[ESHOP launched] Trezor: Bitcoin hardware wallet

[cypherdoc]

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com?  is that what python trezor is for?  can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

this is how you scan to import it into Mycelium and/or the Android MyTrezor Lite wallet.

[1713852198]

1713852198

[1713852198]

1713852198

[1713852198]

1713852198

[1713852198]

1713852198

[1713852198]

1713852198

[cypherdoc]

From the extension readme:

"it has a built-in device management functionality, for wiping/recovery/initialization/.... It doesn't connect to any outside sources, all the data (including TREZOR firmware) is bundled with the app, so it works completely offline (if you somehow manage to install Chrome without an internet connection)."

I wish it had some type of tab for listing receiving addresses based off of the password entered.

Android MyTrezor Lite wallet does this and precalculates forward around 50 send & recv addresses and separates them conveniently.

[molecular]

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com?  is that what python trezor is for?  can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

if "it" is the client side javascript code, the I have no problem with that. Question is: is it sent to the mytrezor.com server?

[cypherdoc]

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com?  is that what python trezor is for?  can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

if "it" is the client side javascript code, the I have no problem with that. Question is: is it sent to the mytrezor.com server?

so everything i see on my browser screen isn't necessarily transmitted to myTrezor.com?  i thought it would have to be b/c that master pubkey is definitely in one their setting windows.

[jackbox]

I think they definitly need to have the master pub key for the website to display balances
(Or maybe only the created pub key ?)

They use the masterpubkey to show balances and btc receive and change addresses. Just is it all on the client side or is any sent to the server? The web page is open source I believe so you can look at it on github to see what it does, if you can understand it?

[molecular]

I think they definitly need to have the master pub key for the website to display balances
(Or maybe only the created pub key ?)

Why? It's entirely possible to have the client generate the addresses and send them to the server instead of the xpub key. It might look like 'wasting bandwidth', but it's really 'preserving future privacy'

[molecular]

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com?  is that what python trezor is for?  can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

if "it" is the client side javascript code, the I have no problem with that. Question is: is it sent to the mytrezor.com server?

so everything i see on my browser screen isn't necessarily transmitted to myTrezor.com?  i thought it would have to be b/c that master pubkey is definitely in one their setting windows.

No, it isn't. Think of your browsers javascript engine and html document view as providing a runtime for an application.

An example where this is easy to see are browser-based paperwallet generators: you can see the private key "on the page", but it's not sent to the server.

[slush]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

[cypherdoc]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

and just to be clear i understand the terms, xpub means "master public key", correct?

thanks for clarifying.

[running]

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com?  is that what python trezor is for?  can it be done through Mycelium?

As you said, you can do it via python-trezor, which is low-level, but not very user-friendly

or, you can now use the chrome app, as many people noticed without us officially presenting it

[Muhammed Zakir]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

and just to be clear i understand the terms, xpub means "master public key", correct?

thanks for clarifying.

Yes.

[dsattler]

I need some help with my trezor!

I have two accounts (with two passwords) on my trezor, one is working OK and shows all transactions. The other one shows the total BTC amount, but doesn't show the list of transactions.
I'm using mytrezor.com in chrome or IE (doesn't matter), OS is Windows 7 64-Bit. My trezor has the newest firmware.

I've looked in the log and found this:

["log","Tue, 02 Jun 2015 12:31:34 GMT","[account] Received txs update for","Account #1"]
["error","Tue, 02 Jun 2015 12:31:34 GMT","RangeError: Trying to access beyond buffer length\n   at q (https://mytrezor.com/scripts/c5230b2e.libs.js:22:12395)\n   at d.prototype.readUInt32LE (https://mytrezor.com/scripts/c5230b2e.libs.js:22:18191)\n   at f (https://mytrezor.com/scripts/c5230b2e.libs.js:20:24691)\n   at d.fromBuffer (https://mytrezor.com/scripts/c5230b2e.libs.js:21:11531)\n   at g (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:4735)\n   at f (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:4527)\n   at j.prototype._constructTransactions (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:5181)\n   at j.prototype._processTransactionsUpdate (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:3628)\n   at i (https://mytrezor.com/scripts/c5230b2e.libs.js:11:10512)\n   at Anonymous function (https://mytrezor.com/scripts/c5230b2e.libs.js:11:10694)"]

Please help!

[arorts]

My main issue is that the Trezor plugin for electrum fails to let me configure the "settings" button. I get this error when pressing that button in the Electrum wallet...

Code:

....in settings_dialog
    layout.addWidget(QLabel(" %s" % self.wallet.get_client().get_device_id()),1,1)....

AttributeError: 'QtGuiTrezorClient' object has no attribute 'bad'

It also fails to be detected on occasions even after plugging the Trezor in/out a few times and/or restarting the computer. I'd say it randomly detects the presence of Trezor

Electrum 2.1.1 or above (2.2) Trezor setting button works correctly on Linux and OSX - it provides you the serial number of the Trezor and allows you to change the nickname of the device. I have not tried the Windows version.  If the issue persists, report it on the Electrum subforum https://bitcointalk.org/index.php?board=98.0.

