app-bitcoin-new VS ledger-live

Thanks for your opnion, mine is backed by documentation https://developers.ledger.com/ and code https://github.com/ledgerhq/app-bitcoin-new

It definitely can, but some assembly will be needed. Typically you can look at how a low level client interacts with the Bitcoin application here https://github.com/LedgerHQ/app-bitcoin-new (check bitcoin_client for python, bitcoin_client_js for js, bitcoin_client_rs for rust) then do your own thing.

That's not planned internally but would be easy for a third party developer to do, since Nostr is only using Schnorr signatures which are already supported by the Bitcoin application (https://github.com/ledgerhq/app-bitcoin-new)

The application has been rewritten from scratch to support Miniscript and new Bitcoin use cases. You can see the new one here https://github.com/ledgerhq/app-bitcoin-new and the old one here https://github.com/ledgerhq/app-bitcoin

It's actually not closed source and even more funny you end up with less hard to check third party dependencies when you run the open source Bitcoin application (https://github.com/ledgerhq/app-bitcoin-new) on a Ledger device.

The caveat is that some of those features are not supported by any frontend yet, but you can find a lot of documentation to implement it in this github issue https://github.com/sparrowwallet/sparrow/issues/471, blog post https://blog.ledger.com/bitcoin-2/ and the application itself https://github.com/LedgerHQ/app-bitcoin-new

You can check the APDU logs using the documentation of the (new) BTC application available at https://github.com/LedgerHQ/app-bitcoin-new/tree/develop/doc - first thing to check would likely be to make sure that you're using the newest version (2.x) of the BTC application since getWalletXpub wasn't present in the old one

Feel free to give us your educated inputs on https://github.com/LedgerHQ/app-bitcoin-new

get Ledger's public key from their git repo. (Assume that hackers cannot modify it.)

Ledger Live is Open Source - you can always see the latest details on github https://github.com/LedgerHQ/ledger-live/blob/develop/apps/ledger-live-desktop/RELEASE_NOTES.md

Ledger Live is Open Source https://github.com/ledgerhq/ledger-live

There is no Ledger device API that Casa could call to export your seed phrase into our possession. You can verify this for yourself by checking Ledger's documentation here: https://github.com/LedgerHQ/ledger-live/tree/develop/libs/ledgerjs/packages/hw-app-btc

I just wasted a few hours of my life scanning the Ledger Live code base. And sure yeah it's open source and clonable as you can see here https://github.com/LedgerHQ/ledger-live it's also pretty much updated as the last merge to develop is 19 hours ago. So first off the firmware is proprietary meaning not open source and normal people won't have access to it. So there's no freaking way to confirm nor debunk what the comment OP see IN A TREZOR SUB unless you can hack into the Ledger device memory one way or another but that requires hardware and firmware knowledge that I don't have nor a majority of software developer.