as long as you walk through. All these are key words, so that's great.

But as I said, this is really quite hard to see if you don't You know, if you've got a GI cider or other eye issues then you know it's It's not easy. Okay, we're done, confirm our recovery phrase right. So it's put up the words and then you have to take your list that you just got down and actually you have match the word that matches that select word on here. So it's a bit tedious to set these things, things things up and time-consuming but well worth it.

We didn't ask me to do all 24 of them, it just did like half a dozen. Nice selection there and your device is now ready. We are set up so we now have our recovery phrase which we go put in our safe-deposit box somewhere or you know, buried in the backyard I Don't know whatever you want to do with it, don't lose that bit of paper and we're in like Flynn and here we go. Now we have to hook it up to the computer II thing and do our stuff so out of the box it only supports Bitcoin and a theory and by the looks of it the down.
Go to the website, install the apps and we've got some settings on here. Let's go in here. We can do display brightness rotate if you want or invert colors. Whoop-dee-doo security.

We can auto lock it. We can change our PIN number, We can shuffle our pin number well We can set a an additional passphrase as well. that's like a two level protection. The Traceur has this one as well.

And for the ultra paranoid, you want both a PIN number and a passphrase as well and you can set up multiple. Well, what's with inside there? So someone's got a gun to your head and saying give me your password for your wallet. Then you can given the pin code and they can access like a small amount and then you can have a bigger amount hidden away inside. So yeah, he gets people.

Robin You have to know that and the device for those playing along at home. Firmware: 1.31 or that's the secure element. So that's the secure chip processor on the here. The and the MCU is the microcontroller.

You know that's just the STM micro I believe it uses inside this thing. Version 1.1 Okay, let's give it a go. Let's actually physically plug this baby in and we've got to enter our pin code there. The different versions of the ledger they all work are very similar so don't worry about that.

So all we have to do now is basically install the various apps. Now a one. Very different difference between the ledger and the triggers Traceur is that you have to basically the pin code on this. You have to dick around actually entering it with the buttons on here.

I Much prefer the way the Trees or does it where it actually pops up with a randomized keypad on the screen so that even if you have a key logger software or screen grabber software you know malware installed on your machine, It doesn't know the sequence of key codes which is defined inside here. but then you can use your mouse and your PC they actually access that. It's just better than around with those buttons. Entered my pin code and we're in like Flynn and Windows 10 which I'm using here has just said it.

It only took like five seconds. It automatically installed the drivers and it's all set up. Hunky-dory ready to go. Didn't have to download anything Beauty So we definitely want to have a Bitcoin wallet support.

so let's click on the install like add to Chrome Okay, whatever Ledger Wallet. So do we have to add a plug-in for each individual coin, old coin, and Bitcoin that we want to support. I Traceur, in this case, is much easier because you install one Chrome app or whatever browser you're using I'm sure it works on other browsers I Just happen to use Chrome and that's it. You get one app which supports everything.
Although the Traceur has a limited coin support, the ledger actually supports more coins, but you have to set up each one differently. Geez, Add up. Okay, Launch App Ledger Wallet Bitcoin To begin, connect and unlock your ledger wallet. Done! Looks like I've got to actually select use wallet To view accounts.

Okay, I didn't have to I Don't think I had to reconnect. There you go. Which coin do you want to use? Bitcoin Remember my choice So Bitcoin Cash, Legacy or seg wit ha See I Won't go into the differences between segregated Witness which is all part of the blockchain and how its split and I like it complicated. Anyway, we'll go with the new cigarette format.

no workers and your wallet is synchronizing. This may take a few minutes. I'll come back. Actually, that didn't take long at all and only a few more seconds and we're in like Flynn There we go, we have our account.

We have nothing in it of course because it's a brand new one, but we can just send poins directly in so we can receive it. Bingo! There's our Bitcoin address. If you want to send me bitcoins I don't know I might damage this in the teardown. Ah, so don't send them to that address.

By the way, I Do accept Bitcoin and many different old coin donations LinkedIn down below on my website. Thank you very much to everyone who donates and I have no doubts it will accept our Bitcoin Not a problem. Let's try the others four and I'm really finding it tedious to enter the pin code on this I've said that multiple times. But and as for this Bitcoin cash option here, this is a bit confusing if you want to if you had a previous account, you want to claim your cash coins and that's sort of stuff.

or you can use your split may not split. it's not. you know if you're a beginner. not entirely obvious.

