Bitcoin Forum

NEW!

We are currently running a promotion for the eWallet: Buy over 5 pcs, get them at half price on our website:

https://www.blackarrowsoftware.com/store/ewallet.html (https://www.blackarrowsoftware.com/store/ewallet.html)

---

Black Arrow is launching a new product:

eWallet - hardware Bitcoin wallet

• 100% Trezor compatible.
• Does not require a cable to connect to your laptop
• Smaller than Trezor
• Open source code available for auditing in order to ensure that there are no backdoors
• Can be used on a virused computer even with keylogger installed
• This wallet never exposes the private keys to the outside world to keep your coins always safe. All transactions are signed by the wallet.
• Embedded screen ensures that you sign the transaction that you really intend to.
• Available on request without firmware or bootloader for customers who wish to upload their own firmware

Now in stock.

Order here: https://www.blackarrowsoftware.com/store/ewallet.html (https://www.blackarrowsoftware.com/store/ewallet.html)

we have access to framework for customizing to use other Cryptocurrency?   ::)

Where's the code?

I thought I was special, my posts werent being deleted, but finally they have been.

lol another day another list of posts deleted

Not gonna happen. The OP creates self-moderated threads so they can try to avoid their horrible history of massive failures.

Well, I've got a tracking number from them.  So they are shipping me something.   Should be here by the middle of next week.

1. Our technical competence has been considerably improved. The staff responsible of our delays has been let go.
2. We're working on that, please move this question to the correct thread.
3. Although the claims mentioned are in error, you don't need to trust us as we run unchanged Trezor firmware. You can update the firmware from their website.

https://github.com/trezor/

So this is your product, or you are ''dealer'' ? Cause few months ago group from Czech republic made it as first. I am only asking.

So they ripped off the hardware design of the Trezor, put a different connector/enclosure on and think it's okay to get a free ride on the hard work that has been done by Slush's team to write the firmware?

Well...
( slightly out of context - they were obviously not happy about it - see full post for details )

For further context on what sparked that remark:
http://www.reddit.com/r/Bitcoin/comments/2t8ppe/now_you_can_buy_a_trezorlike_hardware_wallet_in/
http://www.reddit.com/r/Bitcoin/comments/2tvj7y/receiving_a_bwallet_the_trezor_clone/

If anything, using the same firmware should at least do away with security concerns from code changes; no idea how much of the hardware is a straight copy, of course.  I believe its design files are not (yet) open sourced.

Yo Blackarrow, send one to me and I'll do an extensive review and post it here.

http://www.stellaw.info/blog/2015/3/18/black-arrow-ewallets-arrives

Its pretty clear to me that you have made modifications to SatoshiLabs' (Trezor's) code.

Where can I see these modifications (enough to compile your firmware myself)

Thanks!

Also, where can I download your firmware binaries?

Surely this is a infringement of a Trezor patent? or are they operating from a country where the patent is not registered?

The 100% Trezor compatible, should mean that they collaborated with Trezor on this product? I am all for NEW and improved innovation, but it has to come from a trusted company before I would store my money on it.

It will be bad for BTC if we allow companies to bring products to market and consumers lose money because of it.

Anyone use this device? { I like the smaller features, but I have my doubts about the security }

Yes, we've changed the logo and the name in order not to infringe any trademarks. Please update from Trezor's website with their own binaries if you are not happy with it.

Due to lack of time we have not set up (yet) a git repository or the ledwallet.com website. We'll do that soon.

Please also include Bootloader source.

Trezor code is licenced GPLv3, which roughly means that anyone can do whatever they want with the code (including producing and selling clones)

Check out http://stellaw.info for some brief analysis

Hmm , now this thread right here makes more sense : https://bitcointalk.org/index.php?topic=995379.0
I thought he is the author and creator of the eWallet while he was only trying to quote your thread right here if I understood right . Anyone here on this thread can confirm that he received his wallet ?

~ Madness

Come on now.. this thread is only 2 pages long:

( Navigate up to see a quick peek inside as well. )

Hah - true enough.  By my estimate, 6 pages.

I'm twixt on this.  On the one hand, people should indeed know about the history and read up on past events.  On the other hand, many of the posts were off topic with regard to this particular product, so I just can't fault them for removing those.  I'm fully expecting this very post to get deleted as well, for example, because it's got nothing to do with their hardware wallet.
Perhaps the next forum software can have a section called "related threads", which people can add/vote on.  That'll might get abused pretty quick, but ideally it would allow for threads like this one to have a clear pointer to other threads of interest.

I have questions that id ask any hardware wallet vendor, namely how can you provide assurance that you are not I. Possession if either the actually private keys used by the device or a seed whereby you could gain knowledge about what keys will be generated in the future?

