We discussed exactly this over three years ago when this vulnerability was first demonstrated: https://bt.irlbtc.com/view/5222188.msg53803392#msg53803392

Three years on, and nothing has changed. Their website still makes no mention of the vulnerability. Their new documentation and set up guides are still lacking in any and all information. Nowhere in their "First Steps" or "Trezor 101" are passphrases mentioned at all. If you head in the "Security" section to find a page on passphrases, you'll find it still makes no mention whatsoever of the vulnerability and makes frankly dangerous statements such as calling a passphrase "an extra word" and a graphic showing the passphrase "Martha". If your seed phrase is compromised by this attack, a passphrase of a single word will provide no protection whatsoever and will be bruteforced in a matter of minutes.

They've got their priorities straight though - long before you reach that (completely inadequate) page on passphrases, in the "Trezor Basics" section you get a nice page on how to dox yourself via their built-in KYC trading platform Invity, and a nice page on how to invite blockchain analysis companies to spy on you via their partnership with Wasabi.

In addition, in the Trezor suite, when entering a passphrase, a clearly visible window pops up for entering it through a computer, and a link for entering a passphrase through the wallet itself is displayed below in barely noticeable text. From which we can conclude that their priority is not a secure way to enter a passphrase through the wallet itself, but through the application.
Naturally, they have access to passphrases entered through the application, while intercepting passphrases through the open source wallet itself would be problematic for them.
Why they do all this can only be guessed, but the conclusions are drawn not in their favor.

Trezor sales soar 900% amid Ledger’s seed recovery controversy
Trezor said a remote seed phrase extraction is impossible on its hardware wallets, adding that it would never implemented.
https://cryptoslate.com/trezor-sales-soar-900-amid-ledgers-seed-recovery-controversy/

The Trezor T has already become a scarce commodity.
Tell me, does the ledger own all the recovery phrases for the wallet of its clients for a long time, or can it do this after the last firmware of the wallet?
Can the ledger software send company recovery phrases now?

You can always open an account with another bank which has a less draconian view of crypto, or trade with cash. Although as Pmalek rightly points out, any transfers to your bank account come from other individuals, not from Bisq.

That's because almost all other cryptocurrencies are trash. I use Bisq mainly for fiat pairs.

Imagine getting rid of your Ledger because you are worried about a seed extraction vulnerability, and buying another hardware wallet with a proven seed extraction vulnerability which is also happily cooperating with government sponsored blockchain analysis.

A lot of your questions and concerns regarding various ways to trade (or transact) with others and not to be interrogated or traced in respect to your interactions seem to be legitimate, and surely not Trezor specific kinds of questions - and for sure, I would be interested in following/participating in forum threads related to such topics... even though even on the forum, sometimes we might not even want to be describing too many specifics regarding exactly what we are doing... and for sure, we live in a world that is complicated in terms of trying to attempt to preserve some of the privacies that we might have had in regards to face to face cash transactions in the past and in some ways, some of us may well be trying to apply those kinds of privacies in the digital space

---- and for sure a kind of dynamic that may well always be changing in terms of services that are available, government (and even financial institutional) encroachments and normies trying to exercise certain rights to privacy, autonomy, security and self-sovereignty - and not always knowing the extent to which they might be unwittingly giving up some of their rights, and I am surely not going to claim to know how to employ various technologies without getting trapped at various points.,. who wants to have their funds seized, locked up, frozen, hacked, rug pulled or otherwise removed from their abilities to be able to use them.. or even depleted for penalties, taxes or some other kinds of disputes regarding whether some middle man might say that they have claims against our funds (that we may well dispute).

For sure, not Trezor specific questions.. even though there is some overlap in ways that these kinds of topics can be discussed.

In Russia, I can buy Trezor T for 80-100 dollars.
The wallet will be in its original packaging, but I can refuse the goods if I suspect fraud.
https://www.ozon.ru/product/apparatnyy-kriptokoshelek-trezor-model-t-holodnyy-koshelek-dlya-kriptovalyuty-913105391/
How can I check that this wallet has not been modified before selling? It's impossible to tell from the packaging and holograms.
What Trezor utilities can help me with this, so that I can be sure that this is an original wallet from Satoshi Labs?

I don't want to digress, but P2P trading in my country will quickly result in a blocked bank account. Therefore, the crypto community needs a decentralized stablecoin.

___

If you look at the trading volumes of Bisq and Uniswap, you will understand what I am talking about. P2P should be avoided for large sums.

this service helps me to trade without registrations and restrictions
https://rango.exchange/

And my topic is about such services
https://bt.irlbtc.com/view/5389259

Trezor and ledger are perfectly compatible with these services.

I was looking for a more serious guide not to buy a modified wallet
Standard recommendations do not save you from a fake wallet
https://forum.trezor.io/t/how-to-verify-the-authenticity-of-trezor-model-t-hardware/4195/2

I was looking for something like this, but it is in Russian
https://slabber.io/posts/2538

We already have a business idea, buy 5 processors for Trezor for $ 115 and solder this cpu


There are no official sellers in Russia. Intermediary only, and buying for $220 will not guarantee buying an official wallet.

This device is unavailable at the moment on website you posted, but I wouldn't risk buying it because I am sure this is not original Trezor.
Form last reports of hacked modified Trezor T they said that it was packed and it looked exactly identical as original device, and only difference could be noticed when looking inside on the board.
One more difference was skipping the online check to confirm device is authentic.

Do you know any newly released thing will be good?
With that kind of thinking you shouldn't use or trust anything, but this should be open source and that means everyone will be able to contribute and improve it.
It's silly to compare this with any other closed source chips that exists much longer, and Trezor didn't fall from sky yesterday, they are the first even hardware wallet, so they have some experience.

Nice!
I am sure sales jumped a lot for all other hardware wallets like Passport, Keystone, etc, they posted something about all items sold.
They should all thank ledger marketing team for free promotion  

I can use my DIY PiTrezor without problems with official Trezor Suite. Yes, Trezor Suite detects that the PiTrezor isn't genuine and shows a warning banner, but otherwise works perfectly fine with it.