Quote from: klokan on August 21, 2014, 09:57:50 PM

Quote from: Perlover on August 21, 2014, 08:55:16 PM

Can stick/slush to add checking option to show current receiving address not only in computer but in the Trezor's screen too

Yes, they are working on it. I proposed this to them back in May. Meanwhile you can send small amount first and confirm with the receiver that he has received this small amount before sending the rest of the money. You will pay fee (which is quite small anyway) twice, but you will be safe from browser replacing BTC addresses.

I am about to get my address for receiving. You suggest to me to send to myself to address gotten from MyTrezor.com?
Somebody wants to send to me some bitcoins. Now i go to the MyTrezor and the MyTrezor shows to me my receiving address.
But how can i sure that this address is mine?

If you will think - you will get zero security in this process

Browser algoritmics will be able to make error for calculation of my next address in chain of BIP44 address
Malware can change address
Some bugs in my processor/software can generate bad address
And so on...

And here no checking from this.

I think the Trezor's HID (USB protocol) interface should have a feature - to show ANY address for path of BIP44 sent to him from computer
Example:

1) Electrum and MyTrezor.com generates new address based by blockchain (new free address from transactions)
2) This software sends to the Trezor command: show bitcoin address in your screen for BIP44 path: m/44'/0'/0'/0/1
3) Trezor CALCULATES public address from private seed and shows address 1BLablablablablabla for path m/44'/0'/0'/0/1
4) Electrum or MyTrezor.com shows bitcoin address 1BLablablablablabla calculated from xpub key
5) User check both address - one in computer screen and other in device's screen
6) If all is OK, user press OK button in the Trezor, copys the address from computer to everywhere

It's easy, security. But what there is now - it's very bad.
I can copy my address from "Receiving" from Tab in MyTrezor.com and will never get a Bitcoin if my computer infected smart malware
Or i have bug in processor, bug in libraries and etc.
Why i need in the Trezor if i have not a safe way for getting there some bitcoins to my empty wallet.
The Trezor has my private BIP32 seed. And only it has! And now the Trezor used only for outgoing transactions.

But incoming transactions are more important!

And here now benefits from the Trezor.

Do you understand?
It's simple idea without solutions now

Or may be i am a fool? May be i don't understand something?

P.S. I don't want to write here about this problem anymore.
I wrote 4-5 posts about this and zero reaction from developer.