We have identified and removed a malicious version of the Ledger Connect Kit \ stacker news ~bitcoin

Or ledger the company got hacked somewhere that allowed the attacker to push this malicious update. Hard to know without ledger (or the attacker lel) telling us.

0 sats \ 1 reply \ @0xbitcoiner OP 14 Dec 2023

If it's an inside job, it's very bad. Basically everything could be compromised.

Shouldn't the commits be multi-keyed?

edit: multisig

70 sats \ 0 replies \ @nerd2ninja 14 Dec 2023

I don't know how ledger runs their business, but I got a screenshot of a tweet from another chat (twitter user @MatthewLilley) which says

They are loading JS from a CDN

They are not version locking loaded JS

They had their CDN compromised

0 sats \ 0 replies \ @nitter 14 Dec 2023

Twitter2Nitter

Tor: nitter7bryz3..q553qd.onion | 26oq3gioiwcm..b4wwid.onion | vfaomgh4jxph..dauqad.onion | nitraeju2mip..evvuqd.onion | codeine3hsqn..brdqqd.onion

I2P: axd6uavsstsr..zf4q.b32.i2p | u6ikd6zndl3c..n2qa.b32.i2p | gseczlzmiv23..aoua.b32.i2p | tm4rwkeysv3z..4weq.b32.i2p | vernzdedoxuf..agva.b32.i2p

Lokinet: nitter.priv.loki/

Nitter is a free and open source alternative Twitter front-end focused on privacy and performance. Click here for more information.