Bitcoin Forum

Bitcoin => Hardware wallets => Topic started by: P_Shep on July 31, 2014, 05:47:12 AM



Title: What did you call your trezor wallet?
Post by: P_Shep on July 31, 2014, 05:47:12 AM
I called mine Walter :)


Title: Re: What did you call your trezor wallet?
Post by: alexrossi on July 31, 2014, 07:01:41 AM
An ot question: do you feel really safe with a trezor? I mean, it isn't equal to a cold storage pc never connected to the internet, you connect your trezor via usb and if there is some zero day exploit your btc are gone, or there is something that can truly make more difficult for an attacker to dump the memory of your device?


Title: Re: What did you call your trezor wallet?
Post by: P_Shep on July 31, 2014, 07:41:30 AM
It's more useful then a computer never connected to the internet, and more secure than my phone


Title: Re: What did you call your trezor wallet?
Post by: alexrossi on July 31, 2014, 12:01:25 PM
It's more useful then a computer never connected to the internet, and more secure than my phone

Everything is more secure than a smartphone, i'm just comparing the trezor to an offline computer: which appear more secure in your opinion?


Title: Re: What did you call your trezor wallet?
Post by: alexrossi on July 31, 2014, 12:31:38 PM
For long term storage and large amounts, please use an offline computer or paper wallets with proper backups.

Ok, so are you admitting that is still less safe than a offline pc?


Title: Re: What did you call your trezor wallet?
Post by: DjPxH on July 31, 2014, 12:50:44 PM
I don't own one, but let me think of a few names: Titan, Unbreakable, Paperwallet, GOX cold storage, Bunker, Fort Knox


Title: Re: What did you call your trezor wallet?
Post by: slurpy on July 31, 2014, 01:23:11 PM
I don't own one, but let me think of a few names: Titan, Unbreakable, Paperwallet, GOX cold storage, Bunker, Fort Knox
Paperwallet


Title: Re: What did you call your trezor wallet?
Post by: P_Shep on July 31, 2014, 01:26:51 PM
For long term storage and large amounts, please use an offline computer or paper wallets with proper backups.

Ok, so are you admitting that is still less safe than a offline pc?
An offline PC is less safe than a paper wallet... So what?


Title: Re: What did you call your trezor wallet?
Post by: alexrossi on July 31, 2014, 01:44:17 PM
For long term storage and large amounts, please use an offline computer or paper wallets with proper backups.

Ok, so are you admitting that is still less safe than a offline pc?
An offline PC is less safe than a paper wallet... So what?

Are you sure about that?

A secure paper wallet will be generated with an offline PC, but you also need a secure printer...


Title: Re: What did you call your trezor wallet?
Post by: cor on July 31, 2014, 01:49:52 PM
An ot question: do you feel really safe with a trezor? I mean, it isn't equal to a cold storage pc never connected to the internet, you connect your trezor via usb and if there is some zero day exploit your btc are gone, or there is something that can truly make more difficult for an attacker to dump the memory of your device?


Trezor has been designed  to prevent exactly such situations AND it's great for a long-term storage.
Dumping memory is not possible, testers have tried.
 
So the answer to a question Is Trezor more safe (or better) than an offline computer or a paper wallet? is Definitely YES

why?
+ the private keys have been generated offline (inside Trezor) and never leave the device
With Trezor you avoid the risk of uploading private keys to a potentially compromised computer or mobile phone, or a printer's internal storage.
+ malware cannot access the device via its limited USB protocol
+ you can use your coins anytime
+ you don't need to do any periodic backups, any further encryption and stuff that requires specific knowledge.

 





Title: Re: What did you call your trezor wallet?
Post by: P_Shep on July 31, 2014, 02:32:24 PM
For long term storage and large amounts, please use an offline computer or paper wallets with proper backups.

Ok, so are you admitting that is still less safe than a offline pc?
An offline PC is less safe than a paper wallet... So what?

Are you sure about that?

A secure paper wallet will be generated with an offline PC, but you also need a secure printer...

Yes.

If you're paranoid to the point of worrying about a printer, why can't you write the keys down, or destroy the printer?

I've seen PC power supplies blow up. I've had HDDs die on me many times. I've had processor s fried, mother boards stop working... I've never witnessed a piece of paper spontaneously vapourise.

So yes.

What's your point caller?


Title: Re: What did you call your trezor wallet?
Post by: alexrossi on July 31, 2014, 02:39:04 PM
why can't you write the keys down, or destroy the printer?

write down a private key is a bad idea, you write a 0 rather than an O and you have simply f**ked up your bitcoins, in this case an electrum seed can avoid lot of problems and it also contain unlimited addresses.

You can for sure destroy a printer, but who knows if an attacker has already stolen the private keys? (dumping printer cache, man in the middle, etc...)



Title: Re: What did you call your trezor wallet?
Post by: alexrossi on July 31, 2014, 02:42:18 PM
+ malware cannot access the device via its limited USB protocol

Can you speak more technically about this limited USB protocol that should prevent memory dumping?


Title: Re: What did you call your trezor wallet?
Post by: BitcoinMillionaire on July 31, 2014, 02:45:28 PM
I'd call it 'Scrooge McDuck's vault' or 'Treasure', maybe 'My Precious' or even 'One Million Bitcoins, Baby' Haha!


Title: Re: What did you call your trezor wallet?
Post by: DjPxH on July 31, 2014, 03:29:35 PM
why can't you write the keys down, or destroy the printer?

write down a private key is a bad idea, you write a 0 rather than an O and you have simply f**ked up your bitcoins, in this case an electrum seed can avoid lot of problems and it also contain unlimited addresses.

You can for sure destroy a printer, but who knows if an attacker has already stolen the private keys? (dumping printer cache, man in the middle, etc...)



Practically unlimited. Of course it is still limited by the actual entropy of possible bitcoin addresses. But yeah, electrum is a nice way. Although using it on an online machine makes it prone to the same old attacks.