Trezor Private Key extraction via power analysis

Check this out.

http://johoe.mooo.com/trezor-power-analysis/

johoe's work here is excellent, but also something a moderately determined mere mortal could duplicate.