Post
Topic
Board Speculation
Re: Gold collapsing. Bitcoin UP.
by
cypherdoc
on 23/02/2015, 20:29:54 UTC
can the Trezor ppl see our balances and tx's while the Trezor is logged into myTrezor.com?

Out of curiosity, how do you guys plan on using your Trezor? I looked into them, like the idea and would like to get one, but couldn't see how a Trezor would fit into how I currently manage my BTC.

In my case I use Armory offline wallets for primary BTC storage, with secure HD seed backups so I'm confident I can always restore the wallets. For day to day usage I keep a small amount in Mycelium, and use this for buying pizza, etc. To fund Mycelium, in Armory I create spending addresses with a small amount of BTC and export the private key to Mycelium. The advantage to this is if I lose my phone, the BTC are recoverable in Armory or HD seed backups. The worse case is if someone steals and breaks my phone, I can only lose the amount on the phone (similar to cash in a real wallet). I like this method because: 1)  I can store and use BTC on my phone without worrying about losing the coins because they are simultaneously in Armory (which is an awesome property of Bitcoin) and 2) Only a small amount are ever "at risk", with the majority secure in Armory.

Because of this I can't see how a Trezor would fit. So how do you guys use it?

i foresee the Trezor replacing the offline wallet and its pc and being more secure since the offline wallets can be susceptible to a USB malware attack.  as far as i know, there is no way to get privkeys off a Trezor so in that sense it is safer.  i would hope you could just plug it into your online pc to sign tx's from the online Armory watching only wallets.  we'll have to see what Armory comes up with.

i don't understand how or why you are using HD seeds since Armory currently only generates linear deterministic keypairs, not hierarchical.  i also wouldn't bother exporting privkeys from the offline Armory wallet since you can just make a HD seed backup of your Mycelium wallet that can be restored in case of theft or loss while avoiding excessive and unnecessary exposure to USB attacks from accessing the offline wallet.

i wonder if another reason to avoid exporting Armory linear deterministic privkeys is if you reveal that privkey on your phone along with perhaps the master public key, can ALL your privkeys be determined similar to how it can be done with an xpub+childprivkey in HD wallets? 

molecular would probably know.

if SINGLE privkey is compromised from linear chain then ALL privkeys can be computed in same chain.

that's not right.  you'd need more information, like the chain code if it's even possible, than just a single privkey from the chain.