I've already got the separate ones. so I want to choose the split option to transact using a dedicated account so it's synchronizing. This might take a few minutes. bla bla bla bla bla Anyway, that's not obvious if you're a beginner I want it to just go in there.

The true source much better in this particular case. So there we go. I'm gonna like send myself some Bitcoin cash. Yay! I have my first Bitcoin cash stored on here I've got point zero zero one Bitcoin cash.

that's a minimum I could transfer. In fact I transferred point double owed to Bitcoin caches and the fee was 0.01 So I received point double O one Bitcoin cache. current value is three dollars seventy three. So there you go.

try and hack it and get my Bitcoin cache. Go for it. Um, and that took a minute and 51 seconds to error for those playing along at home for me to transfer that from another exchange that I had to this. So there you go.

It works. We got settings, we can go in here and we can take the hardware whether or not got an update and stuff like that. And we've got coins required confirmations to why spend it and things like that hi of fast confirmation but that will cost you more coins to actually confirm for the you know to get a faster transaction it costs you more. or if you want to spend and get the minimum amount of fees, you can just go slow.
If you wanted to take a day or whatever how long it takes, our Bitcoin is a pretty notoriously slow Bitcoin Caches are faster and Ripple is faster again. so we can actually do that. We can actually go back in here and we can set up our Ripple wallet because I'm into Ripple Larger weapon like I Don't like around having to download all these things. but I guess you only do it once, but it's not.

It's not terrific. the Treszura's are better. easier to use. Solution: I Think especially if you're entering in.

The pin code is much less sticky and it's sort of all integrated, but the trays or supports a larger number of old coins. Take your pick. Now this is interesting. It looks like it's a neck see there for the Ripple wallet, so that's not terrific.

I Want to just I Thought it was just another Chrome app. Nope, it's an X II So there you go. We've got to actually install and XE create a desktop shortcut. but like the Traceur in that it just worked from the you know, the Chrome web app and then that was it.

Ledger, Wallet Ripple Here it is. to begin: I've got to unlock the damn thing again. The Etherium are one so we'll give that a bill. I'll tell you what I'm clicking on this thing and I ain't doing jack so I I don't know I've opened it up here.

use your wallet to view account. so I've got my you know I've chosen the Etherium one on here and it's just quit app. Maybe y'all like I'll try it again. Okay, I just repowered it and re-entered my tedious pin code and we're in.

So I'm switch the power off and on again when in doubt. Um, yeah, I don't I don't know the true Sora's always worked every time for me, this one's kind of not. Maybe it will from now on. but yeah, not a good first impression.

Anyway, we can receive some either. I Send myself some beauty. all right and if we have a look down here, there's not much advanced mode. There you go.

Let's go when contract data. if we receive, we can never receive the the hex code or the Iban codes and by email print, there's not much else doing there. Release: Gas Limit Gas Price I Won't go into details of gas. um, but my ether hasn't come through yet.

It's probably lost in the ether. And for those playing along at home that took three, three and a half minutes. Basically, the transfer the ether over a transferred point one ether. That was the minimum I can transfer from my other exchange and it cost me one milliliter.

Jeez, Richard To be fair, the Tresor actually doesn't have native support for our ether for storing Aoife in the with the Tresor itself, it actually teams up with my ether wallet and I haven't used it for that and I think that's that's a downside to the Tresor. The Tresor is great for Bitcoin in the other couple that it supports natively but ethers not one of them. So you got to team up with the software wallet but allows you access to it and it's a multi-step process and it so the ledgers probably nicer solution if you're going to be storing some ether. Tell you what though, it would have been nice if Adam it just like got an exchange value from somewhere and told you what the rough price.
You know the rough worth if your ether is like it did for the Bitcoin one. um Bitcoin cash one. but yeah it doesn't do it. that would have been nice.

AHA RTFM Read the freaking manual and I found out why it doesn't run the ripple A Because I haven't stored the ripple application on here. Obviously it should give you like a ripple option. So I've got to go into the lead manager and I've got to actually download the application to the legend device. Don't worry because this is yeah.

you can install or run the apps on the main processor, but your seed and everything is secure inside that secure hardware chip inside here, so don't worry. There's no vulnerability in there and all the apps are open-source so hey, anyone can go in there and check the validity of the whole thing. No worries. So now I've got to get and download the Manager app.

