[ESHOP launched] Trezor: Bitcoin hardware wallet

[slush]

They are sent from Czech republic via standard mail Sad

...for free. Yes, sometimes standard post/USPS can take longer, but most packages go quite fast (like 3 weeks to US).

...you seriously need to find a trusted american reseller or start using DHL/UPS...

We do offer DHL with delivery in 3-5 business days worldwide, check out buytrezor.com :-).

[slush]

the upcoming 1.3.0 firmware update is released.

When?

Most likely before Christmas.

[slush]

Now taking the Trezor back to the 64-bit machine it appears to be doing the correct things with the standard wallet behaviour (no firmware issues now) but is still really slow and sluggish to keyboard and mouse inputs.

If this problem persists, it may be caused by some issues in plugin. In few days we'll releae Trezor Bridge for public testing (replacement for Trezor Plugin), which solves many of known issues across all browsers.

Another point on the plug-ins are they open source?

Trezor Plugin is closed, but new Trezor Bridge is opensourced: https://github.com/trezor/trezord

It's not released to public yet, but if you want give it a try... :-)

[lyth0s]

They are sent from Czech republic via standard mail Sad

...for free. Yes, sometimes standard post/USPS can take longer, but most packages go quite fast (like 3 weeks to US).

...you seriously need to find a trusted american reseller or start using DHL/UPS...

We do offer DHL with delivery in 3-5 business days worldwide, check out buytrezor.com :-).

Express shipping by DHL can be added in the Shopping cart by clicking the Add Express shipping (DHL) for 39.00 USD link.
Delivery time: 3-5 business days, full track and trace capability.

Hmm I guess I missed that option at checkout, has it always been there? $40 for shipping such a small package also seems quite pricey, is UPS any cheaper?

I can ship an Antminer S1 to Europe for $80....and those things are heavy.

[dnaleor]

mytrezor.com is down again...

Please guys, fix this in the next 12 hours. I'll give a presentation about bitcoin which will include a demonstration of the Trezor tomorrow...

edit: fixed...

[slush]

Hmm I guess I missed that option at checkout, has it always been there? $40 for shipping such a small package also seems quite pricey, is UPS any cheaper?

DHL shipping in current form has been added like two weeks ago. Well, it's $35, but I agree it's rather high price. We're negotiating better deal, but I cannot promise anything right now.

[slush]

mytrezor.com is down again...

Yeah, it was down for few minutes; current backend is driving me nuts. It's failing more and more often and I'll celebrate when I'll "rm -rf" it! We implemented heavy automatic checks and watchdog, so at least it can recover itself after few minutes of downtime.

In meantime we're working hard on replacing current backend by opensource Insight block explorer, but it requires significant refactoring of network API in myTREZOR.

[lyth0s]

Hmm I guess I missed that option at checkout, has it always been there? $40 for shipping such a small package also seems quite pricey, is UPS any cheaper?

DHL shipping in current form has been added like two weeks ago. Well, it's $35, but I agree it's rather high price. We're negotiating better deal, but I cannot promise anything right now.

Oh I see. yeah I placed my order on November 19th (almost a month ago) so the DHL option must have not been there.

/patiently awaiting my trezor.

[dnaleor]

mytrezor.com is down again...

Yeah, it was down for few minutes; current backend is driving me nuts. It's failing more and more often and I'll celebrate when I'll "rm -rf" it! We implemented heavy automatic checks and watchdog, so at least it can recover itself after few minutes of downtime.

In meantime we're working hard on replacing current backend by opensource Insight block explorer, but it requires significant refactoring of network API in myTREZOR.

yeah, I know you are working hard on this.
I just hope I will be able to demonstrate the trezor without issues tomorrow :/

[slush]

I just hope I will be able to demonstrate the trezor without issues tomorrow :/

Me too :-).

[GreatBug]

Trezor Plugin is closed

Sheesh, open all the things, or stop selling your product as 'open source'

[slush]

Sheesh, open all the things, or stop selling your product as 'open source'

Trezor *is* opensource and you don't need Plugin for it (e.g. Electrum). Anyway, Bridge (replacement for Plugin) is already opensourced.

[samuelseidel]

@SLUSH: Well done! Really good job!
              The securest hardware wallet that I have seen.
              I will buy one in few days! Keep going!

Everyone should be aware that these devices apparently can take up to 2 months to get via mail. They are sent from Czech republic via standard mail  and apparently get caught up in customs for up to 5 weeks....and THEN are mailed to your address by USPS, which can take up to 21 days for delivery (WTF).


Even if your product is amazing Slush et al, you seriously need to find a trusted american reseller or start using DHL/UPS. I most definitely would have paid extra for the shipping. I planned on using my trezor 2 weeks ago, now I'm stuck without mine for who knows how long....

