Topic: Show off your hardware wallet - page 7. (Read 2863 times)

I think only model T is this expensive (and always has been); Trezor One has kept its price and is still competitive with Nano S (which is now (being) discontinued), but it's a very old device by now.

Sure, preferences play into this, but I do believe that you can put up a list of things that are objectively good and desirable in such a device and where I don't know why anyone would not want them. Just a few from the top of my head.

• Open source firmware and hardware
• Reproducibility of the firmware builds
• A screen to verify the recipient's address
• Limited amount of closed-source silicon (e.g. prefer screen with circuit on glass [1])
• Open-source secure element (protects from hardware attacks)

Aspects I would rate as being more subjective:

• Closed-source secure element (what's available today - tradeoff between trust in the manufacturer of this chip and security from hardware attackers)
• QR Code communication / air gap (depends on user's preference: if they are super privacy and security focused, won't use a phone and might not have a webcam)
• Phone app (see above)
• Form factor (see above)

I could just quote a Wikipedia article about secure element chips, but put shortly, they're small integrated circuits (example: [2]) that store your seed in a way that I can't just open up the hardware wallet and read it out with my PC. This chip is also shielded from physical attacks, like opening it and reading the bits with a microscope and these types of attacks. Until now they've always been closed-source, so in theory a complete open-source hardware wallet that uses such a chip is vulnerable to attacks that the developers and users can't identify since they don't have access to the secure chip's source. It could also be backdoored. If you use an open-source secure element though, you can^{[it's not that easy, though]} verify that it's not malicious and has no backdoor. Trezor appears to be working on such a chip currently.

There's also a curated list of hardware wallets with secure elements here: https://bitcointalksearch.org/topic/secure-element-in-hardware-wallets-5304483

[1] https://youtu.be/Hzb37RyagCQ?t=2061
[2] https://www.microchip.com/en-us/product/ATECC608B

I started out with the KeepKey because it was one of the cheapest open-source hardware wallets around, but I didn't really find it all that great.  The GUI that used to be available when I bought mine was one of the reasons I didn't like it, and ended up using it exclusively with Electrum.  It's no longer shipped with a user interface, because they're using it to promote their other product, ShapeShift.  To be honest the company kind of gives me the creeps, even more than Ledger.

I've also used Ledger's Nano and NanoX, but I tend to agree with you about Ledger as a company in general.  The fact that the wallets aren't open-source is a sticky point for me, but they really lost me when they let my personal information get leaked.  Forget about sats, I wouldn't give them a fraction of ripple.

I just reserved my order for a ColdCard mk4, so I'm interested to see how that works for me.

My go-to HW wallet has been the Trezor, I use both the One and the Model T.  I don't deal with altcoins when I can avoid it, and I have none that I'm holding so I primarily use them with Electrum as the interface, and both have been great.  The only limitation I find with the T-1 is that it's not compatible with XMR, which really hasn't been an issue since I don't HODL monero, but I do like to trade some on one specific P2P platform just as a way to (slowly) grow my stash of BTC.



As long as you know how to keep your coins (seeds) safe, a hardware wallet is just nothing more than a good way of keeping your coins mobile.  If you don't need the majority of your wealth to travel with you, then cold storage is more practical and more affordable.

---

Wow, I had no idea that the Trezor models have gone up so much.  They used to try to keep the price point competitive with Ledger, but I guess there's no point in that since Ledger shot themselves in both feet in recent years.

As for the "perfect device," I don't think you'll ever get a consensus on that one.  You can ask ten different people what they would consider the prefect hardware wallet, and you'll likely get ten different answers.  Hardware wallet manufacturers' primary marketing demographic isn't the technically astute, so their definition of the "perfect device" is more likely to result from how well it sells and how user friendly it is.  That's not likely to coincide with your definition (or mine.)



That's a good point about seeds being "out in the open."  I'm don't have the technical knowledge to what makes a "secure element," and whether it would be open-source or not.  But if not, then I'm inclined to keep using my Trezor with a strong Bip39 passphrase to encrypt the seed.

You can import seed words manually every time if you prefer to do it slowly, advantage of QR code import is speed.

