[ESHOP launched] Trezor: Bitcoin hardware wallet

[chriswilmer]

noticed it is now possible to sign messages with the trezor

Amazing! I'm going to begin tying my online identity to my trezor then.

14JSyQrwABxphviQUMwzxvGtTYxFBCeYQ8

ILqamgF5mXV+vQuX7B4VuXflAGX9QUsl/9hD5eEGZohYe7KnqTMubcq5iRsRxmIM/13xUCS7CSFzDiSFwv7Mtp8=

Weird, just tried signing a message using myTrezor in Firefox and nothing happened. What's supposed to happen when you click "sign" ?

Tried with another account and it worked. So, when it DIDN'T work, I had entered a "blank" password and thus entered an unused account... when I used the receiving Bitcoin address to sign a message (which hadn't yet received any bitcoins) nothing happened when I clicked "sign"

[Anon136]

noticed it is now possible to sign messages with the trezor

Amazing! I'm going to begin tying my online identity to my trezor then.

14JSyQrwABxphviQUMwzxvGtTYxFBCeYQ8

ILqamgF5mXV+vQuX7B4VuXflAGX9QUsl/9hD5eEGZohYe7KnqTMubcq5iRsRxmIM/13xUCS7CSFzDiSFwv7Mtp8=

Weird, just tried signing a message using myTrezor in Firefox and nothing happened. What's supposed to happen when you click "sign" ?

Tried with another account and it worked. So, when it DIDN'T work, I had entered a "blank" password and thus entered an unused account... when I used the receiving Bitcoin address to sign a message (which hadn't yet received any bitcoins) nothing happened when I clicked "sign"

Yep i had to send 0.00006 bitcoins to the address that I used to sign that message before it would work.

Also there is a rather short limit to the longest transaction it can sign. That makes its functionality for doing things like signing contracts limited. I suppose you could make a hash of a contract and sign that hash though. Probably worth it for the security that you would gain from using a trezor instead of keeping the keys to your online identity on a computer. I wonder if people will be able to to get used to and accept signing a hash of a contract rather than signing the contract its self.

[chriswilmer]

FEATURE REQUEST!!!

Is it possible for myTrezor to NOT prompt the user for a password, even if one is needed? There could be a little password field in the "advanced" section to optionally type in. I feel like that would really add to the whole plausible-deniability feature of a Trezor. (As for what the interface shows when no password is entered, there should probably be a default "null" password of some kind that is assumed)

[Anon136]

FEATURE REQUEST!!!

Is it possible for myTrezor to NOT prompt the user for a password, even if one is needed? There could be a little password field in the "advanced" section to optionally type in. I feel like that would really add to the whole plausible-deniability feature of a Trezor. (As for what the interface shows when no password is entered, there should probably be a default "null" password of some kind that is assumed)

+1. The other, and probably better, alternative is to simply take that option away when setting up the trezor and have the password request be the default, then if you dont want to use a password than simply log in without a password. Probably a good idea to go ahead and put a little caption on the login screen that says "password optional" or "password not required".

[blossbloss]

Can someone please provide a short step-by-step tutorial on how to use the Trezor to sign a hash of a document?
Thanks

[Anon136]

Can someone please provide a short step-by-step tutorial on how to use the Trezor to sign a hash of a document?
Thanks

From memory:

Click on the account that you want to use. Then near the top right you will see a sign and verify button. Click it. It will bring up 2 forms that you can fill out, sign and verify. The first field will be the message. Enter the message that you want to sign in the message field. The second field will be the address. begin typing the address that you want to use. it will detect the address you are entering and provide an option to fill out the rest of the address for you. Click sign. Now look at your trezor. It will ask you to confirm that you want to sign the message. Confirm that you do. Now enter your pin. Look back at the form page in your browser. you will see that the formerly empty signature box will now contain a series of characters. That is your digital signature.

