[ESHOP launched] Trezor: Bitcoin hardware wallet

[klokan]

Anyone know if there's epoxy inside to destroy it if opened?

Tried to open it, but the plastic is rather
soft and will get damaged in the process.
Sacrificing a 'First Edition' only to have look
at a MCU + OLED display is a bit too much;)  

One picyure for you:
https://lh4.googleusercontent.com/-bXllT2y2nkA/U99emAPcg6I/AAAAAAAADEM/L_-3M3UZ2pM/w1280-h800-p-k/IMG_20140530_175838.jpg

Nice:)

- USB connector + with decoupling to GND
- USB ESD protection
- power reversal protection diode
- resetable fuse
- 5V to 3V3 (?) regulator
- STM32F205 ARM with USB + LCD interface
- 8Mc (?) xtal
- two push buttons
- OLED screen
- some passives

It's all firmware...

https://github.com/satoshilabs/docs/blob/master/trezor-tech/hardware.rst

[intron]

https://github.com/satoshilabs/docs/blob/master/trezor-tech/hardware.rst
--
Takes all the fun out of reverse engineering;)

[bitpop]

So to detect tampering, the sonically welded plastic case would show signs of being opened?

[bitpop]

Ps I've played with mine and it's amazing. Beautiful screen, no lag, plug and play except browser plugin, web wallet works great. These oled screens burn up real quick even if not using them though. I miss my old Ericsson Bluetooth watch.

I've had to sell it, but I'll buy again if there's an android app and included otg cable.

[intron]

Ps I've played with mine and it's amazing. Beautiful screen, no lag, plug and play except browser plugin, web wallet works great. These oled screens burn up real quick even if not using them though.

I agree. It's very well done:-)

[coininaction]

Got my trezor today! Really nice! But got issues with installing Browser plugin! On chrome i get an error message

Code:

Bitcoin Trezor has crashed

And on FF 30 i get just the header bar and under this a blank page! How i could install plugin then? Any ideas? Does somebody of you get same problems on installation?

[slush]

Got my trezor today! Really nice! But got issues with installing Browser plugin! On chrome i get an error message

Code:

Bitcoin Trezor has crashed

Mac, right? We're aware of some compatibility issues. In few days we'll release replacement for Trezor Plugin - Trezor Bridge, which will solve all issues related to NPAPI/browser plugin system.

I'm sorry for such issue, please write to support@bitcointrezor.com about your problems, we'll contact you with beta release of Trezor Bridge for feedback, if it solves your problems.

[slush]

I've had to sell it, but I'll buy again if there's an android app and included otg cable.

We're cooperating with Android wallet devs, Trezor should work on Android soon(ish). Then we'll offer bundle with OTG cable as well...

[coininaction]

Got my trezor today! Really nice! But got issues with installing Browser plugin! On chrome i get an error message

Code:

Bitcoin Trezor has crashed

Mac, right? We're aware of some compatibility issues. In few days we'll release replacement for Trezor Plugin - Trezor Bridge, which will solve all issues related to NPAPI/browser plugin system.

I'm sorry for such issue, please write to support@bitcointrezor.com about your problems, we'll contact you with beta release of Trezor Bridge for feedback, if it solved your problems.

yup mac - k thx not a problem - will wait a few days Thx for fat reply!

[Muhammed Zakir]

I've had to sell it, but I'll buy again if there's an android app and included otg cable.

We're cooperating with Android wallet devs, Trezor should work on Android soon(ish). Then we'll offer bundle with OTG cable as well...

Any idea on bringing it on IOS?

Kindly,
       MZ

[dillpicklechips]

It would be cool if you could input a private key directly onto the trezor and it would then immediately create a transaction sending it to your trezor addresses.

It would be a pain to enter but I'd be willing to bet quite a few people would be willing to cycle through every digit one at a time using the two trezor buttons. It would be safer than trying to figure out offline/online transactions for larger amounts.

[slush]

It would be cool if you could input a private key directly onto the trezor and it would then immediately create a transaction sending it to your trezor addresses.

If you mean sweeping private keys (like casascius coins or Robocoin privkeys), it is quite high in our priority list. I'm not yet sure about input method, entering bits by clicking buttons seems a bit... uncomfortable. Maybe something like PIN entry...?

[dillpicklechips]

It would be cool if you could input a private key directly onto the trezor and it would then immediately create a transaction sending it to your trezor addresses.

If you mean sweeping private keys (like casascius coins or Robocoin privkeys), it is quite high in our priority list. I'm not yet sure about input method, entering bits by clicking buttons seems a bit... uncomfortable. Maybe something like PIN entry...?

Ya two buttons makes it a challenge. It would be slow but worth the 10 minutes to enter rather than expose a key on a computer. PIN entry could work like texting on a phone where each pin button was assigned a few letters and a number. Then the trezor display would show the current key as it's punched in on the computer using the pad. Or just use the two buttons. One button cycles through all the letters while the other one selects next digit.

[P_Shep]

Move all but 5 BTC to my hardware now

[klondike_bar]

so i have a few questions / concerns. I love the product and the signing transactions without a hot wallet loading a key, but I want to be sure its a good method for cold storage security.