I don't even know how you would go about answering that, honestly. But with the community looking to hardware wallets as a means to keep their coins secure, in all honesty, it seems like hardware wallets are little black boxes that require users to place their ultimate faith in the manufacturer of little $100 devices. Everything could go find for years, then one day the carpet could be pulled out.

Not accusing or anything, but how can you provide any assurance?

Just wanted to say that - yes, I fully agree.  Self-moderation is a double-edged sword.  I use it myself in one of my threads as without it, it would have expanded to several pages of people who didn't even read the first post :)  But I know it's also been (ab)used to silence criticism.

I don't think they can provide 100% assurance on an as-delivered device, because it involves a black box (as you say) that may or may not actually do what its official datasheet says it should be doing.   E.g. even if it's a simple microcontroller that has a known documented firmware dump option, there's no guarantee that they didn't clone that microcontroller and - on receiving the dump command - dump innocuous firmware, while keeping nefarious firmware that's actually used locked away.  It would be expensive to produce such a clone, but if the potential payout is high enough, could certainly be done.

So anybody paranoid enough should be able to buy the chip required, solder that on themselves, compile the source of the firmware (which can be relatively easily reviewed), and then stick that on there.

Of course the truly paranoid might not be convinced that the manufacturer of the chip isn't in on some grand conspiracy ;)

so if you guys are using same firmware as trezor what really is the difference between yours and theirs ? .. doesnt that kinda makes them both same other then the price difference i mean ?

the bootloader is different.

If you can set aside your tinfoil hat for a moment, you are correct in principal that these are the 'same' devices.

I don't know. I'll go ahead and predict that a lot of coins will will one day be lost because of corrupted hard ware wallets; I wish we had a remindme bot over here! :)

With all that said, why do you need to hide behind a newbie account?

I came here wondering about how we can trust hardware wallets in general, whether from black arrow or trezor, learned a bit more than I expected about allegations about Black Arrow... But I feel like I have to take those with a grain of salt because you can't link your ordinary user account to this...?

On that topic - in addition to what I already wrote - as many people are receiving their Mycelium Entropy devices, and are finding that boxes (appear to) have been tampered with, Mycelium has also responded with how that (doesn't) affects its integrity.
http://www.reddit.com/r/Bitcoin/comments/30ip6j/my_new_mycelium_entropy_device_opened_by_border/

I'd actually search for 'mycelium entropy' here / at reddit, there's a fair bit of discussion on that aspect (as well as general reviews of the device , of course).

Sorry, we did not had time to set this up but we will shortly.
We can now offer the wallet without firmware and without bootloader for customers who wish to upload their own firmware.

Yay! First time in all my time here that I had a post deleted... And now, I have no trust in this company.

@blackarrow: Is this like bWallet? Does it have sort of backdoor like bWallet? You aren't even putting enough efforts. It doesn't take much time to create a repository. This inreases the suspiciousness of your product.


They changed the TREZOR firmware license from "completely open-source" (LGPLv3) to "shared-source" (Ms-RSL) on January 28, 2015.(copy-paste from http://satoshilabs.com/news/2015-01-30-trezor-software-license/)

Yeah, and then reverted that change.

Their repo needs a LICENSE file for clarity, perhaps.

Discussions:
http://www.reddit.com/r/Bitcoin/comments/2u7dec/trezor_team_on_software_licensing_we_have_decided/
http://www.reddit.com/r/TREZOR/comments/2u3l6l/regarding_the_recent_change_from_open_lgplv3_to/

I'd like one hardware wallet,
does it generate addresses itself or can I import an address into the device.

 Please place your order on our website: https://www.blackarrowsoftware.com/store/ewallet.html (https://www.blackarrowsoftware.com/store/ewallet.html)

The addresses are generated by the wallet. It would be insecure to use keys generated by the computer.

We are currently running a promotion for the eWallet: Buy over 5 pcs, get them at half price on our website:

https://www.blackarrowsoftware.com/store/ewallet.html (https://www.blackarrowsoftware.com/store/ewallet.html)

not sure if it is driven by your own stupidity or simple greed, but you scammed dozens of people and now you are "brave" enough and offering another product? holy fuck, where is last piece of common sense?

Promotion has ended. Thank you for your continuous support!

PM me some order info, i love hardware wallets to play around with.

Thanks for he heads up. I already have a Mycelium entropy that is really cool.
Thinking of sellin it and trying something new, i just love messing aroun with hardware wallets and such.

yah, well you might want to read up on this company and the history of the company and the people that run it a bit before you trust them with your BTC via their wallet with something that will plug into your computer as well.

it's all here on the forum.

See Blackarrow's trust https://bitcointalk.org/index.php?action=trust;u=105804

see here for information on these people: https://bitcointalk.org/index.php?topic=716310.msg8093443#msg8093443

do yourself a favor and stay far, far away from Black Arrow and keep your money and your BTC even further away than that......

Will surely try this :)