Quote from: kkurtmann on December 20, 2014, 07:43:04 AM

Quote from: lyth0s on December 20, 2014, 07:32:25 AM

Quote from: kkurtmann on December 20, 2014, 07:24:19 AM

Quote from: lyth0s on December 20, 2014, 06:55:29 AM

Now a weakness of having viruses on your computer could be that the address that you want to send the coins to can be modified before your PC displays it. IE you receive a PM and the virus changes all bitcoin addresses in your webrowser to their address or if you copy/paste it changes the addresses in the clipboard. So then when you THINK you're sending the bitcoins to the right person, it could actually be the wrong address. That is the #1 thing I would watch for.

I'm sure the trezor team can give you better descriptions, but that's my 2 cents

This is the purpose of the screen, to verify the address and amount are correct before signing.

What I'm talking about is a virus giving you the wrong address to send to, which occurs prior to dealing with the Trezor at all. Like if I email you my address which is 1Lyth and the virus changes the HTML/message to read 1Virus and then you send the bitcoins to 1Virus thinking that it's the correct address.

This is what the screen on the Trezor is for. When your computer sends the unsigned tx to the Trezor for signing, you can verify on the Trezor screen that the correct address and amount are shown before clicking confirm on the Trezor. I'm sure all this is covered in the manual.

Well if the changing of the address by the malware is the only problem then we can sleep peacefully.

I will tell him to revisit this thread and to see responses by himself. Of course nobody sane enough will ever have 5 malwares on his machine, but I was just speaking hypothetically.