Quote from: btchip on December 20, 2014, 11:12:28 AM

Quote from: kkurtmann on December 20, 2014, 07:24:19 AM

Quote from: lyth0s on December 20, 2014, 06:55:29 AM

Now a weakness of having viruses on your computer could be that the address that you want to send the coins to can be modified before your PC displays it. IE you receive a PM and the virus changes all bitcoin addresses in your webrowser to their address or if you copy/paste it changes the addresses in the clipboard. So then when you THINK you're sending the bitcoins to the right person, it could actually be the wrong address. That is the #1 thing I would watch for.

I'm sure the trezor team can give you better descriptions, but that's my 2 cents

This is the purpose of the screen, to verify the address and amount are correct before signing.

no, it's not. The only way to guard against such attack (out of having one distinct channel to communicate Bitcoin addresses) is to support BIP 70 payments with properly pinned down certificates (so that the malware wouldn't be able to sign again in the middle with its own key).

I don't think that BIP70 is the answer to all these issues. What if I don't want to tie my address to my identity? I cannot use Bitcoin? I believe this would defeat one of the purposes for which Bitcoin was created.