Trending topics
#
Bonk Eco continues to show strength amid $USELESS rally
#
Pump.fun to raise $1B token sale, traders speculating on airdrop
#
Boop.Fun leading the way with a new launchpad on Solana.
so it's common knowledge that apps cannot be sideloaded on the Ledger Nano X. What is not public knowledge, to the best of my understanding, is _why_. It cannot be sideloaded because of a bug in the secure element (SE). To be precise, this is _not_ a user-facing vulnerability. Due to this bug, STM private code on the chip cannot be sufficiently protected, so Ledger chose to disable sideloading. Before you panic, it's all safe, everything is fine. I'm disclosing this publicly for two reasons:
- stop buying the Ledger Nano X immediately. It is an inferior product and sideloading will become very important in the future
- inform the public about a bug that cannot be disclosed due to NDAs between Ledger and STMicroelectronics
to be very clear, the Ledger Nano X is secure. Ledger did their duty. A red team uncovered the issue. Disabling sideloading was a security decision. What I disagree with is the lack of transparency here, even if the constraints are legal. Ledger has great products (not talking about the data breaches tho!), including the best one they ever shipped, the Ledger Nano S, which is unfortunately no longer sold. But please stop buying the Ledger Nano X. Sideloading is a core feature. Ledger should reconsider keeping it in the product lineup.
Top
Ranking
Favorites