It's just much more around, but hey, it supports a lot more old coins than the treasurer does. There we go, that's better acted to the legend Nos at the moment and it's got. We can go to the firmware, no items to display anyway. applications we can download.

Here's what we support: Big Point: Bitcoin Cash - Dogecoin, Aetherium, Fido UTF Komodo Litecoin Strutters Ed Cash hello Rip. All there we go. We want to download that and a whole bunch of old coins which the Treasurer does not support. They're thinking about adding support for various ones, but it takes time.

You can actually pay these companies to, actually including Traceur and others to add support for your coin. You know it costs like fifty thousand hundred thousand dollars or something. One of the hardware wallets charges to actually add support. So if you're developing a new coin because there's a thousand coins, more than a thousand or something, and if you've developed one, then you can actually pay these hardware wallets if you got the money.

Had the developers of the hardware wallets to add support for your coin. Well, it's open source isn't that? Presumably you can develop your own open source app, but they will write it for you anyway. We are going to download a ripple and for security it is asking me to confirm processing it's installing Hey Done! That was quick I should now have access to Yes I have Ripple. Hey to begin connect your ledger wallet, it's already connected like if entered.

It's again I've got to disconnect the thing and replug it I might even have to like restart the app I don't like it once again, turn the power off and on again and we're in like Flynn I'm still waiting for my ripple, but if we send it then the fears are: very low point double O1 ripple. that's not a lot less than what my other exchange charged me. That's for sure like a many orders of magnitude less. but come on.
seems to be a low frequency ripple. Hey, we're in and that took two minutes. just over two minutes and we've got it over to 25 was the minimum riffle I could send and I got point in charge point one five ripple, you know got ripped. So what I don't like about this ledger is that I compared to the Tresor is that yeah? I've got all these different apps to run to access my different old coins and that might be okay but I kind of into even though chose or doesn't support many I can actually swap between a Bitcoin Bitcoin cache and the other ones with inside just the one web-based you know extension web extension on Chrome and it just works really well and it gives me a little graph of how many like the amount of you know coins that have been trading over time and stuff like that I Don't you know this one has like it looks like it has a history but it doesn't give you like graphs or anything like that.

So the traceur is a nicer interface and then if we want to send it some Bitcoin cash for example so let's send that. Okay let's go here we go preparing transaction. let's send some bitcoins here we go and it says the amount. Now here's the problem which I have with the ledger is that it gives you the amount that the Flicka see is actually the just the camera frame update rate.

It doesn't give you the full address so that's not good whereas the Traceur will give you the full address because it has the bigger screen on there and you can make sure every digit is correct. So technically speaking, you could exploit that with a man-in-the-middle what's called a man-in-the-middle attack. I Won't explain that, but it's it's possible in theory anyway. like it's highly unlikely, but because it doesn't display the confirm the full address on here, it could potentially be spoofed.

and yeah, it's just an exploit, but it's just a technical thing. It's not a huge deal, but yeah, technically that is possible. So I'm going to confirm my amount and confirm that and confirm the address and fees I've got to confirm the fees confirm transaction There we go. use wallet to view access send in failed wha-wha-wha Why an error occurred? It's not a great first experience is it? Don't know why, just tried it again, failed again I don't know what do I don't know, don't have enough Bitcoin cash to pay for it or what what's going on and I was just about to send some ripple back, but I just remembered you've got to actually seed it with exactly with a minimum of 20 ripple for the first transaction and I don't I'm a pauper I've only got four point eight for ripple, don't Now this is weird I just put in another 50 ripple in send another 50 ripple over.
Took a couple of minutes and sure enough but she's now showing up as 7470 balance. It was actually showing up a zero for like 30 seconds there. I don't like I Starting to panic like my ripple and disappeared and be like where is the transaction like like it hasn't last operations as shown up there. but my balance is that's the that's the first one I transferred, not the second one.

So like will it make a fool out of me now if I refresh it I Don't get it Anyway, let's send some ripple send. Confirmed Transaction: Unexpected error occurred I Confirm transaction unexpected I give up I give up. Really? I'm having problems sending Bitcoin cash and ripple like what the hell? No, it hold on to your hats. It is like it confirmed with the address up here eventually.

but it kept saying error. Now it says that the transactions been processed. so I'm not getting good vibes out of this thing like it just seems buggy. Not not the least bit impressed by it.