1) if the trezor breaks or is stolen it can be recovered by a 12word seed. How can i secure this code so that it cannot be stolen and used to take access from a different trezor?
2) what measures are in place to detect / prevent lo-jacked trezors or malicious code/components?
3) does the trezor retain access to all its addresses and change addresses? Can I constantly reload it to the same address without compromising the coins?
4) how does the trezor generate an address - could it be replicated based on the physical design?
5) can the trezor wallet be accessed using the seed but not another trezor? What if trezor goes out of business and you cannot buy a new trezor to load with the seed?
6) I heard a single trezor can hold multiple distinct wallets under the same seed but different passwords. How could I set that up to store spending quantities seperately (and secretly) from my long-term storage address?

I want to use this as a fuctional backup for the majority of my bitcoin funds, with the seed safely stored in a few offsite files/safes and some safeguards (password?) on those. I want it to act as the payment address for my mining and not worry that it may not be accessible if something happens to the trezor or trezor support.

1) It's up to you to properly secure the paper backup. You can also memorize the seed if you have good memory but it's 24 words now by default If you choose to use the pass-phrase, the 24 words alone cannot be used to access you coins.
2) The official firmware release is signed by the developers. If someone try to put the custom firmware on your Trezor you will see the warning on the screen.
3) Addresses are generated deterministically. While using the same seed & passphrese your Trezor will always have access to the same keys. Regarding the address re-using, standard recommendations applies. It's possible, but not recommended. You will not loose your bitcoins but you may loose some privacy.
4) Way that Trezor generate the keys from master private key is described by BIP-0032. The master private key itself is generated using entropy that device can provide itself with entropy provided by your PC. The master key is then represented by the 24 words from dictionary defined in BIP-0039
5) You can use any compatible software wallet. All you need to do is enter your seed and pass-phrase. Currently there is only Wallet32 for android, but support for Electrum, Multibit and Armory is coming.
6) If you already initialized your Trezor with a passphrase, just enter a different one in the "log-in" process. Depending on what pass-phrase you enter, you will get access to different wallets. But you can also have multiple accounts under one passphrase (although all of the accounts corresponding to specific pass-phrase are visible so it's only good for separating the funds instead of hiding them)

well i bought one - guess ill have to see it when it arrives.

I mostly want it to have two passwords - one tied to a fairly untouched wallet that would be constantly mined to by my mining hardware, and occasionally used to pay from to order new equipment. The other would be a daily-driver, with access to a smaller wallet used every few days for making online purchases securely.

I want to be sure that both seperate wallets operate correcgtly and that any deposits i send to the 'original address' for either will be available to the trezor to use and not fragmented uselessly across the change addresses

[BurtW]

Ideally for privacy your pool would send each new payment to the next public address in the sequence so that every address gets one single payment.  But, of course, this only works if your pool supports sending payments to the deterministic public address sequence.

Question:  Does anyone know any pools that support this?  If not a pool should code this up to differentiate themselves from all the other pools.

[JorgeStolfi]

Ideally for privacy your pool would send each new payment to the next public address in the sequence so that every address gets one single payment.  But, of course, this only works if your pool supports sending payments to the deterministic public address sequence.

Question:  Does anyone know any pools that support this?  If not a pool should code this up to differentiate themselves from all the other pools.

You mean, the miner generates a list of N addresses and sends it to the pool, right? 

[sickpig]

Ideally for privacy your pool would send each new payment to the next public address in the sequence so that every address gets one single payment.  But, of course, this only works if your pool supports sending payments to the deterministic public address sequence.

Question:  Does anyone know any pools that support this?  If not a pool should code this up to differentiate themselves from all the other pools.

I'd say slush should add it just to set a good example. If technically feasible without destroy privacy.

[BurtW]

Ideally for privacy your pool would send each new payment to the next public address in the sequence so that every address gets one single payment.  But, of course, this only works if your pool supports sending payments to the deterministic public address sequence.

Question:  Does anyone know any pools that support this?  If not a pool should code this up to differentiate themselves from all the other pools.

I'd say slush should add it just to set a good example. If technically feasible without destroy privacy.

Good idea!

Ideally for privacy your pool would send each new payment to the next public address in the sequence so that every address gets one single payment.  But, of course, this only works if your pool supports sending payments to the deterministic public address sequence.

Question:  Does anyone know any pools that support this?  If not a pool should code this up to differentiate themselves from all the other pools.

You mean, the miner generates a list of N addresses and sends it to the pool, right? 

No, the sender knows how to create the entire public key sequence.  There is a BIP for this.

[slush]

Ideally for privacy your pool would send each new payment to the next public address in the sequence so that every address gets one single payment.  But, of course, this only works if your pool supports sending payments to the deterministic public address sequence.

Yes, this is be possible. Instead of filling bitcoin address, user will put his xpub (master public key of his mytrezor account) and pool will generate unique address for every payout. I have it already in pool's todo, right now we're finalizing new pool website (finally , then we will add features like this.