Topic: Trezor security (Read 402 times)

Trezor is for me a very safe wallet. Since I bought it, I haven't stop using it. You great the pass you want, and nobody is able to know that. Also, if the pc you will use has a various or something like that and someone is trying to steal your bitcoin, he will fail, BTC bcs are protecting from trezor! You should check their website and learn more about it. And last thing, it has a very small size so it's very easy to travel with or hide it

Every time you make a transaction with your TREZOR, you have to confirm the transaction by pressing a button on it, which is a form of 2FA.  You also have to log into it with a PIN to do that, and every time someone wrongly guesses your PIN the amount of time it takes to enter it again changes by a power of 2.  So the only way someone could get access to your funds is by literally walking into your house, grabbing you and holding a gun up to your head and brutally forcing you to reveal the location of your seed.  It would be much harder to take your funds from a TREZOR than it would be from a credit card.

Even if your TREZOR got destroyed you could recover it with your seed on a BIP compatible wallet like Electrum or Mycelium.  You can even use your Mycelium wallet as a bridge to access your wallet along with the official TREZOR chrome extension and bridge.

So even if they were to track you through the blockchain you'd be safe, which is more than can be said for software wallets like Electrum because unfortunately if they found out about you they might be able to target you with malware or something.  TREZORs don't communicate data which could infect them with malware - it's impossible.  I don't work for TREZOR but it's pretty damn cool.

If you have any other concerns you could check out their security threats page.

SHA1, 2 and their derivatives all came from the original, "designed" by the NSA. There's no telling how many of them the NSA is able to crack.

Their portal, afaik is just a page which loads the software to access the trezor. All the operations are made through calls to the trezor, which outputs a response. No whitelisted commands can be made, so no unwanted information should be leaked. If the firmware is corrupted, then the trezor will display this on boot. This is a basic explanation of how it works.

Hello,
I am investigating the best way to manage a bitcoin wallet in a safe a private mode.
Hence I did some documentation dig on Electrum and Trezor combined with light research on deterministic wallets.

Now the questions:

I heard that everything can have a backdoor (NSA teach us), even a chipset, but I wonder if using the mytrezor wallet which require an internet connection to their portal is really protecting me against leaking the seed and give away the ability to potential attacker in an easier mode then the brute force that is mathematically unfeasible (even if every statistic teach you that probability is not protecting you from somebody who is lucky to get your seed at the first shot  ). I am also wonder the same question about electrum unless I can use something that protect me to do not give away my seed (i.e. offline) and allow me to sign transaction without any need to wire connect anything even a printer for a QR code. 

Regarding the privacy I believe that unless there is a way to detach/decouple the physical world with the cripto world there is no way to protect you against being tracked on block chain.
in the end of the day if you spend your bitcoin you connect yourself with somebody else. Tumblers/Mixers do not help. TOR has been hacked by the NSA so what for.
There are ATMs but as long as I can see they have all sort of tracking for your real Identity (even finger tips) which in my opinion is completely insane.

Thanks for giving me arguments on both questions