firmware VS trezor-firmware

TIP: Use the BoM as well as the schematic.

As you can see, the default firmware of Coldcard is hardcoded with values d13e and cc10. We are going to change it to make it look like a benign USB device, more on it later. First, clone the original firmware from Github: https://github.com/Coldcard/firmware We now need to edit the file called ./stm32/COLDCARD/shared/usb.py: COINKITE_VID = 0xd13e CKCC_PID = 0xcc10

Software altered? You were supposed to download from source and flash it yourself. So why did you alter it? No one other than you could have altered it! https://github.com/Coldcard/firmware

Coldcard

Consider holding long term with a solution like this. Have you ever use a hardware wallet like a coldcard

Coldcard has many other security features as well. You can find more about them online. Probably the safest hard & cold wallet on the market right now. But most people don't buy it because of their $400 price tag. But definitely worth it for anyone holding more than a pretty penny.

You can check it

it’s a cold wallet that only holds BTC

https://trezor.io/ - Easy to use, no matter how new in Bitcoin you're.

Added (November 2021): https://github.com/trezor/trezor-firmware/pull/1903

Next thing to have is a hard wallet if you haven’t already like a Ledger or a Trezor and let it sit there. That’s the safest thing to do! Also, there’s always been a risk of KYC (Know Your Customer) on CEXes as mentioned several times. This was all meant to be decentralized and keep our identity under wraps and retain that anonymity that crypto was originally designed for… and you get a hold of your keys.

https://trezor.io/ - Easy to use, no matter how new in Bitcoin you're.

where "x.y.z" is the VERSION of trezor (aka TrezorCTL) you are trying to install. See the version history when picking a version. "Oldest" is not necessarily "best". You'll want to pick a version that was released around the same time your Trezor-1 was last updated.

I've purchased a Trezor model T from what I believe is the official Trezor website (https://trezor.io/). Is it rational for me to have a slight fear that it isn't a legit trezor and maybe the chip is compromised, possibly being able to send off my seed to an unknown party?