Really? No. I just got unexpected error. Again, this just this is hopeless and here it is wearing like Flynn This is far too easy a hardware. While it should not be this easy to get into now I Know this has been a bit pedantic on my part, but I want two things from a hardware wallet a I want it to be physically robust so that it can survive I know that if you lose it, then you can cover from the passphrase, but you know that's like a last resort sort of thing.

I want it to be robust and I want it so that people can't physically access the thing and potentially do Hardware side-channel attacks or whatever it is on this thing to extract your seed key from it Like you know. Let's just be ultra paranoid and say that you know you carrying one of these through the airport or something and they go, oh, you've got a hardware wallet. Let's we're going to inspect that and they take it from here. they take it into another room.

What are they gonna do to it? You just don't know. And in this case, it's just got a clip-on plastic case. I Just got my knife in the side and book. It pops straight off so anyone could physically take this apart and access the hardware in here.

Access the pins, directly, probe them, do whatever, without and without you knowing that they've even opened the thing and like, geez, put some potting in here. In fact, if you've got one of these, um, I would probably just open it up and fill it up with some potting compound a to make it more robust and B to make its more physically secure. Anyway, I Know it's been very pedantic because these things, especially the Leger here is very secure. So what have we got inside here? Well, we've got an STI micro.

It's a 32 Fo for 2k and there's no external clock on here, so it's running from an internal clock which is different to the Treszura's You see in the tear down of that it's actually got an external clock and that's technically marginally more secure with the using the internal clock because then you can't do a tax like Hardware Attacks that hacking attacks that try and use the clock, slow it down and glitch the clock and do all sorts of things like that. Now this is what makes the Ledger so good. This is the St 31 H3 26th. Unlike the Traceur, which is just stored inside a regular arm microcontroller and you're just relying on they're not very good security inside a physical hardware security inside now a micro.
These chips are specifically designed in the industry to be really secure devices and they're certified and rated by various you know, certification agencies for security and that type of stuff they're used in type inside all types of our secure products and they'll physically even though you can't get a datasheet for this because it's under a nondisclosure agreement, You might be able to maybe find some patterns on it or something like that, but it's probably got like a mesh physically covering the dye in there and other various physical protection to stop you actually probing device status and device. So even if you were able to dissolve away the chip itself with some acid, this one actually looks, you know, is it is it ceramic? Yeah, I Don't know. Anyway, it's not your regular plastic package by the looks of it. but yeah, even if you were able to dissolve that away, then you can't physically get in there and probe the dikes.

They probably got some mesh protection or other physical Hardware protection inside the chip itself. And that's what makes the ledger technically secure more secure than the Traceur is because it uses that device. So there you go up here. We've got another St part.

This is actually a Sta Tar double-o and this is actually a boost converter. A boost voltage converter. So why they need a boost voltage converter in there? I'm not sure. Do they need it for the chip or for the display? perhaps? Oh Strange.

And for those who are curious, there's the bottom of the board. There's no components on there, it's just a double sided board. and there is the display now. I Could actually get like the scope in there and try and you know, do some powerline monitoring to see if there's data coming out and stuff like that.

But really I'm like this is one like one of the industry's best secure chips and there's like like there's no way I'm gonna be doing like being going to be able to hack this thing. so so for those people so just give it a try, hook it up. Well no I don't have the expertise to hack secure crypto chips and stuff like this, nor do I have the time to even try. So I'd really be wasting my time with you know, trying to do that and many other people have tried I'm sure that are experts in the field anyway.
yeah, my only complaint is that it's like God they couldn't even glue this on. They couldn't even glue it on Lila yeah let alone like or ultrasonic world it or anything like it'll at least the Treszura's like glued together and you have to pretty much Dremel the case open so that somewhat you physically know if someone's tried to access your hardware in there. Which is more important for that because like this chip is pretty down secure. so I guess it's just like a small argument.

but if somebody ever did find an exploit for this and they didn't and it wasn't publicly knowing and they could physically get access to your hardware, then well, you know they could technically get in there and get your data. but we're entering ultra paranoid territory. I Mean they have to a physically get this device and be. and really, it's much easier just to go to your bedside drawer and try and find your recovery seed card, then to try and extract your seed out of this.

