Quote from: gweedo on November 30, 2013, 02:07:33 AM

Quote from: dingrite on November 30, 2013, 01:13:43 AM

Quote from: stick on November 29, 2013, 09:41:51 PM

Quote from: crazy_rabbit on November 29, 2013, 02:48:36 AM

I actually bought two of them- the plastic ones. Stick- would it be possible to 'upgrade' mine to the Metal bodies? Considering the BTC I send is now worth over a $1000? :-)

Unfortunately no. Bitcoins were exchanged to Euro to cover productions costs, not held to speculate on exchange rate.

You claim your device provides security, could you explain how does it provide security comparable to an airgapped computer?
What if malware intercepts wallet sign request and give out a forged request to the device when you legitimately ask it to sign something? The person with the device will have to read the small screen each time to be sure he isn't about to sign away all his bitcoins. How many will do so, especially if the malware is careful and does it only after it detects mass manual transactions when a user is less likely to pay attention for example?

You failed to respond to my earlier post, I wonder why.

These questions have been answered before.

Also malware can't forge a request because it shows you the request and you have to enter a pin to sign that transaction. If someone doesn't read the screen then that is their fault and shouldn't be upset if their coins are stolen.

They changed it to a pin? Shows only 2 buttons in their video.
And it's easy to say those problems were mentioned before, a source would help.

It's called social engineering, if you carefully listen for multiple transactions where the user has to sign each one it would be easy to interject your own and have a large fraction of users fall for it. Likewise if it lets you sign multiple transactions at once on that puny screen you just insert your own.

Why would people want a device like that? Get an old PC, airgap it, store wallet on it. Sign stuff and propagate signed messages from any online PC. Anything else is asking for malware to steal it, no encryption would help you since the computer at some point has to know your private key to sign a transaction - the moment it knows it malware can get it.

And the funny thing is if you are cheap you don't need a second PC even, put an encrypted *nix OS onto a USB with networking disabled, sign transaction, copy onto another usb without any encryption the signed transaction and propagate it from your insecure windows.

The more I think about the concept of this device the more it seems to be intended for idiots. All theater, no actual security.