Quote from: dillpicklechips on October 13, 2013, 04:00:11 AM

Quote from: weaknesswaran on October 13, 2013, 03:56:55 AM

Quote from: CIYAM Open on October 13, 2013, 03:53:02 AM

Quote from: dillpicklechips on October 13, 2013, 12:22:01 AM

Not at all. All operations on TREZOR require the user to enter a PIN and a one-time password (OTP) . The attacker would have to guess your PIN which is very difficult because the one-time password makes brute-force attack almost impossible.

Aha - so it does use a PIN although I am guessing that the PIN is being typed in on the PC (so is vulnerable to key logging).

I think if the PIN were to be entered into the device directly (i.e. no chance of key logging) then it would be a much better (although requiring at least a numeric keypad - a more expensive) solution.

The pin is typed that way:

Client displays:
OOO
OOO
OOO

trezor display (changes every time):
954
128
367

So no chance for keyloggers.

That is sweet! Man, I wish I had a BTC to buy one!

if you dont have BTC, you dont need one