Offline onboarding on latest Trezor suite update (21.9.2)

Pmalek

legendary

Activity: 2730

Merit: 7065

Quote from: dkbit98 on September 18, 2021, 06:59:27 AM

Well it's obvious really, you are not leaking your IP address and you are improving your security and privacy, but you don't have to worry about that because you are stuck with ledger ticking bomb Cheesy

I have had my Ledger long before the leak (same as you) and it fulfills many of the needs and expectations I have for a hardware wallet. The leak was unfortunate, but none of us can do anything about it now. I am not stuck with it, but I am using a product that works fine. My respect and confidence in Ledger as a company has been shaken, but that's got nothing to do with their hardware wallet or its features. If I needed a new hardware wallet today, Ledger would certainly not be my first choice. But we are now moving into off-topic territory, so it's better to stop.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: Pmalek on September 18, 2021, 02:21:18 AM

What's the benefit of this improvement?

Well it's obvious really, you are not leaking your IP address and you are improving your security and privacy, but you don't have to worry about that because you are stuck with ledger ticking bomb Cheesy

You can't really have airgapped Trezor but you can enable Tor switch in Trezor Suite later to hide your IP with transactions.
Trezor had many security issues in past and, but you can see bunch of them being fixed all the time:
https://trezor.io/security/

Quote from: SFR10 on September 18, 2021, 05:04:09 AM

Before anything else, I do agree with both of you about the spying/privacy problem on windows and while you can limit it to a large extent ^{[some parts require a workaround]}, it's not good enough and the only thing that's stopping me from making a switch, it's the compatibility issues with some of the apps.

Sure, if you need to use Adobe software like Photoshop and Illustrator than you are stuck with Windows or Mac, but if you are not pro you can always use alternative apps like Gimp and Inkscape.
Linux alternative apps are often times even better than original win aps, and last option is to use WINE or create dual boot with both Linux and Windows.

Pmalek

legendary

Activity: 2730

Merit: 7065

Quote from: SFR10 on September 18, 2021, 05:04:09 AM

AFAICS, you're completely right and all this does, provides a safer environment for the setup process ^{[I hope it doesn't give newbies a false sense of security]}.

That's the thing. It is apparently supposed to provide a safe (or safer) environment to the onboarding and seed generation setup. But that process is already safe (at least it's supposed to have been safe all this time). If it's not, have we been led to believe that it is?

It reminds me of this spiderman meme:

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: dkbit98 on September 17, 2021, 08:42:55 AM

I updated both Trezor suite and device firmware yesterday, it was probably one of the easiest updates I ever done without any issue whatsoever.

I had a similar experience ^{[apart from the display bug on Trezor suite]}, but when I tried reinstalling the firmware this morning, it introduced another problem while solving the previous one Cheesy

This time, I used the original cable ^[short] that came in the package and when I checked the firmware version, it showed the correct version, but as soon as I unplugged it, it went to bootloader mode and it got stuck in there. After that, whenever I reconnected my device, it lead to an empty wallet ^{[I checked my laptop and the web version, everything was fine, so I downgraded (on desktop) my Trezor suite to 21.7.1 (for the time being) until I do more tests and figure out what's causing it on the latest Trezor suite version]}.

Quote from: dkbit98 on September 17, 2021, 08:42:55 AM

I don't plan ever installing that spying nightmare on my computer, and I was reading reviews that it is getting worse, with some serious Explorer usability issues.
They are making it harder for users to change default apps, I am not sure if it's possible to disable automatic updates, and start menu is barely usable.
Linux OS is free, open source and you can customize it as you like, without additional spying features.

Quote from: Coin-Keeper on September 17, 2021, 01:36:24 PM

Thumbsup. Never going back to Windows for anything requiring privacy - like my Crypto presence in the world.

Before anything else, I do agree with both of you about the spying/privacy problem on windows and while you can limit it to a large extent ^{[some parts require a workaround]}, it's not good enough and the only thing that's stopping me from making a switch, it's the compatibility issues with some of the apps.
^{- @dkbit98: In regards to Microsoft making it harder to do certain tasks on Windows 11, you're right but that's been happening since Windows 7 and it takes a small amount of time to get used to doing those tasks in a new way.}

Quote from: Pmalek on September 18, 2021, 02:21:18 AM

What's the benefit of this improvement? You can set up your new wallet without an internet connection, I get it. You can generate a new seed, maybe even test its validity (not sure how Trezor does it). But if you are using a hardware wallet, you probably don't have an airgapped system anyway. Sooner or later, that device where you set up your Trezor on will go online. It's not like the old hardware onboarding processes leaked the seed phrases because you needed an internet connection. Maybe I am not looking at it the right way.

