Bitcoin Forum
May 27, 2019, 12:39:45 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Dongles and security  (Read 80 times)
Drysprinkles291
Newbie
*
Offline Offline

Activity: 28
Merit: 1


View Profile
November 05, 2018, 10:22:10 PM
 #1

With an MacBook pro and the USB-C ports only, I've been forced to get a dongle to work with the Trezor. I'm wondering if there's risks using the dongle with the Trezor? Are there programs or hardware inside the dongle that could affect the security of the Trezor?
1558917585
Hero Member
*
Offline Offline

Posts: 1558917585

View Profile Personal Message (Offline)

Ignore
1558917585
Reply with quote  #2

1558917585
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1558917585
Hero Member
*
Offline Offline

Posts: 1558917585

View Profile Personal Message (Offline)

Ignore
1558917585
Reply with quote  #2

1558917585
Report to moderator
1558917585
Hero Member
*
Offline Offline

Posts: 1558917585

View Profile Personal Message (Offline)

Ignore
1558917585
Reply with quote  #2

1558917585
Report to moderator
1558917585
Hero Member
*
Offline Offline

Posts: 1558917585

View Profile Personal Message (Offline)

Ignore
1558917585
Reply with quote  #2

1558917585
Report to moderator
HeRetiK
Legendary
*
Offline Offline

Activity: 1120
Merit: 1049


the forkings will continue until morale improves


View Profile
November 06, 2018, 12:43:01 PM
Merited by vapourminer (1), BitCryptex (1)
 #2

Since one of the main premises of Trezors is that they can be attached to any potentially compromised device without leaking critical information, the private keys stored on the Trezor should not be in danger when using it with an USB dongle (or any other sort of third-party provided USB cable).

Be aware however that I'm only talking about the private keys stored on the Trezor in this case. If, for some reason, your operating system or the dongle is compromised, it might well be that the wallet interface is showing compromised data (eg. showing you the wrong address when setting a recipient). Therefore it is important to always double-check with the display of your Trezor whether the recipient address and amount are correct. Additionally, when moving a larger sum, consider double-checking the recipient's address using at least an additional means of communication (eg. email + instant messenger, email + phone call, etc).

bob123
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1016



View Profile WWW
November 07, 2018, 08:48:18 AM
 #3

Such a dongle can (theoretically) compromise the communication between the host computer and the device attached.
It could also function as a virtual keyboard and compromise your computer by executing commands / downloading malware.

The probability of one of these happening is very low. It is not the most common way of infecting a PC / stealing crypto.


And as Heretik has mentioned, a hardware wallet is safe to be used on a compromised machine (as long as you verify every information on the trezor itself).
So, as long there is no vulnerability in the trezor, you are fine.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!