Reply to thread

Message

<blockquote data-quote="redbeard" data-source="post: 1415305" data-attributes="member: 6466">Let's break it down by threat vector.Ledger leak - your information was NOT in their database, so nothing to worry about there. They just ship boxes to Amazon and then they fulfill it.Device security - Hardware wallets are independent of the purchase and require no PII, so no sweat here.Amazon leak? It's possibly risky to have breadcrumbs on Amazon, but not much you can do it about it now.Coinbase account? Regular readers know my thoughts on this. All things considered this is probably your most concerning threat vector since a leak of their database WOULD 100% put you at risk.Phishing - always possible, so always be aware. Ledger will NEVER ask for your private keys over email. There is no reason for them to ever email/call/mail you, so if you receive something, it's probably fake. ALWAYS verify with their website. It might be useful to make segregated emails with simplelogin.io.In any case you can see why having specific crypto emails/phone numbers/addresses makes sense. It's best to be defensive BEFORE leaks instead of scrambling around after.</blockquote>

[QUOTE="redbeard, post: 1415305, member: 6466"] Let's break it down by threat vector. Ledger leak - your information was NOT in their database, so nothing to worry about there. They just ship boxes to Amazon and then they fulfill it. Device security - Hardware wallets are independent of the purchase and require no PII, so no sweat here. Amazon leak? It's possibly risky to have breadcrumbs on Amazon, but not much you can do it about it now. Coinbase account? Regular readers know my thoughts on this. All things considered this is probably your most concerning threat vector since a leak of their database WOULD 100% put you at risk. Phishing - always possible, so always be aware. Ledger will NEVER ask for your private keys over email. There is no reason for them to ever email/call/mail you, so if you receive something, it's probably fake. ALWAYS verify with their website. It might be useful to make segregated emails with simplelogin.io. In any case you can see why having specific crypto emails/phone numbers/addresses makes sense. It's best to be defensive BEFORE leaks instead of scrambling around after. [/QUOTE]

Verification