Pages:
Author

Topic: [ESHOP launched] Trezor: Bitcoin hardware wallet - page 94. (Read 966173 times)

cor
full member
Activity: 121
Merit: 100
Maybe one day I will buy one trezor , but before I should learn how to use it. Let me "learn".

No need to learn.
I gave the package to a girl, she knew nothing about Bitcoins and she was able to use Trezor within few minutes.

Just get it, go to mytrezor.com and follow instructions.
newbie
Activity: 52
Merit: 0
... I won't be alive for 100 more years, it will be funny if my trezor is still working by then...

i think in 100 years the issue will be finding a computer with usb connector
legendary
Activity: 1456
Merit: 1001
This is the land of wolves now & you're not a wolf
technical (noob) question: how long does trezor remember its keys if not powered up for years? at least a theoretical forecast/speculation, please. the concern is to move a part of funds to a trezor that would not be used frequently (at all in near future) and if there is something like an internal battery that should be taken into account for long period of inactivity?

The seed is stored in flash memory. It does not need power and the device does not have any internal batery. The minimal data retention of flash is usualy specified as 15 years, but this is the minimum that is guaranteed for devices stored in extreme conditions (85°C). When storing in normal temperatures, it should last at least 100 years according to this study: http://www.freescale.com/files/microcontrollers/doc/eng_bulletin/EB618.pdf

Thanks for this share.   I was curious as to the estimated length that the storage would work for.   I won't be alive for 100 more years, it will be funny if my trezor is still working by then...
newbie
Activity: 52
Merit: 0
technical (noob) question: how long does trezor remember its keys if not powered up for years? ...

The seed is stored in flash memory. It does not need power and the device does not have any internal batery. The minimal data retention of flash is usualy specified as 15 years, but this is the minimum that is guaranteed for devices stored in extreme conditions (85°C). When storing in normal temperatures, it should last at least 100 years according to this study: http://www.freescale.com/files/microcontrollers/doc/eng_bulletin/EB618.pdf

thanks! indeed I could not remember any battery mentioned in the bill of materials nor did I see any on the the pic of the board. just not familiar with the flash memory properties.
full member
Activity: 120
Merit: 100
technical (noob) question: how long does trezor remember its keys if not powered up for years? at least a theoretical forecast/speculation, please. the concern is to move a part of funds to a trezor that would not be used frequently (at all in near future) and if there is something like an internal battery that should be taken into account for long period of inactivity?

The seed is stored in flash memory. It does not need power and the device does not have any internal batery. The minimal data retention of flash is usualy specified as 15 years, but this is the minimum that is guaranteed for devices stored in extreme conditions (85°C). When storing in normal temperatures, it should last at least 100 years according to this study: http://www.freescale.com/files/microcontrollers/doc/eng_bulletin/EB618.pdf
newbie
Activity: 52
Merit: 0
technical (noob) question: how long does trezor remember its keys if not powered up for years? at least a theoretical forecast/speculation, please. the concern is to move a part of funds to a trezor that would not be used frequently (at all in near future) and if there is something like an internal battery that should be taken into account for long period of inactivity?
hero member
Activity: 714
Merit: 500
hero member
Activity: 854
Merit: 1000
Hey, I just noticed Some Trezors are offered at Amazon.de for 119 EUR.
Finally they understand that some people want to buy a Trezor for EUR and install it before they start touching bitcoin.

I sold a lot of Trezors for cash to people who were new to Bitcoin and not tech savvy. There is a business in reselling Trezors for fiat Wink
(also some paranoid people who want to buy a Trezor for cash, because they don't want to be in some sort of database of customers kept by SatoshiLabs)

wow, it is a high overprice

I read in the AmA that they were going to release a new pack or something like that
any details?
hero member
Activity: 714
Merit: 500
Maybe one day I will buy one trezor , but before I should learn how to use it. Let me "learn".
legendary
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
Hey, I just noticed Some Trezors are offered at Amazon.de for 119 EUR.
Finally they understand that some people want to buy a Trezor for EUR and install it before they start touching bitcoin.

I sold a lot of Trezors for cash to people who were new to Bitcoin and not tech savvy. There is a business in reselling Trezors for fiat Wink
(also some paranoid people who want to buy a Trezor for cash, because they don't want to be in some sort of database of customers kept by SatoshiLabs)
legendary
Activity: 2338
Merit: 2106
@JorgeStolfi:  You are correct and have identified a possible hacking scenario.  And we all appreciate your free advice on security.