I always prefer having physical backup on paper or metal instead of digitally encrypted file stored on sd cards or secure elements of hardware wallets.
For me it's better option to use multiple passphrases and that is something you can encrypt if you want, and keep them in separate place from seed words.
You can use seedsigner both for multisig and singlesig, and Trezor is inferior with this as well as dealing with change addresses.
I am not saying SeedSigner is perfect, but it is better option than ledger or trezor for Bitcoiners, and they are not wasting time on altcoins.
One more alternative is project called Krux wallet:
https://selfcustody.github.io/krux/

I agree almost 100% with everything you said here. To me, I think a Trezor One with secure element would be worth like $200 or 200€, but the current model T price tag is already around the 300 mark, without this new custom chip so I won't hold my breath.
You correctly figured out that most wallets have one problem or another; not open source, no screen, wireless connectivity, price - so even though at first glance hardware wallets seem like a pretty exhausted field after so many years, I'm pretty excited to see what the next months and years will deliver and if we can get the perfect device.

Do note, regarding SeedSigner and having to store the seed 'in the open' in your home, that any device without secure element is doing just the same. Software wallets and hardware wallets like Trezor models without SE (including PiTrezor), basically store the seed 'in the open' as well, just digitally.

The question whether this is a potential attack vector entirely depends on the circumstances: where will the device be stored, where will it be used, by whom will it be used, how often and does someone have access to it for longer periods of time unattended? In some cases it will be better to have a fully open device (but without SE) and in others you rather put some trust in the SE to be benevolent to in turn get almost guaranteed protection from technological attacks by malicious parties in your surrounding.

I have already seen SeedSigner and thought about it. Personally what I don't like with this product is that you need to have the mnemonic seed QR to use it, i.e. the most valuable wallet information unencrypted at home. Sure, you can hide it. Sure, you can add the protection layer of a mnemonic seed passphrase (I believe).
I felt that SeedSigner isn't quite the gadget that I need, yet. Worth considering though should I go more heavy on multi-signature wallets.

Sure, why not. The PiTrezor is in my opinion somewhat a "hacky" solution. While working pretty much the same as an original Trezor One, it's wallet data safety is basically non-existent if you don't use a mnemonic seed passphrase. The SeedSigner is a device on its own and doesn't store vital wallet data at all.

I have looked at available hardware wallets on the market. Almost all have something that I'm not happy with.
Ledger is NoNo, I'm not willing to support this company with a single penny/Satoshi.
Trezor One is pretty limited, same for PiTrezor; Trezor T too expensive for my taste. I hope a new Trezor with their own open-source SE chip isn't going to be with a price tag as model T.
Specter DIY is an interesting option for me.
Passport batch 2 looks interesting, too.
Bitbox02, well, not bad, but doesn't really outshine in my opinion.
Coldcard's recent move and future Mk4? Hm, not so happy and amused.
Other hardware that focusses on smartphone use or hasn't own displays is out of consideration for me.

Just wanted to give a glimpse of my thought processes... (I don't feel a pressing urge to have and use a hardware wallet, yet.)

I still feel like there should be a clear distinction in the table between a fully operational hardware wallet that you buy, take out of the packaging, and it's ready to be used, and one that you have to build yourself. I don't want someone to see the post and think that's how the HW is supposed to look only to receive a chopped up version of it that needs to be assembled. The next thing on their mind could be: Pmalek, may you burn in hell! I don't want that.

Nice one, but I think you should check out one more wallet project that is based on same Raspberry Pit Zero device, and it's called SeedSigner.
SeedSigner is only supporting Bitcoin and it's air-gapped device comunicating with other devices with QR codes.
That means you would need to buy few small parts like camera, 1.3 inch WaveShare LCD display, and print your own 3d case (or purchase from third party).
This is more like signing device and it doesn't have permanent storage, so I consider it safer than Trezor and other hardware wallets.
Seed words are quickly imported with QR code scan.
https://seedsigner.com/

It's Yannick's project on https://www.pitrezor.com and he calls it: PiTrezor
I'd stick to that name. No need to add DIY in front of it as DIY is implied.

Yes, that is exactly what I used and in addition I watched one or two Youtube videos just in case if there's something to pay attention to in particular. But the details on the blog are sufficient to assemble the device and get it up and running.

I didn't want to use a custom case to avoid making it look like a crypto hardware wallet. My assembly could be taken apart, the microSD card hidden and it would be rather "innocent" for visitors, bene- or malevolent.

Very interesting project. I am gonna add it to the table as DIY PiTrezor, unless you think it should be called differently?
I found this neat little explanatory guide that explains how to build one of these devices yourself in case someone is interested. Is that what you used or do you have alternative sources?

