Topic: [ESHOP launched] Trezor: Bitcoin hardware wallet - page 61. (Read 966249 times)

Quote from: cypherdoc on May 31, 2015, 12:15:17 PM

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com? is that what python trezor is for? can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

if "it" is the client side javascript code, the I have no problem with that. Question is: is it sent to the mytrezor.com server?

so everything i see on my browser screen isn't necessarily transmitted to myTrezor.com? i thought it would have to be b/c that master pubkey is definitely in one their setting windows.

molecular

donator

Activity: 2772

Merit: 1019

Quote from: molecular on May 30, 2015, 01:37:35 AM

Quote from: BitcoinIsLiberty on May 30, 2015, 04:55:17 PM

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com? is that what python trezor is for? can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

if "it" is the client side javascript code, the I have no problem with that. Question is: is it sent to the mytrezor.com server?

cypherdoc

legendary

Activity: 1764

Merit: 1002

From the extension readme:

"it has a built-in device management functionality, for wiping/recovery/initialization/.... It doesn't connect to any outside sources, all the data (including TREZOR firmware) is bundled with the app, so it works completely offline (if you somehow manage to install Chrome without an internet connection)."

I wish it had some type of tab for listing receiving addresses based off of the password entered.

Android MyTrezor Lite wallet does this and precalculates forward around 50 send & recv addresses and separates them conveniently.

cypherdoc

legendary

Activity: 1764

Merit: 1002

Quote from: molecular on May 30, 2015, 01:37:35 AM

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com? is that what python trezor is for? can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

it does capture it in advanced settings, or somewhere like that.

this is how you scan to import it into Mycelium and/or the Android MyTrezor Lite wallet.

BitcoinIsLiberty

newbie

Activity: 55

Merit: 0

From the extension readme:

"it has a built-in device management functionality, for wiping/recovery/initialization/.... It doesn't connect to any outside sources, all the data (including TREZOR firmware) is bundled with the app, so it works completely offline (if you somehow manage to install Chrome without an internet connection)."

I wish it had some type of tab for listing receiving addresses based off of the password entered.

BitcoinIsLiberty

newbie

Activity: 55

Merit: 0

The latest Chrome extension when accessed through "Apps" button allows configuring the Trezor WITHOUT mytrezor.com! Grin

molecular

donator

Activity: 2772

Merit: 1019

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com? is that what python trezor is for? can it be done through Mycelium?

I'm not sure the master pubkey is revealed to mytrezor.com at all. I vaguely remember slush or stick saying it wasn't the case. Does anybody know for sure or can point to the relevant part in the client code?

chrisrico

hero member

Activity: 496

Merit: 500

Quote from: BitcoinIsLiberty on May 20, 2015, 12:32:46 AM

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com? is that what python trezor is for? can it be done through Mycelium?

The only way I know of currently is using python-trezor. Theoretically you could do it using any software though.

cypherdoc

legendary

Activity: 1764

Merit: 1002

is there a way to initialize a Trezor seed w/o revealing the master pubkey to mytrezor.com? is that what python trezor is for? can it be done through Mycelium?

arorts

sr. member

Activity: 408

Merit: 250

My main issue is that the Trezor plugin for electrum fails to let me configure the "settings" button. I get this error when pressing that button in the Electrum wallet...

Code:

....in settings_dialog
    layout.addWidget(QLabel(" %s" % self.wallet.get_client().get_device_id()),1,1)....

AttributeError: 'QtGuiTrezorClient' object has no attribute 'bad'

It also fails to be detected on occasions even after plugging the Trezor in/out a few times and/or restarting the computer. I'd say it randomly detects the presence of Trezor

jackbox

legendary

Activity: 1246

Merit: 1024

A few days ago MY Trezor website started crashing (aw snap screen) on Google Chrome. Still works fine on Firefox. Happened a day after I used it to send a large amount of btc. I cleared the cache but still crashing on Chrome. Very strange.

running

newbie

Activity: 40

Merit: 0

The Trezor chrome extension for Linux works perfect! Thanks.

Thanks! Tuning the extension so it works on Linux was the hardest part, since you (as a user) need to fiddle with the hardware permissions. Glad to hear it worked for you.

running

newbie

Activity: 40

Merit: 0

MyTrezor.com doesn't work on Chrome anymore (because of Google - not Trezor). But it still does on Firefox.

It does now!

Chrome turns off NPAPI plugins, which sucks; on the other hand, they have a great USB HID API for Chrome apps, which makes up for it and which we used.

How can you have Failed to load Chrome ... on Firefox?

See my previous post. That's a log message that we print even when we are on Firefox, since we try the Chrome extension first.

running

newbie

Activity: 40

Merit: 0

The log says "Failed to load Chrome Extension transport", does this mean that i cant use mytrezor with Firefox anymore?

The log always says that if you are on Firefox; we first try to use extension, and if we detect that it's not Chrome (or -ium), we stop trying, but we still log it. To your question

I just noticed that mytrezor.com stopped working for me (Firefox on Lubuntu 14.04) as i get the message "Transport loading failed".

You probably still use the old plug-in, and it's kind of unstable in general. Disable it (in Firefox settings) and go to mytrezor again, and then install the new bridge.

Also i never updated my firmeware as i was afraid to loose my BTC because of some error, was there any reported problem caused by updating the firmeware in Trezors lifetime?

Well, stuff can happen. It should not, but it can.

Generally, when you are upgrading firmware, you should have the seed somewhere. If you have the seed, the worse that can happen is that the Trezor will be wiped and you will need to do the recovery and you still have your coins. You should upgrade firmware, since we add new features and bufgfixes into new versions.

If you don't have the seed, that's a big problem in general - Trezors are not infallible - meaning they can be destroyed by water or by being thrown really hard, etc! So protect your seed (that sounds awkward).

johoe

full member

Activity: 217

Merit: 259

Quote from: rabit on May 21, 2015, 04:03:06 AM

Lol, dont worry, i update my machines frequently, i just dont wanto to update something frequently which holds a significant amount of my wealth as new code can always introduce new problems and i did not noticed any huge security patches in the Trezor firmware updates.

Actually there was, http://johoe.mooo.com/trezor-power-analysis/ - but the white-hat author contacted SatoshiLabs and the code was fixed in 1.3.3.

Also, there was a not so well-known exploit in 1.3.1 where an adversary who compromised your computer (or the author of your wallet software) could trick you to sign a transaction that sends money to him (you still have to confirm the transaction but the details the TREZOR shows are not correct). This exploit does not work with 1.2.1, but that version has several other weaknesses that have been fixed by now. For example, with 1.2.1 a compromised computer can create a transaction that sends all coins to the miner without requiring a confirmation (but the device has to be unlocked by entering the PIN).

rabit

member

Activity: 62

Merit: 10

Quote from: rabit on May 21, 2015, 03:36:56 AM

Thanks, i guess i will finally update my firmware as i am still on the 1.2.1 version.

Also mytrezor started to work again in Firefox after i deactivated and reactivated the plugin 2-3 times, no idea why it works now but at least it works

It still says in the log that it failed to load "Chrome Extension transport" but this time it loaded the plugin transport after the failed loading of the "Chrome Extension transport".

Trezor firmware is now at 1.3.3.

Have you ever done a "sudo apt-get update" followed by a "sudo apt-get upgrade" on your Linux machine?

... and while you are at it do "sudo apt-get dist-upgrade"... nothing really related to Trezor, but you seem to be the type of guy that doesn't update his devices very often...

Lol, dont worry, i update my machines frequently, i just dont wanto to update something frequently which holds a significant amount of my wealth as new code can always introduce new problems and i did not noticed any huge security patches in the Trezor firmware updates.

rabit

member

Activity: 62

Merit: 10

Thanks, i guess i will finally update my firmware as i am still on the 1.2.1 version.

Also mytrezor started to work again in Firefox after i deactivated and reactivated the plugin 2-3 times, no idea why it works now but at least it works

It still says in the log that it failed to load "Chrome Extension transport" but this time it loaded the plugin transport after the failed loading of the "Chrome Extension transport".

dsattler

legendary

Activity: 924

Merit: 1000