Quote from: JorgeStolfi on August 21, 2014, 06:54:08 AM

Quote from: klokan on August 21, 2014, 06:36:22 AM

But I don't understand why do you need to attack every Bitcoin related company?

Can't you see that I am NOT attacking the company, but trying to help it and its clients?

Quote from: klokan on August 21, 2014, 06:36:22 AM

Can you tell us how would you improve it?

I gave some suggestions (keep it as simple as possible, make the firmware read-only, make the case a bit harder to fake/tamper, ...)

But some risks are probably not fixable, such as the need to trust the manufacturer, hijacking in the mail, social engineering and address substitution ...

Clients must be warned of those risks, and the warranty must be carefully worded so that the company is not held liable for losses that come from them.

If the device was simpler than it is now, you would have the same comment and ask it to be simpler. You were expecting it to have hundreds of thousands of lines of code, while it has 20k. And your proposition is to make it simpler.
Similarly, if the case was harder to fake, you would again suggest to make it even harder to fake, because there is no unfakeable case. These comments are not helping.
The third and the last proposition about a firmware. When you want to flush it, you need to boot the device into firmware flushing mode (with both buttons pressed when plugging it into computer). It's not possible to hacker flush it whenever he wants. You need to continuously plug it in in special mode and confirm the firmware signature on the screen. User can decide never to update his firmware. In that case you may consider it "read-only".

Since all your improvement propositions were addresses and you warned us about the unfixable ones, then I believe your mission is done here. Thanks.

PS: Investing in any currency is "gambling in a lottery with unknown odds and payoffs" because currencies are not backed by anything these days. Some are more volatile, some are less volatile. Everybody knows that. I'm not "investing" into it myself, but I believe that the technology is extremely interesting and would make for a extremely good payment system if adopted worldwide. Please note the difference between "investment" and "payment system". The thing is that today, in the internet age, if I wanted to send you some brazilian reals for your valuable insight about how to improve this product, it would take at least a week for you to receive it and you would receive at most 95% of the value I sent you. Do you consider the existing payment system optimal? Can't you see some benefits in Bitcoin now?