But you know. Anyway, this is technically more secure than the Tresor So if you're you know if you're worried about vulnerabilities inside just your regular St micros in in each resort, that's where you're at. Code: Your seed is stored so it's more vulnerable. It's got an external clock, there's various more side-channel attacks you could potentially do to that then and already proven and secure.

and Industry rated secure chip like is what's used in the ledger here. Why can't they just sell a version or fill this with potting compound? Why just pot it? I Know it costs more as a manufacturing step, but they already make an absolute matza margin on these things anyway. as you can see, there's not much in it I Don't know how much the secured chip cost though. Well, there you have it.

That's a look at the ledger nano s and well, in a little bit of a comparison with the Traceur here and have I seen enough in the legend an OS to make me want to switch from the Traceur which I've been using. Basically no. A lot of people swear by this thing and it is cheaper than the trees orbs off your cheap. Looking for the cheapest hardware solution? and you should be using a hardware solution to store your coins? coins? Absolutely no doubt.

So a lot of people swear by this thing. but I've had too many little niggling problems with this and I still haven't been able to send anything using this. so I don't know what's up I Still need to play with it some more. but you know, an app, a separate app for every single coin that you've got to support.

But it does support more coins than the traceur. Yeah, I'm not really impressed by this, but in terms of hardware security, technically, this one's better than this because it uses the secure chip in it to store your seed and it's an industry-standard chip and it's well proven, whereas the Traceur just uses your standard micro. So technically, in theory this is susceptible and has been in the past and they're fixed it. but it hasn't been a major deal.
But technically because it uses a standard non secure micro not only susceptible to lately USB attacks, power glitching attacks and other sorts of stuff like that, but it's also susceptible to like a supply chain type attack ie. you buy it from the one hand, lower merchant on eBay and well, you know there's no way for this to know like it doesn't have any like device. ID building it can't sort of, you know, checksum itself. the firmware check sums itself, but not as good as this.

This actually has an individual secure ID inside the secure chip itself. So technically that's another exploit possible with this thing. That's why you've got to buy it from a genuine supplier. or you can build your own from scratch because this thing is completely open-source hardware and this one's not.

So there's pros and cons both ways. There's absolutely no clear winner here, but I'm I'm gonna stick with my traceur for now. I'm gonna play with the legend nos some more. but as I said, really, any technical argument about which one is more secure is pretty moot when it's basically in theory cuz you've physically got the device and really, you're more vulnerable by the actual our seed car that you need to write down, the words is much more vulnerable than these things.

So you know if you could debate which one's more secure. Technically, this one's a bit better, but this one's open hardware so it's fully checkable, etc etc. You can build your own whatever. Like, it doesn't really matter, it's all about the user interface experience and the fact that you've got a proven Hardware wallet, so they're both fine from that aspect.

Looking forward to getting the new Traceur, which is coming out the Model T I've pre-ordered one of those, but yeah, I don't know. There's just I expected better from this I've had too many little glitchy problems and and I still can't get back into my ether wallet. By the way, I'm clicking the damn button to get in and I repowering it and I can't recommend this at this stage. whereas the Traceur I've been using this and I haven't really had a single issue with it and I've been I getting my split coins and stuff on it and I've been using the beater wallet for this thing and not just the main wallet and I've had no issues.

So yeah, legend there nowhere. So I'm not going to call it a fail I just need to spend some more, you know? I need to figure out a few more things with this thing I think so yeah, not I really can't recommend it at this stage. Anyway, that was a long video I hope you found it useful. Catch you next time.

Oh yeah. discuss down below all that sort of you to be stuff that we say and subscribe wherever it is at the end and watch videos at the end of this thing. You know, whatever. Catch you next time.
.

Avatar photo

By YTB

16 thoughts on “Eevblog #1048 – ledger nano s crypto hardware wallet”
  1. Avataaar/Circle Created with python_avatars Mappy Land says:

    Your credibility really took a hit with me when i see this kinda crap on your channel. whatever happened to saving energy and not wasting it?

    You do know how much energy crypto wastes for it's stupid "gas fees" right?