AFAICS, you're completely right and all this does, provides a safer environment for the setup process ^{[I hope it doesn't give newbies a false sense of security]}.

Pmalek

legendary

Activity: 2730

Merit: 7065

Quote from: SFR10 on September 17, 2021, 08:15:15 AM

Quote from: https://blog.trezor.io/trezor-suite-and-firmware-updates-september-2021-a490f2ea16c1

The Trezor Suite onboarding process has been updated to allow you to complete the process without being connected to the internet. This means that a new Trezor device can be set up without the host machine being actively connected to the internet, improving one’s privacy, security and peace of mind.
The onboarding process exists to ensure every customer correctly sets up their wallet without needing to find help online or otherwise exposing themselves to an unsafe environment.

What's the benefit of this improvement? You can set up your new wallet without an internet connection, I get it. You can generate a new seed, maybe even test its validity (not sure how Trezor does it). But if you are using a hardware wallet, you probably don't have an airgapped system anyway. Sooner or later, that device where you set up your Trezor on will go online. It's not like the old hardware onboarding processes leaked the seed phrases because you needed an internet connection. Maybe I am not looking at it the right way.

Coin-Keeper

hero member

Activity: 761

Merit: 606

Quote

Linux OS is free, open source and you can customize it as you like, without additional spying features.

Thumbsup. Never going back to Windows for anything requiring privacy - like my Crypto presence in the world.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: SFR10 on September 17, 2021, 08:15:15 AM

I've updated both the Trezor Suite and the firmware on my Trezor device, but when I went to check the firmware version under the device tab, it still shows the previous one

I updated both Trezor suite and device firmware yesterday, it was probably one of the easiest updates I ever done without any issue whatsoever.
There was no more clicking of both buttons on wallet and I confirmed that both versions are updated correctly.

Quote from: SFR10 on September 17, 2021, 08:15:15 AM

Out of curiosity, has anybody tried testing the Win10 version on the Windows 11 insider preview builds? The release date for Win11 is in less than a month and I still haven't seen any discussion on their forum about creating a native version for the upcoming windows.

I don't plan ever installing that spying nightmare on my computer, and I was reading reviews that it is getting worse, with some serious Explorer usability issues.
They are making it harder for users to change default apps, I am not sure if it's possible to disable automatic updates, and start menu is barely usable.
Linux OS is free, open source and you can customize it as you like, without additional spying features.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Here's what the subject field means:
^{- I do know this doesn't mean being 100% secure but it makes the setup process a bit safer.}

Quote from: https://blog.trezor.io/trezor-suite-and-firmware-updates-september-2021-a490f2ea16c1

The Trezor Suite onboarding process has been updated to allow you to complete the process without being connected to the internet. This means that a new Trezor device can be set up without the host machine being actively connected to the internet, improving one’s privacy, security and peace of mind.
The onboarding process exists to ensure every customer correctly sets up their wallet without needing to find help online or otherwise exposing themselves to an unsafe environment.

They've also added Trezor suite support for Apple Silicon:

Quote from: https://blog.trezor.io/trezor-suite-and-firmware-updates-september-2021-a490f2ea16c1

Native Trezor Suite build for Apple Silicon chips
For this version of Trezor Suite, we have made a new native arm64 build optimized for Apple’s Silicon chip architecture, also known as the M1 processor.
If you use one of the latest Apple desktop or laptop computers, you can download this version of Trezor Suite from the dropdown menu on the Suite landing page, https://suite.trezor.io.

Firmware updates

[emulator] Added option to dump detailed Micropython memory layout
^{- For Model T only.}
Support for Ethereum EIP1559 transactions
^{- For Model T only, but looks like there might be a "workaround" in the future.}
Re-enabled Firo support
^{- Model One and T.}
Security fix for "Stellar"
- Quote from: https://blog.trezor.io/trezor-suite-and-firmware-updates-september-2021-a490f2ea16c1
  If you secure Stellar using a Trezor Model One device, please update your device as it includes an important security update.

Other changes:
- Model One
- Model T

I've updated both the Trezor Suite and the firmware on my Trezor device, but when I went to check the firmware version under the device tab, it still shows the previous one ^{[despite successfully installing the latest one]} and on top of that, when I clicked on the "Up to date" button, it said the following:

Quote
Your device is already updated to the latest firmware. You may reinstall the firmware if needed.

It's not a big issue but is anyone else having the same experience after the updates?

Out of curiosity, has anybody tried testing the Win10 version on the Windows 11 insider preview builds? The release date for Win11 is in less than a month and I still haven't seen any discussion on their forum about creating a native version for the upcoming windows.

Topic: Offline onboarding on latest Trezor suite update (21.9.2) (Read 77 times)