But you have been bashing the same arguments since July...  The first time, I can understand, but repeating the same thing over and over again...

https://bitcointalksearch.org/topic/m.8073106

Like bitcoin, Trezor is a compromise - and we all agree that Trezor is not perfect. However, it is a whole lot better than any other method of securing your private keys, at the moment, and more convenient to use than paper wallets.

And like any other successful hacks, if it was ever to be performed, I can assure you that it would go viral in no time, and everyone would stop using their Trezor - or at least transfer their bitcoins immediately to another type of wallet.

Maybe you should design the perfect Hardware wallet and sell it on the market, as a competitor to Trezor.   Wink

EDIT: And if that was ever to happened, PM me.  Not only I would buy a few from you, but I would also invest financially in your company...


you cannot argue with a paid troll
hero member
Activity: 910
Merit: 1003
Jorge, I hope you bought your computer and cell phone at the computer and cell phone factories respectively. Because everybody knows that people have sensitive personal and credit card data + some have bitcoin wallets on their devices so it's important to buy from the factory instead of a vendor and even then you are not 100% sure!

For the time being I will be "enjoying" the spectacle of BlockChain.info going down the tubes.  Let's resume this conversation when fake malicious Trezors appear and steal some significant piles of coins, shall we?

By the way, the BCI debacle happened because someone decided to "improve" the random number generator in their javascript code, and posted the new version for download by clients, late at night, without thorough validation by a security specialist.  Result: (ahem) hundreds of users received weak keys, some smart hackers noticed, and (ahem) emptied the addresses of those users.  The extent of damage is still unknown.

That bug was noticeed and fixed after a few hours; what if it had been there for days?

Cannot ever happen to the Trezor firmware, of course.

Quote
You mentioned fake ATMs. If anybody planted those or if I opened a fake bank branch then people would loose money, but I don't see banks warning their customers about their product not being safe.

There is no "if": fake ATMs have been around since the very first real ones were deployed (in the 1970s, IIRC).  I read a story of a customer who complaining to a Wells Fargo cashier about their ATM, that had been aborting transactions for days.  "What ATM? We do not have an ATM!" The crooks had installed a fake ATM on the rear wall of the bank, facing the parking lot.

Fake ATMs were endemic here in Brazil when credit cards were of the magstripe kind (as they still are in the US).  Most commonly the thieves placed a false front cover over the real one, with a malicious card reader and key logger.  They seem to be less common now that all credit cards use chips instead of magstripes.

But banks do warn clients to watch out for such false covers, and they inspect their ATMs for that and other tricks.  Who will inspect the Trezors on sale at Walmart, ot those bargain ones sold through eBay?

full member
Activity: 120
Merit: 100

  Jorge, I hope you bought your computer and cell phone at the computer and cell phone factories respectively. Because everybody knows that people have sensitive personal and credit card data + some have bitcoin wallets on their devices so it's important to buy from the factory instead of a vendor and even then you are not 100% sure!

  Why you want Trezor to put warnings on their product and educate customers, when no one in the business does that?

  You mentioned fake ATMs. If anybody planted those or if I opened a fake bank branch then people would loose money, but I don't see banks warning their customers about their product not being safe.

  If postal offices started replacing every package that could potentialy bring them profit, they would have millions on the first day, but magically they don't do it (because the poor postman would go to jail). And somehow they don't have to warn anybody that their package might contain replaced malicious product.

  If every hardware manufacturer would have to check and physicaly secure all their vendors to be sure they are not putting malicious elements in their hardware, there will be no hardware at all and yet I don't see warnings on my laptop about some parts being potentialy malicious.

  My point is not that Trezor is 100% secure, but that the problems that you mention are not Trezor specific and at the same time you want only SL to warn their customers about such problems. Just because you hate bitcoin you have double standard for Bitcoin and non-Bitcoin products. When you convince mobile and computer vendors to label their products with such warning then come back with such requests.
hero member
Activity: 910
Merit: 1003
I would even add to not store more than 50 BTC on a single Trezor (~$20k).  If you have more BTC, diversify your risk with multiple Trezor units.  $120 over $20k is equivalent to about 0.5% storage fee - not too bad!  This way, if JorgeStolfi prophecy comes true  Cheesy  - you wouldn't loose everything in one transaction ...  