    And updating with a statement from the Bitcoin Cash Fund really makes it seem like you're their tool.

    crypto is a big environmentally unfriendly scam, and to see a logical human being like yourself treating it seriously, when crypto wastes more energy than any of the losses from inefficiently designed products, or other things you've covered regarding energy conservation makes me seriously question your motives.

    crypto is crap, and it should be wiped off the face of the earth.

    as someone who's enjoyed your content for over 9 years, this kind of video makes me want to unsub.

    not like that's a valid "threat" since subscribers are a useless metric to determine success…. I still don't like to be associated with channels that promote toxic ideals.

    boo. i almost never click the "dislike" button, but here we are.

    fuck crypto bitcoin, scammy bullshit ruining the environment, wasting energy and scamming folks who don't know any better.

    Update: i unsubscribed.

  2. Avataaar/Circle Created with python_avatars BB-box says:

    warning newby question alert ! Can I clone one of these digital wallets so there is a backup ? I'm assuming if there's a fire in my house I lose all the bit coin? would like to buy some but not really sure how I make a backup of the wallet without printing a price of paper with the codes. then that's the same as leaving a bundle of cash on the kitchen table ? I could also be struck by lightning but just trying to figure out how to have a backup.

  3. Avataaar/Circle Created with python_avatars Dominic Shaddick says:

    Thanks for the review. Im happy with my Trezor even more now.

  4. Avataaar/Circle Created with python_avatars Photolunatic says:

    Thanks for a teardown. Terrible built quality. I will skip that one.

  5. Avataaar/Circle Created with python_avatars Okurka says:

    So, was your data leaked too?

  6. Avataaar/Circle Created with python_avatars AuroraHauntedHobbies says:

    I would love for you to do an update on your crypto. Not your holdings, of course, but your thoughts on the state of the scene as well as any updates on hardware you think relevant. Granted, maybe the lack of an update says it all. Nothing new enough to be cool enough to talk about ๐Ÿ˜€ Have a good day, Dave!

  7. Avataaar/Circle Created with python_avatars Flavius Tech says:

    I heard they use 2 chips for securing device, 1 will store only private key and the other one will secure device itself like display and button controls and firmware. Is true you can hack second chip to trick display to show another public addresses when you sign transactions?

  8. Avataaar/Circle Created with python_avatars Jerry Davis says:

    I tried to setup my Ledger nano S recently and it went as described till after going through twenty four recovery words and marking them down. After that I expected to confirm all twenty four words, but after second word confirmed, display showed that it is "processing" and then "your device is now ready". I expected all twenty four words have to be confirmed. Is it normal, or is there a technical issue? I tried to set it up as new device second time, but same happened again. Thanks for your help.

  9. Avataaar/Circle Created with python_avatars Laser resaL says:

    Hey great videos!
    Question, is there anyway to increase the storage of the ledger nano, to be able to use more then 5 apps installed at a time?
    Thanks

  10. Avataaar/Circle Created with python_avatars Luka Hierl says:

    Its way esyer to just take a gun and gett the key from you than to desolve the IC-pakage and probe the silikon and so on.

  11. Avataaar/Circle Created with python_avatars yagoa says:

    Please except IOTAs, if you have time to look into the nonprofit IOTA Foundation in Germany, you would love it I'm sure!

  12. Avataaar/Circle Created with python_avatars Gianluca G. says:

    displaying the full address on the LCD doesn't mean anything!!!!! You have to trust the HW as a whole anyway because a malicious firmware may instruct the LCD to display the "correct" address and then send the funds to another one… the LCD itself doesn't constitute proof of a correct address. The partial address is well enough to spot errors originating from the legit user. That's a basic software security principle

  13. Avataaar/Circle Created with python_avatars Mick Knight says:

    what a nightmare, if kyc documents were included on your coins ,would it stop them from being stolen, or make them trackable,,

  14. Avataaar/Circle Created with python_avatars Neocharm64 says:

    Be careful with the Ledger Nano S. Ledger does not hold itself responsible for any crypto currency lost by bad tested software updates. It started with a bad LTC Segwit update in August 2017. Even sending a new Ledger nano S did not return the LTC balance but in the end the loss of the LTC was never addressed.

  15. Avataaar/Circle Created with python_avatars Hen Sum says:

    I love your clear and easy to follow explanation. One quick question though. Can the hardware wallet support new coins that come out in the future or do you have to buy a new hardware wallet for coins that aren't here today? (assuming that the company implement the support for the new coins)

  16. Avataaar/Circle Created with python_avatars Leslie Franklin says:

    Now I'm conflicted. Should I waste my money on "Solar Road" or "Crypto Currency"?

Leave a Reply

Your email address will not be published. Required fields are marked *