What if the Trezor server got compromised?

[cafucafucafu]

Are we not putting too much trust into a company here? What if their signing keys get compromised?

[1714125941]

1714125941

[1714125941]

1714125941

[1714125941]

1714125941

[1714125941]

1714125941

[SirChiko]

Are we not putting too much trust into a company here? What if their signing keys get compromised?

I doubt it's stored in plain text.

[cafucafucafu]

We need to be sure here. We don't want this to be the next Gox or Stamp.

[SirChiko]

We need to be sure here. We don't want this to be the next Gox or Stamp.

Why not try mailing them and asking them directly?

[Madness]

We need to be sure here. We don't want this to be the next Gox or Stamp.

Why not try mailing them and asking them directly?

Like if they will answer as it should be . they will be like every Client support you have ever seen nothing bad will happen it's highly protected etc ... then BOOOM ! R.I.P
not trying to make anyone in Panic here , I'am just saying
I don't even know how Hardware wallets connect to the servers & stuff anyway

[SirChiko]

We need to be sure here. We don't want this to be the next Gox or Stamp.

Why not try mailing them and asking them directly?

Like if they will answer as it should be . they will be like every Client support you have ever seen nothing bad will happen it's highly protected etc ... then BOOOM ! R.I.P
not trying to make anyone in Panic here , I'am just saying
I don't even know how Hardware wallets connect to the servers & stuff anyway

Then why not ask naming the security method/methods?

[odolvlobo]

http://lmgtfy.com/?q=What+happens+if+the+SatoshiLabs+servers+are+hacked+and+the+firmware+signing+key+is+stolen&l=1

What happens if the SatoshiLabs servers are hacked and the firmware signing key is stolen?

First off, this won’t happen . The SatoshiLabs master key is kept very safe. However, you don’t need to rely on the SatoshiLabs signature. You can verify the build yourself. Our hope is that a few trusted TREZOR users will make a habit of verifying firmware checksums. If you are concerned about this, we suggest making a habit of checking our blog or social news channels such as reddit before applying any updates. If there ever was a problem with the firmware not matching the source code, you can be sure someone will have written about it.

You don’t need to worry about the firmware being updated by a computer virus. Your TREZOR will ask you to manually confirm the update before anything is written to the TREZOR’s memory.

[SirChiko]

http://lmgtfy.com/?q=What+happens+if+the+SatoshiLabs+servers+are+hacked+and+the+firmware+signing+key+is+stolen&l=1

What happens if the SatoshiLabs servers are hacked and the firmware signing key is stolen?

First off, this won’t happen . The SatoshiLabs master key is kept very safe. However, you don’t need to rely on the SatoshiLabs signature. You can verify the build yourself. Our hope is that a few trusted TREZOR users will make a habit of verifying firmware checksums. If you are concerned about this, we suggest making a habit of checking our blog or social news channels such as reddit before applying any updates. If there ever was a problem with the firmware not matching the source code, you can be sure someone will have written about it.

You don’t need to worry about the firmware being updated by a computer virus. Your TREZOR will ask you to manually confirm the update before anything is written to the TREZOR’s memory.

So you don't even need to ask, it's already answered

[freebit13]

The keys for signing transactions are stored on the trezor, not on an online server. The mytrezor page is only a software interface to access the device and the web never sees any actual private keys, only already signed transactions.

[cryptworld]

you should understand how trezor works

trezor private keys are stored in trezor ,and they never go out from it

so trezor server does not matter to hack your bitcoins

[bitllionaire]

Trezor is one of the most secures ways to have your bitcoins stored.

The private keys of your trezor never go out from it, and you can always check in its screen the transaction parameters to see if they are correct or not.

I have not seen yet any trezor hack.

[Possum577]

Having not seen a Trezor hack doesn't mean it's not possible.

Absolute security is relying on NO ONE else to give you your private keys.

[oblivi]

This is why we need Maidsafe. Servers are deprecated and only create trouble.

[Braedo]

I highly doubt any of the Trezors come in contact with an online machine or server while in production. If they were to store the private keys on their servers it would go against the whole point of the Trezor device.

[tl121]

This is why we need Maidsafe. Servers are deprecated and only create trouble.

I run a Trezor off a bitcoin node that runs in my house.  The Trezor talks to an electrum 2.0 beta client and the electrum 2.0 beta client talks to an electrum server which talks to the bitcoin node.  The electrum server and the bitcoin node are physically in my home office.

It all works.  It's very fast. It's easy to use. The Trezor is presently connected via USB to a Windows 7 workstation and the Electrum server and  bitcoin node are running on a small Linux machine that I had lying around.

[doggieTattoo]

http://lmgtfy.com/?q=What+happens+if+the+SatoshiLabs+servers+are+hacked+and+the+firmware+signing+key+is+stolen&l=1

What happens if the SatoshiLabs servers are hacked and the firmware signing key is stolen?

First off, this won’t happen . The SatoshiLabs master key is kept very safe. However, you don’t need to rely on the SatoshiLabs signature. You can verify the build yourself. Our hope is that a few trusted TREZOR users will make a habit of verifying firmware checksums. If you are concerned about this, we suggest making a habit of checking our blog or social news channels such as reddit before applying any updates. If there ever was a problem with the firmware not matching the source code, you can be sure someone will have written about it.

You don’t need to worry about the firmware being updated by a computer virus. Your TREZOR will ask you to manually confirm the update before anything is written to the TREZOR’s memory.

I don't think this answers the question. You get a "seed" that you can use to restore your wallet in the event that you need to replace your trezor. What happens if whatever server that is storing the connection between the seed and the private keys get compromised?

[Velkro]

Trezor is one of the most secures ways to have your bitcoins stored.

I don't agree, paper wallet or offline computer wallet is more secure and free

[Braedo]

http://lmgtfy.com/?q=What+happens+if+the+SatoshiLabs+servers+are+hacked+and+the+firmware+signing+key+is+stolen&l=1

What happens if the SatoshiLabs servers are hacked and the firmware signing key is stolen?

First off, this won’t happen . The SatoshiLabs master key is kept very safe. However, you don’t need to rely on the SatoshiLabs signature. You can verify the build yourself. Our hope is that a few trusted TREZOR users will make a habit of verifying firmware checksums. If you are concerned about this, we suggest making a habit of checking our blog or social news channels such as reddit before applying any updates. If there ever was a problem with the firmware not matching the source code, you can be sure someone will have written about it.

You don’t need to worry about the firmware being updated by a computer virus. Your TREZOR will ask you to manually confirm the update before anything is written to the TREZOR’s memory.

I don't think this answers the question. You get a "seed" that you can use to restore your wallet in the event that you need to replace your trezor. What happens if whatever server that is storing the connection between the seed and the private keys get compromised?

The seed is most likely unique to the device, So the hacker would need your seed and physical access to your Trezor

[jonald_fyookball]

can you enter you own seed made from dice rolls or coin flips?

can you even simply generate a new seed?

[freedomno1]

Trezor is standalone so as far as I know no server
Assume offline generation as well so no server to transfer the stolen data from.
Plus Slush pools still running