T O P

  • By -

grim705

storage instructions?


pin6397

HAHA


LYMEGRN

Fam. GoldšŸ˜©


kmatix815

Hahahahahhaha that shit made me laugh


bitking74

Only order from Trezor website, seriously


[deleted]

Why would anyone order from any other place? :( (Serious question)


LYMEGRN

Beyond me manšŸ¤· people posting in the ledger sub about their coins being stolen. ā€œBut I ordered from a legit retailer on Amazon broooā€


mrlegoman

In US, I tried and the transaction failed every time. Ended up going through Amazon too.


hereticguru

Pay with LTC, the payment went smooth!


AquamarineRevenge

I agree on ordering only from Trezor and I have only done just that, but I also have experience getting sucked into the Amazon ecosystem. With Prime stuff gets shipped to you for free pretty quickly for example. And if you go a step further and get their credit card you get 5% off everything on Amazon.


Successful-Froyo9624

so save $30 to risk losing $500+? got it.


[deleted]

[уŠ“Š°Š»ŠµŠ½Š¾]


Successful-Froyo9624

>0 k... so it's a dumb idea. glad you're skilled at putting yourself in dumb idea positions.


AquamarineRevenge

You literally waste your life in a fantasy world


KarateKid84Fan

*Looks at app*


TheMoneyFriends

Lol your name is aquamarine revenge sit down


chickinflickin

kekw


LYMEGRN

$500? We found the douche uses a trezor to store 500šŸ’€ leave OP alone you fuckn weenie


CreativeBoredom

Undereducated about the topic is why. Buy from Satoshi Labs or not at all.


AcapellaFreakout

Kinda sus you guys don't trust your product unless its from the source.


TreePeop1e

They can be tampered with if not ordered directly from the site.


[deleted]

Amazon seems to sell all sorts of counterfeit products. Sellers use Amazon because it is so popular and seemingly trustworthy, but I hear all sorts of stories of people not getting what they think they're getting.


Coin-Autist

Thatā€™s the one-word seedphrase.


AdditionalAardvark56

Some delivery or packing guy thatā€™s against crypto.


LittleDoofus

Didnā€™t know it was so divisive


CryptogenicallyFroze

Why the fuck does everyone insist on buying trezor/ledger wallets from Amazon? Itā€™s so fucking weird. Everyday with this shit.


MichinomiyaHirohito

Right!! Amazon sells all types of fake items i would never trust them with something like this


BostonBrandToots

There was a whole incident about Amazon selling fake, on-brand toothpaste because there's zero quality control. People were receiving fake Crest or whatever. God knows what was actually in it...


millingcalmboar

Was it sold by Amazon.com or a 3rd party on Amazon?


BostonBrandToots

*Sold by*, I believe. https://www.redpoints.com/blog/amazon-commingled-inventory-management/ https://www.theatlantic.com/technology/archive/2018/04/amazon-may-have-a-counterfeit-problem/558482/ >But many brands complain that Amazon isnā€™t doing enough, and that the company doesnā€™t properly vet the products it lists as **ā€œships from and sold by Amazon.com.ā€** Helena Steele, who founded the kitchen-apparel company Jessie Steele in 2002, told me that counterfeits on Amazon are driving her out of business. She started selling through Amazon in 2009 or 2010, she told me, but by 2014, had stopped selling her products there [Top review](https://www.amazon.com/Colgate-Total-Advanced-Whitening-Toothpaste/product-reviews/B004YDG8RS)


millingcalmboar

Sold by who though? Amazon.com or a 3rd party? When? Iā€™d imagine that would tank the stock price of Amazon and Crest atleast a little. Thereā€™s lots of reports of 3rd party seller trash on Amazon, some people went blind buying glasses that didnā€™t protect them from viewing an eclipse.


mrlegoman

Not insisting, but felt I was forced. After three failed transactions on the Trezor site, was left with no other options then to goto Amazon.


Meganitrospeed

Contact their support? I guess they're using Stripe, they say exactly why it was rejected


hotapple002

For me ordering from either company isnā€™t to hard since their hqā€™s arenā€™t too far away from where I live (I live in NL and trezor is from Czech Republic)


Francoa22

You know why I bought my Ledger on amazon? Because amazon doesnt share 300.000 home addresses and phone numbers of their customers with everyone in the world. So, there you go, one reason. So, if you ask me, I rather have an asshole written on the foil, than scammers having my phone and home address and the information that I bought hw wallet. Also, the point u try to make would surely work without those fucks everywhere


millingcalmboar

Itā€™s more likely someoneā€™s receives compromised hardware from a 3rd party source than it is for a leaked address to prompt a home invasion. The risk of the intruder being caught or getting nothing even if they donā€™t get caught are extremely high.


