TwinWinNerD
Legendary
Offline
Activity: 1680
Merit: 1001
CEO Bitpanda.com
|
|
August 04, 2014, 11:51:38 PM |
|
So people finally realized that paper wallets are fine until one wants to actually spend them? Well, not really It is just very complicate/much work to do. Using a cold PC to prepare a transaction and then broadcast it would be 100% safe (if no errors were made) but still, not very convenient.
|
|
|
|
TwinWinNerD
Legendary
Offline
Activity: 1680
Merit: 1001
CEO Bitpanda.com
|
|
August 04, 2014, 11:52:28 PM |
|
Am I wrong?
Yes, you are wrong. The moment you give your private key away, the malware might be faster than your intended software doing the sweep. Example: malware monitors all text inputs for Bitcoin addresses and when it sees one it immediately uses it. Your software waits until you press Enter. :-) So people finally realized that paper wallets are fine until one wants to actually spend them? That is a valid point. I might start using honey pots for importing now too :p
|
|
|
|
slush (OP)
Legendary
Offline
Activity: 1386
Merit: 1097
|
|
August 04, 2014, 11:53:13 PM |
|
But what is the advantage of entering the key into trezor instead of directly into the web interface. Once the whole key is entered the address is sweapt within seconds (I assume) so even if an attacker was infiltrating the PC, no harm could be done.
Well, considering highly specialized malware for stealing sweeping private keys to Trezor; such malware can disconnect Trezor just at time when it detects private key entered to UI. Then there's enough time (few seconds are actually enough) to send such private key to remote server and let it sweep all balance. Not very likely, yet possible. However me and stick had some brainstorming about sweeping private keys and although it's not very comfortable, we came with a solution which might satisfy paranoid users. It won't be worth a hassle for small amounts, rather for people sweeping their lifetime savings to Trezor.
|
|
|
|
klokan
|
|
August 04, 2014, 11:56:01 PM |
|
Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy. I don't think anyone is asking for private key import. What they want is have the BTC swept from the entered private key on to the next available address in the deterministic sequence of the Trezor. Once the sweep is complete then the imported private key is thown away. Hmm, I did not think about it this way. This is of course doable, but it would require new interface, because it does not fit any current Trezor interface + input of such private key is not implemented. Personally, I prefer not having another interface which will be used by one of the thousand users once. (security) expert who has a paper wallet should have thought through how he is going to spend coins from his paper. Non-experts will never use this. Implementing this thus gives nothing to the masses. There are more important milestones to achieve than polluting Trezor interface with stuff almost nobody would use.
|
|
|
|
dillpicklechips
|
|
August 05, 2014, 12:29:34 AM |
|
Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy. I don't think anyone is asking for private key import. What they want is have the BTC swept from the entered private key on to the next available address in the deterministic sequence of the Trezor. Once the sweep is complete then the imported private key is thown away. Exactly, but you have to type it in somewhere so it can be signed so it can be moved.
|
|
|
|
ALL IN
Newbie
Offline
Activity: 16
Merit: 0
|
|
August 05, 2014, 12:34:27 AM |
|
how about when the wallet stole or crash ? no guarantee to backup ? just worry stealer will interest look at evlution this digital.
|
|
|
|
TwinWinNerD
Legendary
Offline
Activity: 1680
Merit: 1001
CEO Bitpanda.com
|
|
August 05, 2014, 01:32:09 AM |
|
|
|
|
|
Anon136
Legendary
Offline
Activity: 1722
Merit: 1217
|
|
August 05, 2014, 01:39:24 AM |
|
Perhaps direct entry of paper wallets into the Trezor is the most secure method of inputting rather than trying to get a secure channel outside of it.
If you are THAT concerned about security than just author and sign the transaction on an offline computer and copy the signed transaction over to an online computer to broadcast it. You know the old school way like we had to do before trezor
|
Rep Thread: https://bitcointalk.org/index.php?topic=381041If one can not confer upon another a right which he does not himself first possess, by what means does the state derive the right to engage in behaviors from which the public is prohibited?
|
|
|
theskillzdatklls
|
|
August 05, 2014, 02:01:38 AM |
|
Glad to see this happening. Gonna buy a couple at the very least soon enough.
|
|
|
|
Anon136
Legendary
Offline
Activity: 1722
Merit: 1217
|
|
August 05, 2014, 02:37:19 AM |
|
Where can i find the public key that satoshilabs uses to sign their firmware updates?
|
Rep Thread: https://bitcointalk.org/index.php?topic=381041If one can not confer upon another a right which he does not himself first possess, by what means does the state derive the right to engage in behaviors from which the public is prohibited?
|
|
|
stick
|
|
August 05, 2014, 08:46:33 AM |
|
You probably figured it out by yourself, but the "bitcointalk promotion" above is a poor attempt of scam fraud
The only place to get TREZOR is BuyTREZOR.com!
Edit: Reported to moderator and already deleted. Thanks!
|
|
|
|
bitpop
Legendary
Offline
Activity: 2912
Merit: 1060
|
|
August 05, 2014, 08:49:37 AM |
|
Fuck the mods, my rating went down because they refused to delete the post. Worthless scum. I'm not reporting shit anymore, let this fucking forum burn.
|
|
|
|
sickpig
Legendary
Offline
Activity: 1260
Merit: 1008
|
|
August 05, 2014, 09:02:00 AM |
|
I'm glad to learn you're still putting effort and energy to back the slush's pool dev. It's not something the I would have taken for granted, especially if you take into account all the efforts you've put into the Trezor project
Pool has its own development team and I'm supervising them. There's a lot of effort behind the scene and there's bunch of new features coming very soon. The last thing they're working on now is new website, which offer such features to users... I didn't mean to say that slush's pool was an abandoned project. I was just surprised that you still have an active role in the development dept, even if it's only related to supervising.
|
Bitcoin is a participatory system which ought to respect the right of self determinism of all of its users - Gregory Maxwell.
|
|
|
stick
|
|
August 05, 2014, 09:02:19 AM |
|
$#&@$*&#*!@&(*@$
|
|
|
|
dnaleor
Legendary
Offline
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
|
|
August 05, 2014, 09:09:04 AM |
|
$#&@$*&#*!@&(*@$
BUY TREZOR AND HODL would be better
|
|
|
|
bitpop
Legendary
Offline
Activity: 2912
Merit: 1060
|
|
August 05, 2014, 09:13:51 AM |
|
I sodld mine. Couldn't afford it right now. But it's amazing.
|
|
|
|
cor
|
|
August 05, 2014, 12:06:39 PM |
|
Fuck the mods, my rating went down because they refused to delete the post. Worthless scum. I'm not reporting shit anymore, let this fucking forum burn.
* cor sending a lil +trust to bitpop
|
|
|
|
keithers
Legendary
Offline
Activity: 1456
Merit: 1001
This is the land of wolves now & you're not a wolf
|
|
August 05, 2014, 05:27:38 PM |
|
Is there are thread on here that discusses the use of this wallet? There is no trezor forum or anything like that, right? I purchased one (and I am waiting for it to arrive), but I am anticipating having some questions about using it. I literally don't know anyone else personally that uses BTC or Trezor...
|
|
|
|
|
keithers
Legendary
Offline
Activity: 1456
Merit: 1001
This is the land of wolves now & you're not a wolf
|
|
August 05, 2014, 06:02:10 PM |
|
Thanks, I appreciate it. It works with all of the bitcoin clients or do I have to use a specific wallet i.e. Bitcoin Core, electrum, etc? Sorry to hijack the thread
|
|
|
|
|