[2586]

Also there is a rather short limit to the longest transaction it can sign. That makes its functionality for doing things like signing contracts limited. I suppose you could make a hash of a contract and sign that hash though. Probably worth it for the security that you would gain from using a trezor instead of keeping the keys to your online identity on a computer. I wonder if people will be able to to get used to and accept signing a hash of a contract rather than signing the contract its self.

That's normally how signing works (with PGP, and I assume with other systems as well). Does signing a message with a Bitcoin private key not create a hash of the message as an intermediate step? Or is the Trezor implementation missing that? Is there a specification for how message signing and verification should be done?

[Anon136]

Also there is a rather short limit to the longest transaction it can sign. That makes its functionality for doing things like signing contracts limited. I suppose you could make a hash of a contract and sign that hash though. Probably worth it for the security that you would gain from using a trezor instead of keeping the keys to your online identity on a computer. I wonder if people will be able to to get used to and accept signing a hash of a contract rather than signing the contract its self.

That's normally how signing works (with PGP, and I assume with other systems as well). Does signing a message with a Bitcoin private key not create a hash of the message as an intermediate step? Or is the Trezor implementation missing that? Is there a specification for how message signing and verification should be done?

That is a question for someone smarter than myself. All i am sure of is that i tried to sign a message that was more than a paragraph or two long and it refused. Presumably because it does not have enough ram on the devise to load a longer message and perform all of its internal calculations. if you are correct and the normal procedure in pgp is to create a hash and sign that, than perhaps they could make it so that mytrezor.com could create the hash browser side and send that to the trezor to sign.

[Valzador]

Is it possible for me to buy a metal case for my trezor?

[Mickeyb]

Again, is trezor supported by multibit hd or is this still in development and I have to use only trezor wallet?? I can't find anything online, except is stated on multibit website that this is possible, but I don't want to go and download HD because I have already regular multibit on my computer.

Thanks

[World]

Trezor in Money Museum in Zürich, Switzerland
source:
https://www.cryptocoinsnews.com/bitcoin-exhibit-launches-money-museum-zurich/

[klokan]

Is it possible for me to buy a metal case for my trezor?

Nope, check the thread history for details.

[cor]

Again, is trezor supported by multibit hd or is this still in development and I have to use only trezor wallet?? I can't find anything online, except is stated on multibit website that this is possible, but I don't want to go and download HD because I have already regular multibit on my computer.

Thanks

Trezor + MultiBit HD is still in development but I've seen screenshots of the work in progress and it looks promising.

[TwinWinNerD]

How many units sold total? Only a rough number!

[cor]

How many units sold total? Only a rough number!

roughly few thousands 

[AussieHash]

How many units sold total? Only a rough number!

roughly few thousands 

I had hoped many more would have been sold by now given 141,614 subscribers to /r/Bitcoin and 393,788 accounts in bitcointalk. Plus the hundreds of millions spent on ASIC preorders.

[stick]

I had hoped many more would have been sold by now given 141,614 subscribers to /r/Bitcoin and 393,788 accounts in bitcointalk. Plus the hundreds of millions spent on ASIC preorders.

Sadly most of the people would rather invest in shady mining companies instead of increasing the security of their coins.

[dillpicklechips]

How many units sold total? Only a rough number!

roughly few thousands 

I had hoped many more would have been sold by now given 141,614 subscribers to /r/Bitcoin and 393,788 accounts in bitcointalk. Plus the hundreds of millions spent on ASIC preorders.

I think many of the "early adopters" are already competant with computer security. Trezors are critical for the mainstream adopters though who have no clue how to secure a computer. When that happens I think the sales will pick up.

[fonsie]

Any ETA on the release of the new Trezor Bridge for Chrome support on Ubuntu?

[JorgeStolfi]

Trezors are critical for the mainstream adopters though who have no clue how to secure a computer.

Unfortunately, those computer-naive bitcoiners are also the most likely to fall for "social engineering" hacks, misuse the Trezor, and lose their coins in spite of it.

According to some estimates of bitcoin's wealth distribution, most of the people who own some bitcoin own only 1 bitcoin or less.  The Trezor is not worth the expense for them.