[ESHOP launched] Trezor: Bitcoin hardware wallet

[chrisrico]

Ahem, unless the browser only replaces the address when the amount is large enough, only when it is being used for the seonc time in N minutes...

Why would you copy the address from the browser again if you just had a successful bitcoin transaction?

Anyway, this address replacing issue is a much bigger problem than for just the Trezor, and that's why the payment protocol was created. I'm not sure if it's supported yet by the Trezor, but it's in the works at least.

[devthedev]

It would be nice if it was possible to rename the accounts to better identify them. Instead of Account #1, Account #2, etc.

[circusmidget11]

It would be nice if it was possible to rename the accounts to better identify them. Instead of Account #1, Account #2, etc.

I think that should be an option.

[kkurtmann]

Ahem, unless the browser only replaces the address when the amount is large enough, only when it is being used for the seonc time in N minutes...

Why would you copy the address from the browser again if you just had a successful bitcoin transaction?

Anyway, this address replacing issue is a much bigger problem than for just the Trezor, and that's why the payment protocol was created. I'm not sure if it's supported yet by the Trezor, but it's in the works at least.

Why are people reusing addresses anyways? Do you like to reduce anonymity for yourself and the people you transact with?

[kkurtmann]

question for somebody with knowledge of trezor.
If I shared my 24 word recovery seed, what would the odds be of anyone finding out which 34 character passphrase had any funds on it?

[klokan]

question for somebody with knowledge of trezor.
If I shared my 24 word recovery seed, what would the odds be of anyone finding out which 34 character passphrase had any funds on it?

This one has no good answer. If your passphrase is "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" then it is quite simple to find your funds. If it is something like "516sd5ghfAFAF/*/523*&^*GDY786hgu76sa8*^&" then it is more difficult. You can use this site to find out: https://www-ssl.intel.com/content/www/us/en/forms/passwordwin.html

But the bigger problem is that, sharing your seed, you open a possibility to a hacker (keylogger) attack on your account. The attacker does not have to guess your password. He can try to catch you entering it.

[kkurtmann]

question for somebody with knowledge of trezor.
If I shared my 24 word recovery seed, what would the odds be of anyone finding out which 34 character passphrase had any funds on it?

This one has no good answer. If your passphrase is "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" then it is quite simple to find your funds. If it is something like "516sd5ghfAFAF/*/523*&^*GDY786hgu76sa8*^&" then it is more difficult. You can use this site to find out: https://www-ssl.intel.com/content/www/us/en/forms/passwordwin.html

But the bigger problem is that, sharing your seed, you open a possibility to a hacker (keylogger) attack on your account. The attacker does not have to guess your password. He can try to catch you entering it.

thanks for the answer

[Perlover]

Can stick/slush to add checking option to show current receiving address not only in computer but in the Trezor's screen too and this receiving address should be sent by client software through BIP44 path from computer to the Trezor (the Trezor should simple calculate address by sent BIP44 path from computer)?

I'm almost sure that I replied to this question at least twice already. Better ask via email next time. Forum is very bad medium for asking questions you want answers to, because it's very noisy.

Anyway, here I go again: we implemented this in firmware recently, after we push the next version update, we'll enable this functionality in myTREZOR.

Stick, i didn't find here your answer

First, i submitted the ticket (2014-08-13) with link to my post here about fishing
Ticket is FGZ-836-82777 in your system support.bitcoin.cz
There is no answer, ony answer that the ticket has been forwarded to developers.

And i didn't find your answer here too

And about implementation - i am glad to see it!

Thank!

[blossbloss]

New question that I don't think I've seen before:

When I buy a 2nd Trezor (in black, when available  ), if I use my same Recovery Seed and multi-passphrase to make a clone of my White Trezor, will they stay synced?

My intuition tells me that any transactions made on either Trezor (in any order) will immediately be synced up when the other Trezor is plugged in to the online computer through myTrezor.com.  This seems logical to me since the same heirarchical / deterministic addresses and keys are created in both.  The only thing I'm not sure about is when I request a new address on one (say the White one), will a signed transaction to the blockchain be recognized when I plug in the other one (Black)?

Basic question: Is it safe to make two identical Trezors? (Same: device label, recovery seeds, multi-passphrases, PIN)

Thanks!

[dillpicklechips]

New question that I don't think I've seen before:

When I buy a 2nd Trezor (in black, when available  ), if I use my same Recovery Seed and multi-passphrase to make a clone of my White Trezor, will they stay synced?

My intuition tells me that any transactions made on either Trezor (in any order) will immediately be synced up when the other Trezor is plugged in to the online computer through myTrezor.com.  This seems logical to me since the same heirarchical / deterministic addresses and keys are created in both.  The only thing I'm not sure about is when I request a new address on one (say the White one), will a signed transaction to the blockchain be recognized when I plug in the other one (Black)?

Basic question: Is it safe to make two identical Trezors? (Same: device label, recovery seeds, multi-passphrases, PIN)

Thanks!

