asciilifeform: re the trezor nonsense -- it's the , what' 8th year of btc, and still nobody made the obvious sanewallet - txmaker runs from rom, and eats privkey when-required via paper tape
asciilifeform: as i pointed out a year+ ago, a trezor plugged into a specially-instrumented but visually uninteresting pc will give up its key.
asciilifeform: (and also i will add that trezor has a considerably simpler orifice, but we digress, folks who read the logz know what it is)
asciilifeform: 'KeepKey is actually a fork of the Trezor project. We have maintained compatibility through development, and are compatible with Trezor v1.3.3.' << l0l
asciilifeform: speaking of, last i checked, 'trezor' was still reflashable from the usb jack.☟︎☟︎
asciilifeform: trezor news << For the love of god, Montrezor!
asciilifeform: mircea_popescu: ... gmaxwell aware enough to notice [one of] trezor holes. << the differential power thing is plain as daylight to anyone who has seen the published schematic.
asciilifeform: the reason i even bothered to respond to the trezor thing is to share the hypothesis that all of the available products are dumb because the problem they are 'solving' - is dumb.
asciilifeform: kakobrekla: use the python tools to do anything with the Trezor << one of these days, someone should explain to me why a gadget like 'trezor' is necessary
asciilifeform: ninjashogun: i think you have the wrong address. that'd be 'trezor' et al.
asciilifeform: but tell the 'trezor' etc. folks that.
asciilifeform: the 'trezor' stuff is almost physically painful to read. it's as if they knew every single correct design decision, and did... the exact opposite.
asciilifeform: trezor's published code is curiously missing the interesting bits.
asciilifeform: mircea_popescu: the trezor folks took preorders !?!11!
asciilifeform: 'It’s not clear how you would build a secure way to initialise the Trezor, as you’d need to use an untrusted computer to present trusted keys into the device. A virus (MITM) could intercept and rewrite the keys as they were being loaded into the device. Unless you had key fingerprints written down on paper, it’d be impossible to notice a mismatch. Pre-agreed root certs installed at the factory solve this