Regarding the random detection, it is a known issue caused by a poor quality USB cable (like the one shipping with the Trezor). Try a different cable.

The issue I'm describing happens precisely with Linux. Will check in the referred thread. Thank you.

[chrisrico]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

and just to be clear i understand the terms, xpub means "master public key", correct?

thanks for clarifying.

The master public key for the account, not the entire tree of accounts.

[dsattler]

I need some help with my trezor!

I have two accounts (with two passwords) on my trezor, one is working OK and shows all transactions. The other one shows the total BTC amount, but doesn't show the list of transactions.
I'm using mytrezor.com in chrome or IE (doesn't matter), OS is Windows 7 64-Bit. My trezor has the newest firmware.

I've looked in the log and found this:

["log","Tue, 02 Jun 2015 12:31:34 GMT","[account] Received txs update for","Account #1"]
["error","Tue, 02 Jun 2015 12:31:34 GMT","RangeError: Trying to access beyond buffer length\n   at q (https://mytrezor.com/scripts/c5230b2e.libs.js:22:12395)\n   at d.prototype.readUInt32LE (https://mytrezor.com/scripts/c5230b2e.libs.js:22:18191)\n   at f (https://mytrezor.com/scripts/c5230b2e.libs.js:20:24691)\n   at d.fromBuffer (https://mytrezor.com/scripts/c5230b2e.libs.js:21:11531)\n   at g (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:4735)\n   at f (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:4527)\n   at j.prototype._constructTransactions (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:5181)\n   at j.prototype._processTransactionsUpdate (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:3628)\n   at i (https://mytrezor.com/scripts/c5230b2e.libs.js:11:10512)\n   at Anonymous function (https://mytrezor.com/scripts/c5230b2e.libs.js:11:10694)"]

Please help!

Anybody?

[Muhammed Zakir]

I need some help with my trezor!

I have two accounts (with two passwords) on my trezor, one is working OK and shows all transactions. The other one shows the total BTC amount, but doesn't show the list of transactions.
I'm using mytrezor.com in chrome or IE (doesn't matter), OS is Windows 7 64-Bit. My trezor has the newest firmware.

I've looked in the log and found this:

["log","Tue, 02 Jun 2015 12:31:34 GMT","[account] Received txs update for","Account #1"]
["error","Tue, 02 Jun 2015 12:31:34 GMT","RangeError: Trying to access beyond buffer length\n   at q (https://mytrezor.com/scripts/c5230b2e.libs.js:22:12395)\n   at d.prototype.readUInt32LE (https://mytrezor.com/scripts/c5230b2e.libs.js:22:18191)\n   at f (https://mytrezor.com/scripts/c5230b2e.libs.js:20:24691)\n   at d.fromBuffer (https://mytrezor.com/scripts/c5230b2e.libs.js:21:11531)\n   at g (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:4735)\n   at f (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:4527)\n   at j.prototype._constructTransactions (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:5181)\n   at j.prototype._processTransactionsUpdate (https://mytrezor.com/scripts/b5f5e253.scripts.js:3:3628)\n   at i (https://mytrezor.com/scripts/c5230b2e.libs.js:11:10512)\n   at Anonymous function (https://mytrezor.com/scripts/c5230b2e.libs.js:11:10694)"]

Please help!

Anybody?

Try using Electrum.

[Carlton Banks]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

and just to be clear i understand the terms, xpub means "master public key", correct?

thanks for clarifying.

The master public key for the account, not the entire tree of accounts.

I think the terminology used in BIP 32 was:

• xpub means extended public key, and generates all public keys for a single private key (i.e. single Trezor account)
• a master public key generates all xpubs for a single seed

I don't know how closely everyone follows the same terminology, but you'd think it would be pretty faithful seeing as slush and I think also stick talk on the developers mailing list about this wallet related stuff.

[cypherdoc]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

and just to be clear i understand the terms, xpub means "master public key", correct?

thanks for clarifying.

The master public key for the account, not the entire tree of accounts.

but it does reveal used addresses.

[cypherdoc]

mytrezor.com wallet sends xpub to server to retrieve transaction history. However Chrome extension does the device management without revealing any information to our servers. It is completely standalone application, so it does not even reveal your IP to us.

and just to be clear i understand the terms, xpub means "master public key", correct?

thanks for clarifying.

The master public key for the account, not the entire tree of accounts.

I think the terminology used in BIP 32 was:

• xpub means extended public key, and generates all public keys for a single private key (i.e. single Trezor account)
• a master public key generates all xpubs for a single seed

[/b][/b]
[/list]

I don't know how closely everyone follows the same terminology, but you'd think it would be pretty faithful seeing as slush and I think also stick talk on the developers mailing list about this wallet related stuff.

that's even more confusing.

i thought the xpub is a single root master public key (derived from a single root master private key) from which all child public keys are derived.  this same root master public key (xpub) can parent many different branches of child public keys.

[Carlton Banks]

that's even more confusing.

it's possible I have it wrong, but that's how I understood it. It's all just nomenclature though; I think we have the details correct if not the names.