It should all work. I'm just not sure what would happen if you used those two devices at the same time on mytrezor.com with two computers.

[kkurtmann]

New question that I don't think I've seen before:

When I buy a 2nd Trezor (in black, when available  ), if I use my same Recovery Seed and multi-passphrase to make a clone of my White Trezor, will they stay synced?

My intuition tells me that any transactions made on either Trezor (in any order) will immediately be synced up when the other Trezor is plugged in to the online computer through myTrezor.com.  This seems logical to me since the same heirarchical / deterministic addresses and keys are created in both.  The only thing I'm not sure about is when I request a new address on one (say the White one), will a signed transaction to the blockchain be recognized when I plug in the other one (Black)?

Basic question: Is it safe to make two identical Trezors? (Same: device label, recovery seeds, multi-passphrases, PIN)

Thanks!

of course it is. this is how you restore your lost or broken trezor.

[Slesh]

Hi

 yesterday was some BTC stollen from my wallet (PC). I dont know how or who or how did this happened.
 Will trezor help again this ?
 

[sipak]

Can stick/slush to add checking option to show current receiving address not only in computer but in the Trezor's screen too

P.S. I don't want to write here about this problem anymore.
I wrote 4-5 posts about this and zero reaction from developer.

Did you contact their support? I wrote them about this missing security feature of showing receiving address on the Trezor's screen and they replied in very fast manner: this feature is already on their radar. And I've seen somebody else here claiming the same as I do...

[Erdogan]

Hi

 yesterday was some BTC stollen from my wallet (PC). I dont know how or who or how did this happened.
 Will trezor help again this ?
 

Impossible to say, as you don't know how they were stolen.

Still trezor is the safest option currently.

[bitkilo]

After learning the most i could about wallets in the last week or so im going with multibit ofline usb starage untill i can get a trezor in the next week or so.
Anybody used on of the mycellium usb cold starage thats ment to be about $40, if so an good?

[bitpop]

After learning the most i could about wallets in the last week or so im going with multibit ofline usb starage untill i can get a trezor in the next week or so.
Anybody used on of the mycellium usb cold starage thats ment to be about $40, if so an good?

Entropy is good but spending is hard.

[Slesh]

Hi

 yesterday was some BTC stollen from my wallet (PC). I dont know how or who or how did this happened.
 Will trezor help again this ?
 

Impossible to say, as you don't know how they were stolen.

Still trezor is the safest option currently.

All I can found that BTC was sent to 183u3xkUUqpVwJmmLqqt14cchS5Mu9CQk7 and then to 17gH1u6VJwhVD9cWR59jfeinLMzag2GZ43 .. but I had some secure things like firewall antispam .. .etc. on my computer .. but i looks it is not enough .. So I hope trezor will make it safe for next time.

[JorgeStolfi]

Hi

 yesterday was some BTC stollen from my wallet (PC). I dont know how or who or how did this happened.
 Will trezor help again this ?
 

Impossible to say, as you don't know how they were stolen.

Still trezor is the safest option currently.

All I can found that BTC was sent to 183u3xkUUqpVwJmmLqqt14cchS5Mu9CQk7 and then to 17gH1u6VJwhVD9cWR59jfeinLMzag2GZ43 .. but I had some secure things like firewall antispam .. .etc. on my computer .. but i looks it is not enough .. So I hope trezor will make it safe for next time.

Were you handling that wallet when the first transaction happened, or shortly before? 

Do you use Dropbox or some other external storage?

Was the wallet totally emptied, or only part of it?

What software/hardware did you use to generate your private keys?
 

[Slesh]

Hi

 yesterday was some BTC stollen from my wallet (PC). I dont know how or who or how did this happened.
 Will trezor help again this ?
 

Impossible to say, as you don't know how they were stolen.

Still trezor is the safest option currently.

All I can found that BTC was sent to 183u3xkUUqpVwJmmLqqt14cchS5Mu9CQk7 and then to 17gH1u6VJwhVD9cWR59jfeinLMzag2GZ43 .. but I had some secure things like firewall antispam .. .etc. on my computer .. but i looks it is not enough .. So I hope trezor will make it safe for next time.

Were you handling that wallet when the first transaction happened, or shortly before?   - No, only incoming trancaction All i See is one transaction few hours befonr.

Do you use Dropbox or some other external storage? - No external (Inet) devices .. only my own NAS with firewall and restricted IPs

Was the wallet totally emptied, or only part of it? - tottlly empty after that attack

What software/hardware did you use to generate your private keys? - sorry but I dont understand this queston. Do you mean passwords? Or what type of keys?
 

[JorgeStolfi]

yesterday was some BTC stollen from my wallet (PC). I dont know how or who or how did this happened.
 Will trezor help again this ?

I created a new thread for this discussion since it does not relate to the Trezor.  Feel free to continue the discussion there if you wish.