[How To]: Buy/Move/Store OMNI MAID :safe: hardware and software wallets

1 Like

Thanks @drehb, you are correct. I found more detailed explanations by Trezor.

Trezor One you must enter the password in the web interface, Trezor T you can do it in the web interface or on the device, and this will select the corresponding wallet or create a new one if it’s not a passphrase you’ve used before.

There’s a downside here, in that for relatively sophisticated attackers:

  • there’s a way to extract the seed from a Trezor (demonstrated by Kraken security)
  • it’s feasible to brute force short passphrases (6-ish characters) using custom hardware

This means that any Trezor without a passphrase is vulnerable if lost or stolen, and so most people should use a passphrase.

Also that passphrase needs to be strong, commensurate with how bad it would be for you to lose what you are protecting.

The nice part is that you could have more than one wallet on the same Trezor with different strength passphrases for different levels of funds, like pocket change, leather wallet and under the mattress!

I’ll bet most people don’t use a passphrase, and that most who do aren’t using one that’s secure against brute force attacks. Because while these facts are not hard to find, they aren’t really apparent from the Trezor website and instructional documentation.

I think though there’s another problem. Most people with a Trezor mark themselves out as targets. It’s like a sign that you are carrying around a large but unknown amount of cash in your head, and this is the real problem with such devices - at some point physical attacks on the person could become more common, and you don’t want to lose everything because it’s all readily accessible from a single device through physical coercion. This is the downside of “being your own bank”.

That ip can become much worse if the vendor’s database is hacked as happened with Ledger - it identified a lot of users who are now much more vulnerable.

The answer to this is some form of shared security, custodian, escrow etc. I think this is one of the key functions performed by banks for anyone with large amounts of money to keep safe.

1 Like

Multi-sig is becoming much more common now thanks to things like Specter wallet.

1 Like

No the hack was on Ledger client database.

2 Likes

No, it was shown that a Trezor COULD be hacked if it is physically obtained.

Scroll up to post 281/282 in this thread…

Trezor (the device) was hacked.

Ledger (the company) was hacked.

When @happybeing mentioned a hack that identified a lot of users it means the latter.

1 Like

He was talking about people getting mugged…

Tfa is correct, happybeing was talking about the database theft identifying ledger owners, but he mistakenly thought it was the trezor database.
At least that’s my interpretation.

2 Likes

Well, I guess he will need to clarify…because that doesn’t even make sense of the context of his post, imo.

It does make sense.

A device hack does not identify a lot of users.
A database hack identifying everyone who bought one does, and makes them potential targets.

2 Likes

@tfa is correct and this is my mistake - there’s no evidence of a Trezor customer data breach I can find after a quick search. This of course doesn’t mean it can’t or won’t happen, so I think it is best to think what it means if you are identifiable. The best way to handle that is to find a way to purchase which doesn’t expose any personal details.

If anyone knows a way to do that for delivery, that would be of interest to others I think. You can pay with bitcoin so that’s step 1, but you still have to get it delivered.

2 Likes

Not particularly cheap, but cheaper than a regular po box.

1 Like

Hmm, my mistake then. Perhaps I shouldn’t have slept through English class. :crazy_face:

1 Like

I have just sent 1165 Maidsafecoin (~1400USD) from Bittrex Global to my Trezor’s BTC address. However after receiving the transaction, my Trezor now displays : 0.0000054 BTC (0.34$ USD).

I believe I have followed the instructions from :

If someone could help shed some light on this, much appreciated. :sweat_smile::pray:

1 Like

Hello and welcom @twittersora !

To see your MAID you need to open this site and connect it to the Trezor:

https://trezor.github.io/omni-trezor/


Privacy. Security. Freedom

1 Like

As it says on the cover of The Good Book – DON’T PANIC :slight_smile:

1 Like

@Dimitar Thank you for the reply, I visited OMNI Trezor , Under Segwit Accounts , I also see : Account #1 : 0.0000054 BTC .

and when I click on Account #1 , I see the message : “There are no eligible addresses on this account. Please ensure your addresses containing OMNI tokens have at least 8000 satoshi in Bitcoin on a single output as well in order to faciliate a transaction.”

Could it be because none of my BTC addresses on the Trezor have more than 0.00008 BTC? If so, should I send 0.00008BTC to the same address as the one I sent Maidsafecoin to?

Thanks again for the help

2 Likes

Yes, you need at least 8000 satoshis, it is best to send more, because when you decide to move your MAID to an exchange you will need bitcoin to pay the transfer fee.


Privacy. Security. Freedom

You can also see your coins if you paste you address in https://omniexplorer.info/

3 Likes

Thanks you :pray:

1 Like