Ledger Live Software Accused of User Data Collection and Behavior Tracking
Summary:
Privacy advocate and pseudonymous developer REKTBuilder claims that the Ledger Live software collects user data and tracks usage by performing a "genuine device check" when users connect their device. This check allegedly lists all apps on the device, helping Ledger decipher which networks the wallet owner uses. Despite attempts to create a "tracker-free" version, and removing most tracking components, Ledger Live reportedly remained unaffected, suggesting that completely evading tracking isn't possible.
According to an examination conducted by pseudonymous software developer and privacy advocate REKTBuilder, Ledger Live software seems to be collecting user data and monitoring behavior. REKTBuilder's probe of the software's Python code uncovered a purported "genuine device check" that occurs each time the user links their Ledger device to a computer or smartphone. Allegedly, this check provides a rundown of all apps on the device, allowing Ledger to determine which networks the wallet owner connects with.
The "genuine check" is ingrained into the app listing procedure, as per REKTBuilder, which exposes the user's device each time an app is updated or installed. In an attempt to reduce tracking, REKTBuilder made modifications in what they call "Lecce Libre", an effort which still ended up tracked by Ledger.
REKTBuilder, an anonymous software developer and researcher, posts on Crypto.bi and X (formerly Twitter). They previously suggested Ledger Live was documenting user's cryptocurrency balances, and later proposed an allegedly "tracker-free" open-source alternative called "Lecce Libre."
Recently, REKTBuilder claims to have uncovered an even larger privacy concern with Ledger Live. They reportedly discovered that several instances of the code contained the phrase "genuine check", which was not active when the software seemed to be running the device check. On examining further, they observed this check is housed within a “listApps” subroutine, potentially used to track when users link their device.
Attempts to disconnect the tracking code resulted in software failure, implying an entirely "tracker-free" Ledger Live may not be feasible. Despite the alleged privacy-related issues, REKTBuilder stated that they continue to use Ledger Live due to the absence of other hardware alternatives.
Cointelegraph's attempts to get a comment from Ledger remained unanswered. Ledger, a crypto hardware wallet maker, boasts of around 6 million users of its devices. The firm raised $109 million in March to boost its operations and unveiled an optional cloud recovery tool for users wary of losing their private keys in October.
Published At
12/28/2023 12:05:31 AM
Disclaimer: Algoine does not endorse any content or product on this page. Readers should conduct their own research before taking any actions related to the asset, company, or any information in this article and assume full responsibility for their decisions. This article should not be considered as investment advice. Our news is prepared with AI support.
Do you suspect this content may be misleading, incomplete, or inappropriate in any way, requiring modification or removal?
We appreciate your report.