Good advice... as long as you don't buy all your Trezors from the same guy on eBay, or the same Walmart store.  Wink
legendary
Activity: 2128
Merit: 1005
ASIC Wannabe
To summarize: The Trezor is the safest and easiest to operate bitcoin wallet of today.
+1
If you want to store more than 5BTC and/or want something better than a paper wallet for long-term storage, the trezor is a good deal to secure your bitcoins.
legendary
Activity: 1512
Merit: 1005
To summarize: The Trezor is the safest and easiest to operate bitcoin wallet of today.
hero member
Activity: 623
Merit: 500
CTO, Ledger
Also I fail to see what's the risk for the manufacturer if someone starts selling what is essentially a counterfeit version of the device. This would be like blaming an original SD card manufacturer when you get a fake chinese SD clone.
If you buy fake merchandise, your loss is usually limited to the article.  Someone who buys a fake malicious Trezor may lose millions.  The victims will be much more motivated to get their money back, and SatoshiLabs will be the only target they can sue.  The victims will argue that SL is responsible because they did not warn people about the risk of buying Trezors from resellers.

For the same reason, I hope that SL is taking adequate measures to physically secure their storage and shipping operations.  How much would it take to convince an employee to switch some Trezors before shipping?

Then I can apply the same "logic" to someone buying a fake USB drive. If you put a private key on it, and it's somehow corrupted, are you going to blame the original manufacturer ?

But owners must be aware that it is still far from 100% safe.

Nothing is 100% safe, problem solved. On the specific case of hardware wallets, feel free to open your mind this Christmas Smiley
hero member
Activity: 910
Merit: 1003
Also I fail to see what's the risk for the manufacturer if someone starts selling what is essentially a counterfeit version of the device. This would be like blaming an original SD card manufacturer when you get a fake chinese SD clone.
If you buy fake merchandise, your loss is usually limited to the article.  Someone who buys a fake malicious Trezor may lose millions.  The victims will be much more motivated to get their money back, and SatoshiLabs will be the only target they can sue.  The victims will argue that SL is responsible because they did not warn people about the risk of buying Trezors from resellers.

For the same reason, I hope that SL is taking adequate measures to physically secure their storage and shipping operations.  How much would it take to convince an employee to switch some Trezors before shipping?

A knockoff requires some serious dedication and isnt even a remote concern if you just buy directly from buytrezor.com

Exactly.

Quote
far more likely:
1) printers with custom firmware to recognise bitcoin addresses/QR codes when printing, and push that data to a server
2) casascius or any other coins being opened up with precision and solvents, private key copied, then sealed shut again for resales. Or even the creator keeping a copy of all private keys
3) an android/windows/ios/ANY wallet software that was downloaded from the wrong site or updated to a malicious version
4) a webwallet that is hacked or otherwise steals privkey data.
5) virus or malware that seeks and steals any wallet info, or even QR codes from your print/documents history, and pulls the funds out.

Yes, all of that too, and more....

Quote
someone creating an exact replica of the trezor and its (quality) box that its shipped in, plus valid serial numbers, plus making it match the MD5 hash..... you are pulling at straws.

You have heard of fake ATMs, right?

Quote
IMO the trezor is 100% the safest option right now outside of operating an isolated offline system with an offline printer, using it to sign txs, copying the signed tx to a USB, then sending the signed transactions from an online system

The Trezor may be even safer than an off-line computer (if malware gets installed in that computer, it may be able to do a weak-key attack, or leak the private key in the signed transaction.)  Basically, the Trezor is an offline computer that is dedicated to a few bitcoin-related tasks and therefore is more difficult to compromise.  Trezor is certainly much safer than that competition hardware wallet without display.  But owners must be aware that it is still far from 100% safe.
hero member
Activity: 623
Merit: 500
CTO, Ledger
And I am not sure that the SatoshiLabs people are aware of the risk that they incur by tacitly approving the re-selling of their Trezors.

Also I fail to see what's the risk for the manufacturer if someone starts selling what is essentially a counterfeit version of the device. This would be like blaming an original SD card manufacturer when you get a fake chinese SD clone.

Pages:
Jump to: