Comment by jasonisalive

FYI that vulnerability was fixed already by the time he wrote that post. He brought it to Trezor's attention, helped update the firmware, and published the article after the update was pushed.