/trezorlib/qt/pinmatrix.py#L20 broken on OSX about python-trezor

[aussiehash]

Entering the correct PIN at the command line gives the following error

Traceback (most recent call last):
  File "./cmdtr.py", line 400, in <module>
    main()
  File "./cmdtr.py", line 392, in main
    res = args.func(cmds, args)
  File "./cmdtr.py", line 147, in sign_message
    ret = self.client.sign_message(args.coin, address_n, args.message)
  File "/Users/redacted/Downloads/trezor/python-trezor/trezorlib/client.py", line 72, in wrapped_f
    ret = f(*args, **kwargs)
  File "/Users/redacted/Downloads/trezor/python-trezor/trezorlib/client.py", line 414, in sign_message
    return self.call(proto.SignMessage(coin_name=coin_name, address_n=n, message=message))
  File "/Users/redacted/Downloads/trezor/python-trezor/trezorlib/client.py", line 119, in call
    resp = self.call(msg)
  File "/Users/redacted/Downloads/trezor/python-trezor/trezorlib/client.py", line 119, in call
    resp = self.call(msg)
  File "/Users/redacted/Downloads/trezor/python-trezor/trezorlib/client.py", line 115, in call
    msg = handler(resp)
  File "/Users/redacted/Downloads/trezor/python-trezor/trezorlib/client.py", line 129, in callback_Failure
    raise PinException(msg.code, msg.message)
trezorlib.client.PinException: (7, u'Invalid PIN')

[aussiehash]

A PinExeception error also occurs with

./cmdtr.py sign_message -n "44'/0'/0'/0/0" "testing 123"

If the session has been cleared.
However if I enter my PIN via mytrezor.com, then close that browser window,

./cmdtr.py sign_message -n "44'/0'/0'/0/0" "testing 123"

Is successful, skipping the PIN entry step

[prusnak]

You have to enter "scrambled PIN". That means you are not entering the PIN itself but its positions in the pinmatrix. 7 is top-left, 3 is bottom right (like on numeric keypad).

[aussiehash]

Thank you, I'll try it out. Works perfectly.
Is there supposed/planned to be a pin matrix GUI window ?
https://github.com/trezor/python-trezor/blob/master/cmdtr.py#L314

[prusnak]

cmdtr.py does not use GUI elements (for now). it's a commandline app only

[aussiehash]

Using 1password to intercept passwords, I can see the mytrezor.com pinmatrix has the ? mapped to a numeric keypad layout also.