I have assembled a piTrezor recently to play around with as I had a spare Raspi Zero W for it. The OLED bonnet didn't cost much, so no big deal. Wireless networks are of course deactivated by appropriate dtoverlay settings. I had no use for a Raspi Zero w/o wireless connectivity, so none at home.



Until I understand the changes to the original Trezor One firmware, I won't trust the piTrezor to generate me a seed for mainnet Bitcoin or other coins.
As unmodified software like Electrum or the Trezor Suite work properly with the DIY piTrezor, I would be fine to restore an existing wallet with mnemonic seed and use it with the piTrezor. My main goal is to have something to play with and get used to a hardware wallet. I am fully aware that a piTrezor is less safe than the original genuine device as it lacks any storage and boot protection. The piTrezor boots up pretty fast and with multiple microSD cards you could switch multiple wallets easily.

Bonus is your (online) parts orders don't leave some crypto hardware wallet data trails that might one day hurt you. (Leadger™, I see you!)

After seeing how much each of the attendees had to pay for various ticket passes, I wouldn't call it free ^{[I'm sure it was already factored in (except for the SM pass holders)]}.

And they still had the audacity to use the following words on their website ^[SMH]: "Security and privacy"

I was interested to see how it looked and what the user's experience with the wallet is. But not because I like it or appreciate the geographical restrictions and limitations it comes with. A hardware wallet that was given away for free to visitors of a Bitcoin conference doesn't sound very appealing.

Oh you are really interested about Arculus?  
I wrote about Arculus last year it in our Croatian local section, and I would never suggest anyone to waste money on this device/wallet!
It is only available in United States, and it can't be used anywhere outside it's borders, that means nothing will work including their app...
They also don't accept Bitcoin payments for purchases   , they are closed source and I heard many bad comments about them in last year.

It's a closed-source device that was given to Bitcoin Miami 2022 attendees for free [1].
From what I heard, it was criticized a lot for being all closed and sketchy to get something like this for free. Like, if you think about this, it has the potential to be worse than 'free USB sticks' [2].

^^^ This also applies to closed-off hardware wallets, in addition to the ability to deanonymize and / or steal from your wallet.

It wasn't accepted well by everyone, understandably:





And a big one:

[1] https://bitcoinmagazine.com/business/bitcoin-2022-attendees-to-receive-bitcoin-hardware-wallet
[2] https://www.cisa.gov/uscert/ncas/tips/ST08-001

I have never heard anyone mention this particular brand of hardware wallets before except maybe Ratimov in that big list of his. Feel free to share some more information about it and tell us how it works. Some pictures would also be appreciated similarly to how other users submitted theirs.   

I have an Arculus, so far it works.

i would also be in favor of you creating an extra thread here in forum for your whole collection - in the collectibles section people like you are always very welcome
that was also my intention when i created my own, which has kindly posted here by aoluain

Yes as PmaleK posted you should take some nice snaps of your collection, we would like
to see that.

I havent seen you over at the "Collectibles" board?

Check out Cygan's thread on his collectibles > [INFO] CCC - cygan's crypto collection - constantly updated

Also krogothmanhatten created an info thread in suppliers of display items,
you might find something there which helps you out.>
[INFO]- STORAGE ITEMS FOR YOUR COLLECTABLES

Yeah, do that. Share it here. I am sure many would be interested in what's out there.  

No, you are human. We are a species with flaws of all kinds. Anyone active in these technical boards feel dumb at times when they see the levels of knowledge those top posters possess. No harm in that. Btw, I am not counting myself in that group just so we are clear.     

OMG, I'm more than a little confused....this is what happens when the human mind is taken through a 70+ hour insomniathon and decides to make a coherent post on bitcointalk.  Pardon me for that.

I think of the oddball HW wallets as a future part of crypto history if you know what I mean.  The feeling I get when I see wallets like Ballet and quite a few others that either have serious flaws or just don't have any name recognition is that they're not going to be around in a few years.  I don't collect other bitcoin-related things, as they just don't appeal to me--but HW wallets do for some reason.

I wish I could make a giant display album out of the ones I've got (which isn't that many, but I pick them up when I see a bargain).  There doesn't seem like there's a great way to display them otherwise.  Hang them on my walls, maybe?

I am such a dumbass, and I'm really embarrassed about writing that.