Can stick/slush to add checking option to show current receiving address not only in computer but in the Trezor's screen too and this receiving address should be sent by client software through BIP44 path from computer to the Trezor (the Trezor should simple calculate address by sent BIP44 path from computer)?  I'm almost sure that I replied to this question at least twice already. Better ask via email next time. Forum is very bad medium for asking questions you want answers to, because it's very noisy. Anyway, here I go again: we implemented this in firmware recently, after we push the next version update, we'll enable this functionality in myTREZOR. |
|
|
|
It would teach them not to quote prices in BTC (and, more generally, that business and religion do not mix).  Take a look at buytrezor.com -- we already learned and pegged the price in dollars. :-) |
|
|
|
Trezor ils not really offline, if you look carefully, you will see a cable  offline != cableless Wifi is without a cable and is online. Trezor has a cable and is offline. |
|
|
|
mytrezor website is unusable. It freezes and few moments later browser tells me that trezor plugin is not responding. I can't even click on the "Support" link. Both firefox and chrome act the same way. Both trezor plugged in and plugged out.
write a support ticket to support@bitcointrezor.com |
|
|
|
And why would a paper wallet created with respect of best practices be not safe ?
Paper wallet IS safe. But spending it is not. (If you are using "sweep private key" and not an offline signing which is very cumbersome). |
|
|
|
but how will the client get the correct hash to compare to, and how will he compute the hash of the downloaded copy, on an untrusted machine (which is the assumption that justifies using a Trezor)?
We'd like to have each firmware release (and its hash) signed by independent set of people. Quite a few people already contacted us wanting to do that, but we are not yet there. The building and signing process is documented here: https://github.com/trezor/trezor-mcu -- but we need to prepare the place, where people will upload their signatures so we can show them in Firmware Update dialog. myTREZOR and TREZOR already show a hash of uploaded firmware, this signing process is just to justify the hash legitimacy and to prove that the provided firmware was indeed built from the provided sourcecode. |
|
|
|
But there's a "session_clear()" function which clears the PIN, cached root node and cached passphrase. There's also an accompanying protocol message to invoke it. Maybe it's the wallets responsibility to clear the session via this message.
Correct. Since firmware 1.2.1 there is a message called ClearSession that forces TREZOR to "forget" cached PIN and passphrase. The idea is that client sends this message after few minutes of user inactivity or when a screensaver kicks in or when a screen is locked. |
|
|
|
Is there a way to toggle the "request-password"-flag in the trezor without reinitializing it?
As no-password results in the same wallet as an empy password it would be nice to be able to switch between the settings (without having to generate a new seed).
I second this feature request. We'd need to update the firmware to extend the API to allow this change. I noted that in my Trello board and once we ship this feature via a version update then we can add it to myTREZOR. |
|
|
|
One thing I noticed though while restoring the seed while offline, the trezor never asked me to type in random words that werent part of my seed to throw off any keyloggers as it had done in the past, when i restored other seeds. its as if trezor knew I was on a secure computer.
Not true :-) We changed the behaviour in 1.2.1 firmware to "TREZOR always asks for 24 words" - i.e. asks for 0 fake words for 24 word mnemonic (was 12 fake words); asks for 6 fake words for 18 word mnemonic (was 9 words); asks for 12 fake words for 12 word mnemonic (was 6 fake words). |
|
|
|
These details are fuzzy and I'm not sure if this is how it works. Are there two separate sets of seeds words when you use multiple passphrases?
Moreorless correct but it's not needed to change seed. Just use different passphrases each time when you press Forget device and myTREZOR asks for a passphrase. |
|
|
|
Do you store those signing keys themselves on a Trezor?
Of course not, just the public ones. Right. TREZOR bootloader just contains the public keys against which the firmware signatures are checked. It would be nice we could get some reassurance they won't get compromised.
They won't. |
|
|
|
So in that photo a ways back..the classics you showed were black, is there any chance of getting those instead of white?
There might be good news next week for you :-) *wink* |
|
|
|
Do you store a copy of your public key on ROM inside of the devise which the devise then checks signatures against?
Yes. Actually there are 5 and we use 3-of-5 scheme. |
|
|
|
* Impossibility to re-flash the device with malicious code
Does this mean we won't be able to flash updates on the trezor? Like updates you could provide us that offer more functionality to the device? You can. But updates are signed and the signatures are checked so you cannot re-flash the device with malicious code only with a good one. :-) |
|
|
|
How do I fix this?
There is currently no fix for Chrome/Chromium. We are working on a solution (bridge) that will replace the plugin, but you'll need to use Firefox for now. |
|
|
|
Speaking of which. Say you put your bitcoins on a trezor, wrote down your mnemonic phrase and pin and password, then you accidentally droped your trezor in a volcano. Now you want to get your bitcoins back but you, for what ever reason, do not wish to order a new trezor. Is there a way to get them back without ordering another trezor?
You enter your mnemonic into Wallet32 on Android. Or compile a GUI application from https://com/trezor/trezor-crypto that is able to generate addresses/privkeys from mnemonic. My hope is that the new BitcoinJ based wallets (such as Multibit HD) will adopt the same approach as Wallet32 (i.e. BIP39+BIP44). |
|
|
|
As far as the metal trezors go, $300 is a steep price
There are no metal TREZORs at the moment, so there is no reason to discuss the (nonexistent) price. Making them is much MUCH harder than anyone here can imagine, so we decided to focus on plastic ones and making software better for the time being. |
|
|
|
hey slush, did ya see the old video I found of you guys? your old band Trezor.
Aw shit. What do we do now? We've been exposed! |
|
|
|
|
Show Posts