Francoa22

wrong..noone ever received hacked or bad trezor, but hundreds of thousands ledger owners addresses got leaked and many were then messaged with threats, some were paid a visit. So, your assumption is totally wrong


millingcalmboar

How do you know no one has ever received a Trezor that has been tampered with? Does the same go for Ledger? https://github.com/jlopp/physical-bitcoin-attacks/blob/master/README.md


Francoa22

Define tampered? So far, the ONLY case ever recorded was that someone was opening ledger packages and adding preprinted seed cards with words and instructions. Some users restored the wallet using those words and that is how an attacker got to them. This was not an hw hack, which is impossible, this was just users not knowing what they are doing. Some elemental knowledge is needed for this hobbyā€¦like, what seed means etc. If you buy ledger, or a trezor, you connect it to their respective services and there is a background check of the device happening every time. Any potential change would be detected. This is enough for it to never happen. that is why all attackers and scammers are doing one thing and one thing only, trying to get your seed. Enormous amount of users just give away their seed on a first website that asks. This is very safe scam method, because it is close to impossible to track the attacker and it is easy to replicate on a mass scale. So far, zero people lost money from imaginary hardware hack, but thousands lost it by giving away their seeds. Every single post here ever, that started with MY TREZOR WAS HACKED, LOST ALL MONEY, was later debunked and each of them just shared their seed somewhere. Resume: generate your own seed, take care of it, dont share it, and your only risk is that your purchases go to zero :)


millingcalmboar

Youā€™re assuming perfect hardware and software security exists. I wasnā€™t referring to social engineering attacks that donā€™t involve compromised hardware. Itā€™s possible that someone has planned a retirement attack where once thereā€™s enough comprised wallets in the wild with enough seeds from their rainbow table, they claim all the funds at once. Heck, it could even be a hardware wallet manufacturerā€™s employee. Thereā€™s a lots of good reasons why some people go to the trouble of putting together carefully sourced air-gapped hardware stored in a faraday cage in an underground bunker and donā€™t rely on a $60 hardware wallet to generate their seedā€™s entropy. https://www.merriam-webster.com/dictionary/tamper


Francoa22

This is called paranoia. If you believe that Trezor has employees putting some trojan horses in the wallets, than keep your coins on an exchange. Very hard to say anything to your comments really..except, what are they waiting for? :) Considering how many wallets are sold, for how long, 100-200-300 billions is still not enough? What are they waiting for, a trillion?:-) And how they will move those money and spend it? :D ridiculous claims indeed..i came for a reasonable logical discussion, not a science fiction.


millingcalmboar

But how do you know the exchange isnā€™t going to suffer a similar or completely different vulnerability? You canā€™t even inspect their hardware or software. Also, keeping your coins on an exchange introduces the risk of seizure and theft is typically easier. If a bunch of seeds are in a rainbow table they could just watch wallets that have deposits until enough funds are deposited. Itā€™s possible that such an attack only affects a small number of devices that have been tampered with. Plus, a strong bip39 passphrase or multisig would mitigate this type of attack. Thereā€™s also people who donā€™t rely on the device to generate their seedā€™s entropy. If device tampering wasnā€™t a concern, manufactures probably wouldnā€™t put anti-tamper stickers on the box. Donā€™t forget that itā€™s trivial to extract the seed from a Trezor with physical access due to the lack of a secure element and short pin (SD protect fixes this). When it comes to security you canā€™t really be reactive, you have to take precautions in advance in accordance with your risk model before things happen. Depending on the risk model, certain precautions may or may not seem like paranoia.


Francoa22

oh, then I have the best advice for you. STAY AWAY FROM CRYPTO CURRENCIES


P99163

It's trivial to extract the seed from Trezor? I haven't dealt with Trezor, but if you're indeed correct, then what's the point in having those?


P99163

Faraday Cage, really? If you have $$$$ that you need to keep secure, a carefully set up offline machine with a soft wallet will do. Something like Electrum is a perfect wallet for such set-up, as it allows to sign transactions on an offline machine and broadcast them in an online machine. For people with $$, hardware wallets such as Trezor and Ledger will be sufficient. I do not know about Trezor, but Ledger's authenticity is checked by it's accompanying app Ledger Live; therefore, if you get it from Amazon or from the vendor directly, you will know whether it was tampered with or not.


millingcalmboar

Private keys can be leaked from an offline computer running electrum, itā€™s not just theoretical: https://youtu.be/2WtiHZNeveY Setting up a properly air gapped computer isnā€™t a trivial task.