I am from Czech Republic, so delivery by Czech post is about 36 hours.  

[Mickeyb]

Sheesh, open all the things, or stop selling your product as 'open source'

Trezor *is* opensource and you don't need Plugin for it (e.g. Electrum). Anyway, Bridge (replacement for Plugin) is already opensourced.

Are our BTCs in danger if the plugin is not open sourced? I am not too technical, but I guess that we could loose our BTCs (if the trezor team would decide to scam, not that they will but speaking hypothetically) only while singing transactions if the plugin was to be malicious (by changing addresses etc..). Since trezor signs transactions locally I see this as the only possible scenario, am I right?

[esuncloud]

Sheesh, open all the things, or stop selling your product as 'open source'

Trezor *is* opensource and you don't need Plugin for it (e.g. Electrum). Anyway, Bridge (replacement for Plugin) is already opensourced.

Are our BTCs in danger if the plugin is not open sourced? I am not too technical, but I guess that we could loose our BTCs (if the trezor team would decide to scam, not that they will but speaking hypothetically) only while singing transactions if the plugin was to be malicious (by changing addresses etc..). Since trezor signs transactions locally I see this as the only possible scenario, am I right?

If trezor hardware, bootloader and firmware are all honest, and you double check the output address on trezor screen, the plugin cannot steal you coin by changing the address, because it will void your signature.
Technically speaking, the issue of the closed plugin is similar to Bits of Proof backend, because they both hinder you from running your own mytrezor instance.
However, it seems they are working hard to fix them now, but this requires sometime.

[dnaleor]

Just a small offtopic post to warn people for the new Case hardware wallet:

They brand themselves as being the most secure hardware wallet, because they use multisig, but i wouldn't call it secure. Why?
Key A is stored in the devcie
Key B is stored in the company's cold storage
Key C is stored on the company's server encrypted with a UDEK (User Data Encryption key)

The UDEK is stored in the device as well. When you want to send a transaction, you sign it on the device with your fingerprint.
The device sends the partially signed transaction (with key A) along with the UDEK and your fingerprint details to the company server.
The server decrypts key C, signs and broadcasts the transaction.

If you loose your device, you need to answer security questions and the company will take key B from the cold storage.
They also have your UDEK in cold storage and they use that to decrypt Key C after you confirm your identity by using a temporarly device to scan your fingerprint.
The company will send your bitcoins to a new device or another wallet.

The problem with this scheme?
A company employee can take the UDEK + Key B from cold storage, decrypt key C and steal the bitcoins.

***

So for now, Trezor will still be my first choice and recommendation towards new bitcoin users

[devthedev]

So for now, Trezor will still be my first choice and recommendation towards new bitcoin users

I agree, I'd sacrifice the beauty of the Case for the Trezor's security.

[AussieHash]

Case also has/had a malware clone site

w w w (dot) c a s e - w a l l e t (dot) c o m
http://www.reddit.com/r/Bitcoin/comments/2p4sg6/case_wallet_the_worlds_most_secure_and_easytouse/

Which directed users to download a firmware driver for a chance to win a free case as a beta tester.

[kkurtmann]

So for now, Trezor will still be my first choice and recommendation towards new bitcoin users

I agree, I'd sacrifice the beauty of the Case for the Trezor's security.

I also would sacrifice the beauty of Melanie for the Trezor security.

[BitThink]

Just a small offtopic post to warn people for the new Case hardware wallet:

They brand themselves as being the most secure hardware wallet, because they use multisig, but i wouldn't call it secure. Why?
Key A is stored in the devcie
Key B is stored in the company's cold storage
Key C is stored on the company's server encrypted with a UDEK (User Data Encryption key)

The UDEK is stored in the device as well. When you want to send a transaction, you sign it on the device with your fingerprint.
The device sends the partially signed transaction (with key A) along with the UDEK and your fingerprint details to the company server.
The server decrypts key C, signs and broadcasts the transaction.

If you loose your device, you need to answer security questions and the company will take key B from the cold storage.
They also have your UDEK in cold storage and they use that to decrypt Key C after you confirm your identity by using a temporarly device to scan your fingerprint.
The company will send your bitcoins to a new device or another wallet.

The problem with this scheme?
A company employee can take the UDEK + Key B from cold storage, decrypt key C and steal the bitcoins.

***

So for now, Trezor will still be my first choice and recommendation towards new bitcoin users

A proper way should be let the user themselves to store the Key B in their lockers. Then the users don't need to use the locked key B unless they lose the devices. Moreover, then the users don't need to worry about their coins stolen by the case Employees in any case.