Author

Topic: My "Almost a Problem" with Trezor (Read 496 times)

legendary
Activity: 4214
Merit: 4458
April 08, 2016, 12:22:42 AM
#2
hypothetical i mentioned last year
imagine you had a virus on your computer.. that displayed a prompt exactly like the update firmware message.

then it said update failed. please input your seed.
secretly there was no update, it was just 2 prompts to scare you into typing your seed.

..

this is why firmware updates via a computer are risky and can be abused via man in the middle attacks and viruses.

i too would prefer a hardware wallet that wasnt reliant on updates or even browser plugins to function.
legendary
Activity: 2912
Merit: 1852
April 08, 2016, 12:09:26 AM
#1
...

I really like the idea of hardware wallets to keep my BTC safe.  I had a near-problem with blockchain.info's wallet once (THEIR fault though, smile).

But, just the other day I almost had a problem with my Trezor.  Each time in the past few months I have checked in with it, I am informed that a firmware update is recommended.  So, I just ignored that as long as I could.  Until I got a message just a few days ago saying that I ought to update the firmware, and when I closed the message and tried to log-in, well it would not let me...

(I hate firmware updates like this, even for our Blue-Ray machine connected with our TV)

The message came again, and it said to have my Recovery Seed (the 24 words) handy, just in case of a failure (which they wrote was "very rare").

OK, the update went OK, the second time.....

In LiteCoinGuy's hardware thread, I once commented that I looked with GREAT FAVOR on DigitalBitBox's upcoming hardware that will NEVER have such an update (in fact, won't allow it).

But, I now think that Ledger (asking to install an update now) and Trezor again in the future will keep pestering me to update, yuck.
Jump to: