Topic: [ESHOP launched] Trezor: Bitcoin hardware wallet - page 85. (Read 966173 times)

Please contact our support. Email link is in the upper-left corner of myTREZOR wallet.

If you're using a passphrase and you enter it incorrectly, it will create a new account with zero balance. Make sure you enter the correct passphrase to access the accounts already created.

Both my Trezors shows connected on the main page but don't load the account balance.

Could somebody give me an idea what is the problem? 

Do you have any suggestions for Android?

thanks for the info.

I have a suggestion to change wording of myTrezor site: the text on the website reads "if the qr codes match, you can be confident..." or similar. How about changing it to "if the qr-codes decode to the same address.." or "if the addresses match.." to reduce the potential for confusion?

Is this different look of the qr that big of a deal? I thought they only need around 30 percent of it to be readable.

checked again.
Indeed, different QR-code, but decoded as same address. Odd

I think the "mask" you are talking about is a 2-dimensional implementation of http://en.wikipedia.org/wiki/Decorrelation or http://en.wikipedia.org/wiki/Whitening_transformation . It only needs to be pseudo-random http://en.wikipedia.org/wiki/Scrambler , not an actual non-deterministic noise source.

OFC, they don't match, because the one on the device leaks the seed through the side channel BTW: thanks for sharing.

/// just kidding

I wouldn't say deterministic as the library may choose a mask. Masks are are used to get a uniform distribution of black and white and to avoid large areas with only one color. I don't think there is a norm for choosing a mask or for the amount of effort to get the best result.

QR codes are deterministic, but contain error-correction information in addition to the encoded payload. There are a lot of libraries that intentionally do a sloppy work in letting you specify the ratio of payload bits to forward-error-correction bits to be user-friendly (or loser-friendly). Get a good library and you'll get 100% reproducibility.

Moreover get a good QR reader that not only displays the payload bits but the signal/noise ratio for the decoded result.

Edit: OK, I need to explain the "loser-friendly" to avoid making it sound like a vain vapid insult.

One can intentionally produce "bad" QR code images in the sense that they aren't perfect representation of the correct encoded bitstream. Because of the redundancy in encoding they will still read correctly with a normal decoder (with S/N ratio of say 20dB). The "bad"-ness is a side channel that can still be read with a modified decoder that not only reads the "main" payload but also the "side" payload (with a lower S/N margin of say 3dB).

Tricks like that have been used in e.g. theft tracing or as a secret "cookie" in marketing campaigns intended to be read by some closed-source free app. So if your good QR reader some QR code with very large noise margin or surprisingly large ratio of FEC bits you may have a reason to believe that the QR code contains a side channel.

Edit2: Obviously with cryptographic application modified QR codes with side-channels can be used to leak the private key information, but I haven't heard of that happening yet.

Yes, we realised that various QR code generators produce different results (even for the same settings). Actually I have not found 2 implementations that DO produce same results. It's a mess and we'll look into that later, but it's low priority at the moment.

That said I really doubt that codes for dnaleor do match.

I bet one has extra information in the bitcoin: URI. Agreed it is confusing but it looks to be an overlooked error.

yes.

It's a bit confusing for the user, isn't it. I'd also be interested in why this is the case for me and not for dnaleor.

Both qr codes bring up the same address.

odd, on my trezor the QR codes DO match...

urm. Maybe I'm misunderstanding something, but shouldn't the qrcodes match:



EDIT: well, they decode to the same address, so I guess there's some non-deterministic component in qr-code generation?

Dear Trezor team,

Thanks for last update!
I am very glad to get the feature of showing a receive address & a qrcode in the screen of device.
Now your device 100% secure as for a sending and for a getting of bitcoins!

It sure did, sorry about that! I'll be sure to post new markets and news in a timely manner

Took ya long enough to make an official announcement on this thread.