Thanks @drehb, you are correct. I found more detailed explanations by Trezor.
Trezor One you must enter the password in the web interface, Trezor T you can do it in the web interface or on the device, and this will select the corresponding wallet or create a new one if itâs not a passphrase youâve used before.
Thereâs a downside here, in that for relatively sophisticated attackers:
- thereâs a way to extract the seed from a Trezor (demonstrated by Kraken security)
- itâs feasible to brute force short passphrases (6-ish characters) using custom hardware
This means that any Trezor without a passphrase is vulnerable if lost or stolen, and so most people should use a passphrase.
Also that passphrase needs to be strong, commensurate with how bad it would be for you to lose what you are protecting.
The nice part is that you could have more than one wallet on the same Trezor with different strength passphrases for different levels of funds, like pocket change, leather wallet and under the mattress!
Iâll bet most people donât use a passphrase, and that most who do arenât using one thatâs secure against brute force attacks. Because while these facts are not hard to find, they arenât really apparent from the Trezor website and instructional documentation.
I think though thereâs another problem. Most people with a Trezor mark themselves out as targets. Itâs like a sign that you are carrying around a large but unknown amount of cash in your head, and this is the real problem with such devices - at some point physical attacks on the person could become more common, and you donât want to lose everything because itâs all readily accessible from a single device through physical coercion. This is the downside of âbeing your own bankâ.
That ip can become much worse if the vendorâs database is hacked as happened with Ledger - it identified a lot of users who are now much more vulnerable.
The answer to this is some form of shared security, custodian, escrow etc. I think this is one of the key functions performed by banks for anyone with large amounts of money to keep safe.
Multi-sig is becoming much more common now thanks to things like Specter wallet.
No the hack was on Ledger client database.
No, it was shown that a Trezor COULD be hacked if it is physically obtained.
Scroll up to post 281/282 in this threadâŚ
Trezor (the device) was hacked.
Ledger (the company) was hacked.
When @happybeing mentioned a hack that identified a lot of users it means the latter.
He was talking about people getting muggedâŚ
Tfa is correct, happybeing was talking about the database theft identifying ledger owners, but he mistakenly thought it was the trezor database.
At least thatâs my interpretation.
Well, I guess he will need to clarifyâŚbecause that doesnât even make sense of the context of his post, imo.
It does make sense.
A device hack does not identify a lot of users.
A database hack identifying everyone who bought one does, and makes them potential targets.
@tfa is correct and this is my mistake - thereâs no evidence of a Trezor customer data breach I can find after a quick search. This of course doesnât mean it canât or wonât happen, so I think it is best to think what it means if you are identifiable. The best way to handle that is to find a way to purchase which doesnât expose any personal details.
If anyone knows a way to do that for delivery, that would be of interest to others I think. You can pay with bitcoin so thatâs step 1, but you still have to get it delivered.
Not particularly cheap, but cheaper than a regular po box.
Hmm, my mistake then. Perhaps I shouldnât have slept through English class. ![]()
I have just sent 1165 Maidsafecoin (~1400USD) from Bittrex Global to my Trezorâs BTC address. However after receiving the transaction, my Trezor now displays : 0.0000054 BTC (0.34$ USD).
I believe I have followed the instructions from :
If someone could help shed some light on this, much appreciated. ![]()
![]()
Hello and welcom @twittersora !
To see your MAID you need to open this site and connect it to the Trezor:
https://trezor.github.io/omni-trezor/
Privacy. Security. Freedom
As it says on the cover of The Good Book â DONâT PANIC ![]()
@Dimitar Thank you for the reply, I visited OMNI Trezor , Under Segwit Accounts , I also see : Account #1 : 0.0000054 BTC .
and when I click on Account #1 , I see the message : âThere are no eligible addresses on this account. Please ensure your addresses containing OMNI tokens have at least 8000 satoshi in Bitcoin on a single output as well in order to faciliate a transaction.â
Could it be because none of my BTC addresses on the Trezor have more than 0.00008 BTC? If so, should I send 0.00008BTC to the same address as the one I sent Maidsafecoin to?
Thanks again for the help
Yes, you need at least 8000 satoshis, it is best to send more, because when you decide to move your MAID to an exchange you will need bitcoin to pay the transfer fee.
Privacy. Security. Freedom
Thanks you ![]()