Bitcoin Forum

Bitcoin => Hardware wallets => Topic started by: examplens on September 29, 2023, 02:00:49 PM



Title: What is the purpose of the scope_v2.json file in the Trezor wallet?
Post by: examplens on September 29, 2023, 02:00:49 PM
Since two days ago, Microsoft Defender Antivirus has insisted on checking the scope_v2.json file located in the Trezor suite application. Folder /sentry. What is at stake here, should I be worried?
I did not allow any checking, considering that I do not want any unsolicited checking by external services. But what baffles me is the persistence of Windows security to check it despite my refusal. It seems to me that this started happening after the last Suite update a few days ago

https://talkimg.com/images/2023/09/29/P3DXw.png

It's Trezor One, with 1.12.1 firmware and Suite version  23.9.3. Otherwise, everything works without problems, at least I didn't notice anything.


Title: Re: What is the purpose of the scope_v2.json file in the Trezor wallet?
Post by: OmegaStarScream on September 29, 2023, 02:11:11 PM
I found this[1] so it's probably nothing to be worried about since Trezor suite uses both Electron and Sentry for crash reporting as this[2] as well as the path in the picture you posted clearly shows.

[1] https://github.com/getsentry/sentry-electron/issues/195#issuecomment-554465778
[2] https://github.com/search?q=repo%3Atrezor%2Ftrezor-suite%20sentry&type=code


Title: Re: What is the purpose of the scope_v2.json file in the Trezor wallet?
Post by: dkbit98 on September 29, 2023, 08:05:11 PM
Microsoft Defender Antivirus
Oh that ''antivirus'' will save you from absolutely nothing, but it will give you huge false sense of security.   :P
I didn't notice anything strange with Trezor Suite, but it's open source so you can report that to Trezor github, maybe they will contact micr0s9ft to whitelist specific file.

should I be worried?
No.
This crap is giving false positive reports all the time.
Disable Defender, or even better option - switch to Linux OS.


Title: Re: What is the purpose of the scope_v2.json file in the Trezor wallet?
Post by: hugeblack on October 01, 2023, 08:30:55 AM
I believe that Microsoft Defender Antivirus, in an attempt to detect Spyware, monitors all data received and sent from your device and therefore may close any connections accordingly.

Trezor Suite tries to track errors in the system, monitors the application and improves performance and may send error data to a third party for that reason. Microsoft Defender Antivirus considers such activities Spyware. I have no experience in using Antivirus (I don’t use it and find it gives a false sense of security), but there will be a reason to add the application to the white list. Search for it and the problem will go away.

More information about what data may be collected here ----> https://docs.trezor.io/trezor-suite/analytics/index.html

Another solution is to disabled usage data tracking in the Trezor suite, but in any case you can consider it a false positive.