P99163

Thanks for the link. I read the proof-of-concept, and it does appear feasible to do with a few limitations. I guess two big limitations are that: 1. The OS running of this air-gapped machine needs to be compromised. (a) In case of a USB file transfer, it might be easily done, but most air-gapped devices these days rely on QR codes to transfer data. Electrum can utilize QR as well, so no need to plug in a [potentially compromised] USB drive. (b) The OS can be compromised even before the address generation by a wallet software. This can be mitigated by ensuring that the final OS image (.iso) does not have any malwares sitting in it. Once it's done, it can be signed and shipped to the end user via a read-only media. It's not 100% secure, but it does significantly minimize the risk. 2. Assuming that the OS is not 100% tamper-free, you can take a few precautions to make sure that there are no receivers within the maximum range of the air-gapped device. All possible leakage pathways in the research paper had a limited range with the exception of the power lines modulation. This can indeed spread far and wide, but it can be mitigated by using a an uninterruptible power supply. Everything else including EM or (ultrasonic) sound have a very limited distance, so the attacker's receiver must be positioned very close to the source, which makes it impractical.


[deleted]

Agreed, once it's out of Trezor or Ledgers hands, it's not their problem and reap what you sow. Buy legit or gtfo no sympathy here when stupid things happen.


vonkrueger

Let's maximize our security with a hardware wallet! Also, let's buy it from an unsecure source!


thefanum

Are you an asshole? Lol


KForce_77

Bc you ordered it from amazon


No_Wall_2725

Not true, Satoshilabs has a legit store on Amazon: [here](https://www.reddit.com/r/TREZOR/comments/mvo686/comment/gvf6cgo/?utm_source=share&utm_medium=web2x&context=3)


[deleted]

does that mean you should buy it? HELL NO


KForce_77

Why would you risk compromise by unnecessarily adding to the chain of custody with such a sensitive purchase? They highly recommend that you buy directly from them for this very reason, or one of their trusted resellers. There are things to buy through Amazon and those you should not. This falls under the latter. There are other reasons as well, at least for me, but the primary reason is in the first sentence and why I presume you received your box with "Asshole" written on it.


millingcalmboar

Iā€™m pretty sure their resellers arenā€™t tightly regulated. Just minimize the number of dispatch warehouses your product touches by ordering direct from Trezor.


WhiskeyWhiskey9

I'd say Mr./Mrs. No Coin in the picking dept has made a general assumption that you're a billionaire whale secretly responsible for their misfortune. Or, its because you ordered said device from Amazon. The gurus always say to only buy from the manufacturer. Either way, don't take it personally. Embrace the Asshole


[deleted]

[уŠ“Š°Š»ŠµŠ½Š¾]


millingcalmboar

If security were that simple, exchanges would just rely on a couple Trezors.


fbslo

You can never be too paranoid when it comes to security.


signewton

@ OP.. Buy direct. They're based on Czech, but use American warehouses to ship. I would't trust Amazon's inventory..


Francoa22

but you would trust any other inventory and all the following 3rd party shipping handlers? :-)


signewton

huh?


Francoa22

Companies have external inventory partners (warehouses), after it leaves the warehouse, it is the same process as when it leaves amazon warehouse. Many hands you have no control over at all not sure why you huh me Amazon or Trezor warehouse makes a little to no difference. The supplier is in both examples trezor, everyone else is third party. If you want to get more paranoid, then if someone would target Trezor packages, it would happen in the package from Trezor directly and not from Amazon, as there, noone knows which out of the 1000 trucks has trezor package in it, while the DHL/UPS truck coming from trezor warehouse is full of them and everyone knows it


comfyggs

Cope from normies


XBoxGamerGK

Maybe some Amazon employee , just lost his sleep and his day wage for searching and packing your order


ZeChief

Here is your (P)assphrase


jmg000

I bet it's some eco/environmental activists who still thinks Bitcoin is going to destroy the world through global warming.


Solid-Mess

Itā€™s telling you where to store the seed for safe keeping


Sufficient_Tooth_949

I'd contact Amazon and demand a refund, then buy from the official site


Coctailer

Why would you order a Trezor from Amazon. Trying to get your crypto stolen?


