Cosine says Ledger Clear Signing collects signature-related information by default
BIBIBI
AT A GLANCE
Cosine says Ledger Clear Signing collects chain ID, destination addresses and other signature-related information by default; the claims have yet to be verified.
Article
SlowMist's Cosine:Ledger Clear Signing collects chain ID, destination addresses and other signature-related information by default
BlockBeats news,November 11, SlowMist founder Cosine stated that Ledger's Clear Signing mechanism collects information related to user signatures by default, including the network or chain ID, destination address (contract or recipient), device model, firmware version, application version, and whether blind signing was used and why.
Cosine said the data collection mechanism is in Ledger SDK's `context-module` version 1.16 and later, not in the firmware of Ledger devices. The relevant toggle must be provided by wallet applications that support connections to Ledger.
Original link:https://m.theblockbeats.info/flash/376669
Key points
01
BlockBeats November 11 reported, citing SlowMist founder Cosine, that Ledger Clear Signing collects information related to user signatures by default.
02
The information listed by Cosine includes the network or chain ID, destination address (contract or recipient), device model, firmware version, application version, and whether blind signing was used and why.
03
Cosine said the collection mechanism is in Ledger SDK's context-module version 1.16 and later, not in the firmware of Ledger devices.
04
Cosine said the relevant toggle must be provided by wallet applications that support connections to Ledger.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This report concerns the collection of information associated with signing, rather than the content of signatures themselves. According to Cosine, the collection mechanism is in the SDK module rather than device firmware, and the relevant toggle must be provided by wallet applications that connect to Ledger. The material provides only a media account and does not establish the actual default behavior.
Why it matters to readers
The stated scope of collection includes signature destinations and device information, raising privacy implications worth examining. The claim that wallet applications provide the toggle also makes it important to verify whether individual wallets offer the relevant setting.
If you connect to Ledger through a wallet application, you can check whether the application offers the relevant toggle. Do not interpret this claim about information collection as evidence that assets have been stolen or private keys exposed.
Risks and unknowns
The material does not provide original technical evidence or a response from Ledger. The stated default collection behavior and its scope have yet to be independently verified.
The material does not identify the data recipient, purpose, retention period or transmission method.
The material does not identify which wallet applications already provide the relevant toggle or its default setting.
Related Developments
Loading event timeline…
Related concepts
Clear Signing
This term is not in the glossary yet. Browse related concepts in the glossary.
