Technically, Coinbase is correct! Not your keys, not your coins!

[zaybxc]

Well store has a Identification number for the specific ledger, Ledger has a identification reference for the ledger, and ledger live pulls in data from the end users device including the identification reference.

Yes, but it doesn't mean they know your personal info; you might also have asked a friend to buy the device. It's long time I don't use ledger live, using the device through metamask.
Trezor stores your info in anonymized form after 3 months from the purchase and delete it when the warranty expires.

 

[0xDEADBEEF]

Neither GrapheneOS nor CalyxOS can be considered nor are secure - not just because they have integrated Google application ecosystem, which is entirely different topic.

Could you elaborate on this?

 

[mraleph]

Could you elaborate on this?

GrapheneOS and its predecessor CopperheadOS are AOSP derivatives.

CalyxOS is a fork of LineageOS.

Our further comments are impartial even though we have a business involved with tailor made closed source secure O/S and application ecosystem development.

We are not going to discuss security of AOSP and it's derivatives vs iOS vs Ubuntu touch and similar.

Security is a result of preferences - a choices and decisions. Regarding O/S development, we must differ original contributions vs simple changes of present code and rebranding those.

GrapheneOS advertizes certain features as comparative advantages

GrapheneOS features overview

Overview of GrapheneOS features differentiating it from the Android Open Source Project (AOSP).

grapheneos.org

We'll offer an analysis for a glimpse.

The password maximum lenght is an arbitrary value in AOSP source code with default

MAX_PASSWORD_LENGTH = 16

The number 16 can be changed to any other value, up to the maximum value for a 32-bit signed integer which is 2.147.483.647.

The default number of user profiles is 4 in AOSP, where GrapheneOS simply changes that arbitrary value in "default.xml" and "config.xml" in source code with 32.

The encryption is an AOSP default, FBE (file based encryption) with identical cryptographic primitives.

Regarding sandboxing, there is no difference between AOSP, LineageOS or other derivates compared to GrapheneOS. By installing Google application ecosystem on GrapheneOS in advertized sandboxed manner, the end user defeats the purpose of his original intent to use supposedly O/S that offers security and privacy.

By changing Google's services and servers for location, the end user simply switches one dependancy for another.

As we test every competitor's product on forensic platforms both our in-house and commercial ones such as Cellebrite, we know from which vendors and commercial or open source O/S platforms is possible to perform (forensic) data acquisition.

Quite unfortunately, it is possible to compromise GrapheneOS, CalyxOS and LineageOS platform with spyware and perform separate data extraction. We assume that specific set of both vendor and user preferences downgrades effective security.

We'll offer selected resources regarding security, privacy and anonymity in time to come.

 

[0xDEADBEEF]

GrapheneOS and its predecessor CopperheadOS are AOSP derivatives.

CalyxOS is a fork of LineageOS.

Our further comments are impartial even though we have a business involved with tailor made closed source secure O/S and application ecosystem development.

We are not going to discuss security of AOSP and it's derivatives vs iOS vs Ubuntu touch and similar.

Security is a result of preferences - a choices and decisions. Regarding O/S development, we must differ original contributions vs simple changes of present code and rebranding those.

GrapheneOS advertizes certain features as comparative advantages

GrapheneOS features overview

Overview of GrapheneOS features differentiating it from the Android Open Source Project (AOSP).

grapheneos.org

We'll offer an analysis for a glimpse.

The password maximum lenght is an arbitrary value in AOSP source code with default

MAX_PASSWORD_LENGTH = 16

The number 16 can be changed to any other value, up to the maximum value for a 32-bit signed integer which is 2.147.483.647.

The default number of user profiles is 4 in AOSP, where GrapheneOS simply changes that arbitrary value in "default.xml" and "config.xml" in source code with 32.

The encryption is an AOSP default, FBE (file based encryption) with identical cryptographic primitives.

Regarding sandboxing, there is no difference between AOSP, LineageOS or other derivates compared to GrapheneOS. By installing Google application ecosystem on GrapheneOS in advertized sandboxed manner, the end user defeats the purpose of his original intent to use supposedly O/S that offers security and privacy.

By changing Google's services and servers for location, the end user simply switches one dependancy for another.

As we test every competitor's product on forensic platforms both our in-house and commercial ones such as Cellebrite, we know from which vendors and commercial or open source O/S platforms is possible to perform (forensic) data acquisition.

Quite unfortunately, it is possible to compromise GrapheneOS, CalyxOS and LineageOS platform with spyware and perform separate data extraction. We assume that specific set of both vendor and user preferences downgrades effective security.

We'll offer selected resources regarding security, privacy and anonymity in time to come.

Interesting take. Is there any information you can share now about how your solution differs in terms of hardware and software?

 

[mraleph]

Interesting take. Is there any information you can share now about how your solution differs in terms of hardware and software?

If we maintain the presence on the OCT, we'll provide appropriate channel for information and offer a discount and free-of-charge use for certain class of members. We believe that there is a genuine need for usable but safe solutions that are in line with current and anticipated regulatory density. Those solution became costly, but we can't go against the tides and winds in the ocean.

 

[diatessaron]

Someone has already advised not to use your name and address when buying Ledger/Trezor...
Who is going to guarantee you that there won't be data leaks from crypto friendly banks/EMIs and nobody will know your wallet's address and see the balance in it?
Or that maybe your accountant "sells" your crypto-company's wallet address?
Are you sure your name won't show up on a deanonymizing tools like Arkham intelligence?

Blockchain is still missing privacy, there will be solutions for that, but for the moment every wealthy crypto guy might be at risk of being kidnapped.

How old is the bank you're using and when was the last time there was a leak? Your hypothetical scenarios are just that, hypothetical. Can you be less paranoid please? If the accountant you're dealing with needs to sell your information then try hiring someone who doesn't sell themselves through Craigs List (?). And yes, I am sure my name does not show up on any tool, including those of Arkham Intelligence, there's a limit to how intelligent intelligence can be.

 

[zaybxc]

How old is the bank you're using and when was the last time there was a leak? Your hypothetical scenarios are just that, hypothetical. Can you be less paranoid please? If the accountant you're dealing with needs to sell your information then try hiring someone who doesn't sell themselves through Craigs List (?). And yes, I am sure my name does not show up on any tool, including those of Arkham Intelligence, there's a limit to how intelligent intelligence can be.

There's nothing paranoid in checking points of failure... a crypto holder is actually sleeping with his money under the mattress.

 

[incognitbro]

Who is going to guarantee you that nobody will know your wallet's address and see the balance in it?
Or that maybe your accountant "sells" your crypto-company's wallet address?
Are you sure your name won't show up on a deanonymizing tools like Arkham intelligence?

This is just you exposing that you don't understand crypto, theres no "accountant" lurking in your self hosted wallet.
You can easily bypass arkham/chanalysis by converting to monero on a DEX before exchanging to a new wallet, so on and so forth.