[ESHOP launched] Trezor: Bitcoin hardware wallet

[slush]

EDIT : Last question, website would be mandatory or local password manager can also manage keylist?

The idea of password manager is not bounded to website in any way. We just see web UI as the best option for common users, as they're used to have everything in the browser.

Ad Android - I hope there'll be Andoid wallet with Trezor quite soon. Currently Wallet32 is the best candidate so far. Not the most beautiful UI, but works very well.

[K1773R]

How far do you suppose one could take this thing?

In near future (except improving Trezor for bitcoin signing usage like BIP70 and multisig) we plan to turn Trezor into identity management token, something similar like failed myIDkey. In contrary to megalomaniacal vision of myIDkey, we want to start with low hanging fruit and improve stuff as time go.

There's already proof of concept for harddisk encryption protected by Trezor: https://github.com/trezor/python-trezor/blob/master/tools/encfs_aes_getpass.py This works only on Linux, but the concept can be implemented on any OS.

There's plenty possibilities how to integrate Trezor with all stuff directly, like PEM modules on Unix (ssh), Windows login, website authentication, email encryption and signatures etc.

It's really wide scope. Let's see how much interest of Trezor there'll be in Bitcoin community first :-).

It would be awesome if there would be LUKS support.

[halorose]

WOOOOOOWOOOOOOW,SO GREAT Bitcoin hardware wallet. 

[devthedev]

Hey slush do you have any plans of offering the metal version in the shop?

[molecular]

Hey slush do you have any plans of offering the metal version in the shop?

He said above they have some left as replacements. They might throw these at the market, but it's not decided yet.

I have a feeling these first edition metal trezors could become quite valuable.

@slush, stick, cor: how many have been produced?

[P_Shep]

I see there's a firmware update and I've had a quick look in this thread but no mention of it. Would be nice to have confirmation, maybe in the first post, of the latest version.

[P_Shep]

Also, that massive long fingerprint we should compare... Maybe a bit much.
Perhaps have an abridged version and the full-length available for the paranoid at a press of a button?

[kkurtmann]

can confirm firmware update was recommended when I first plugged it in

[Coiner.de]

Did you, TREZOR devs, forget to increase the version number? The new firmware still reports as 1.2.0 after a successful update.

[P_Shep]

Also, while your logo is very nice, is there other information you could put on the screen? Balance, maybe?

[prismicide]

security researchers that tested Trezor were a bit disappointed that they couldnt trick Trezor with  buffer overflow

What are the name of these security researchers ?

[stick]

Did you, TREZOR devs, forget to increase the version number? The new firmware still reports as 1.2.0 after a successful update.

Are you sure? If it is "1.2.0" on display in bootloader, then it is a version of a bootloader not flashed firmware.

myTREZOR will not let you in if you had 1.2.0 and will require an update to 1.2.1 in order to get rid of the dialog.

[stick]

Also, while your logo is very nice, is there other information you could put on the screen? Balance, maybe?

TREZOR does not know the balance because it's offline. Also computing the balance is not trivial operation and you would need to stream a lot of data into the TREZOR so it could verify the balance correctness.
And showing balance without checking if it's correct does not make sense.

[slush]

I see there's a firmware update and I've had a quick look in this thread but no mention of it. Would be nice to have confirmation, maybe in the first post, of the latest version.

There's release note on satoshilabs.com/news, so you can see it is valid.

[intron]

And what happens when 'mytrezor.com'
is down for some reason? Can I still make
payments?

[stick]

And what happens when 'mytrezor.com'
is down for some reason? Can I still make
payments?

People from Electrum, Multibit, Armory and others are working on TREZOR integration. Once done you can use these clients to perform operations.

[intron]

And what happens when 'mytrezor.com'
is down for some reason? Can I still make
payments?

People from Electrum, Multibit, Armory and others are working on TREZOR integration. Once done you can use these clients to perform operations.

Ok, thanks. I wait a bit then before
moving significant amounts:-)

[BurtW]

And what happens when 'mytrezor.com'
is down for some reason? Can I still make
payments?

People from Electrum, Multibit, Armory and others are working on TREZOR integration. Once done you can use these clients to perform operations.

Ok, thanks. I wait a bit then before
moving significant amounts:-)

I have already moved "significant" amounts to my Trezor because if I cannot wait for the web site to come back up then, as a last resort, I can always just enter my seed into the adroid Wallet32 ap, wait for it to sync, and then send my BTC from there.

Also, I do not consider the Trezor to be one of my "everyday" wallets.  In my mind it is my BTC "safe" used for longer term storage.  If the web site is down for an hour or two, or even a day, that is not a big concern for me.  And if it is down for and extended period of time I always have wallet32 as a backup.

[P_Shep]

Also, while your logo is very nice, is there other information you could put on the screen? Balance, maybe?

TREZOR does not know the balance because it's offline. Also computing the balance is not trivial operation and you would need to stream a lot of data into the TREZOR so it could verify the balance correctness.
And showing balance without checking if it's correct does not make sense.

I would suggest then you could add a simple message protocol... the trezor could be sent short strings to be displayed on screen from the bridge software.
Just an idea.

[stick]

I would suggest then you could add a simple message protocol... the trezor could be sent short strings to be displayed on screen from the bridge software.
Just an idea.

This does not make sense at all. TREZOR will never show a message that its authenticity cannot be verified.