Hacker News Reader

Ledger is subject to European data retention law, and their backends are fully capable of recording how much cryptocurrency someone has.

View on HN

Are you just speculating, or do you know that their software shares public keys and/or balances with the backend? I kind of doubt it.

The European data retention law certainly wouldn't apply if their backends aren't actually receiving this data..

Given that their apps are not full nodes, it must be sharing them with some backend to check balances and previous transactions.

However that might well be that of a third party, or their own but without any unique/linkable identifier being transmitted with the requests.

Yeah good point, they need to at least be making requests containing the public addresses. I'd guess not with any identifiable information beyond IP address, and not sure if the law would force them to store the specific requests associated with an IP address..seems crazy but possible.

Certainly these endpoint have no authentication / user accounts though, and I don't think it'd be easy for some low level hacker to associate an IP address with a specific person.

Reply on news.ycombinator.com