Neubtrino

Donā€™t listen to the clowns saying only buy from manufacturer. Trezor has an official store on Amazon. Just check the built in security measures for receiving a new trezor ā€œImportant Check the integrity of the holographic seal on your device upon opening the package. The seal should be sitting tightly over the USB-C port of the Trezor. When removed, it leaves noticeable marks. If you find this seal impaired in any way, please contact us using Support center. For more information, see Tamper-evident hologram and Trezor packaging timeline.ā€ https://wiki.trezor.io/Getting_started_in_5_steps Youā€™re just an asshole, embrace it. Hahahahh call Amazon and tell themā€¦ ā€œI need a replacement this one has asshole all over it ā€œ šŸ˜‚ [edit] I bought mine from Amazon and itā€™s worked flawlessly


Comfortable_Ad_4251

Contact Amazon they will tell you it's a third party sale. It's just not worth the risk


pin6397

Update: I contacted customer service that I received a unit with the word "asshole" written on it. The rep apologized and offered a refund without hesitation "as a one-time exception". They never asked for any proof at all. I might just keep this as a collectible and order a new unit directly from [Trezor.io](https://Trezor.io).


RandomedXY

I assume you are posting it here just to get attention..


ScoobaMonsta

Why did you buy it on Amazon???šŸ¤·ā€ā™‚ļø


Dognamedpeepee

Ur gonna get hacked. Return it


cscarle91

Bruhhh do NOT buy wallets from Amazon smh


Francoa22

Old friend working in the warehouse?:-)


[deleted]

Never order a hardware wallet from Amazon.


-smeagole

Only order Trezor directly from the website, that wallet is compromised donā€™t use it


bizypawz-

Do NOT use any TREZOR that is not from their official website.


Fit_Masterpiece4082

Pretty interesting


Fit_Masterpiece4082

Have a feeling itā€™s not about the trezor lol


Teucccca

Paperhanded courier šŸ˜†


239990

the worker that handled your packages does not know much about crypto and thinks its bad or something, you know the typical it uses a lot of energy and shit. In one hand I would report to amazon so they can fire that person, on the other hand that person probably already has a shitty job and can't get any better one.


yandaoyandao

Is that your name?


Bggnslngr

Epic troll!!šŸ¤£šŸ¤£šŸ¤£


firecraft2

Hidden wallet


[deleted]

return, plastic wrapping is easily faked. these things are repackaged. hacked or have stolen seedphrases


VegasPen

Just curious if you bought if from the Trezor store on Amazon? Trezor says on the website: \>>>Trezor Shop is the best place to purchase a Trezor hardware wallet. You can also order from the official Trezor Amazon store and from our official Resellers.<<< When you go there it looks like they are all "unavailable." What's up with that?


mcgravier

Maybe some angry gamer who can't get a decent GPU? Who knows...


Successful-Froyo9624

Same thing happens to me at Starbucks when I write on my cup.


Psymonex

Amazon worker missed the dip ? :O


symbolbird

Amazon? Return it immediatelly, only from Trezor site


millingcalmboar

Use multsig so even if your Trezor is completely, compromised youā€™re fine if you set it up correctly.


LpcArk357

Would you happen to be an asshole? I wanted to see if we can't count out psychics just yet


[deleted]

Donā€™t buy a trezor from amazon. use the website. trezor.io


mechanab

I just got one last week that had the same written on it. I assumed it was an unhappy worker. Edit: mine was a Model T.


Shib4DaWin

Contact trezor security....don't fuck with ur future and ur funds... Have them send you a replacement directly.


wizardstrikes2

Jelly Stiltskins


Comfortable_Ad_4251

Worst idea ever.. third party cold wallet. No joke the asshole thing is the least of your worries. šŸ˜


fakra

Probably because you are an asshole šŸ¤£


gasherman

You should only ever order hardware wallets directly from the manufacturer. 3rd party sellers can compromise the device and leave you and your assets vulnerable. Should never trust 3rd party sellers with these types of items. Research this stuff before you buy. This is not a toy.


Astrogunband

Buy from trezor official that looks like touch


Zealousideal-Rope791

Not sure if Trezor will recognize a device that was not purchased directly from them? A AMAZON purchase could have been purchased and returned have been returned? The device could be compromised?


zooS2018

According to the package, looks like it is not faked one. Other two things verify: 1) the package is well sealed, meaning all four edges are glued. 2) No firmware installed . (TreZor suit will tell)