Thanks for nostr:npub10pensatlcfwktnvjjw2dtem38n6rvw8g6fv73h84cuacxn4c28eqyfn34f #krux team and all users that that somehow contributed and/or motivated me.
You were the reason why this exists
(actually the first version I made for my wife, but she never, fortunately, needed to use it lol).
https://github.com/selfcustody/krux-installer/releases/tag/v0.0.20
#krux v24.11.1
https://github.com/selfcustody/krux/releases/tag/v24.11.1
This release includes a fix for a recently discovered issue #477 in our encryption system. Due to an implementation error, the camera-captured entropy was not being used as intended in our AES-CBC encryption mode. This means that the additional layer of security provided by the camera's randomness was not effectively applied.
## What Does This Mean for You?
*Who is Affected*: Users who have changed their settings to use AES-CBC encryption instead of the default AES-ECB for encrypted backups on flash storage, SD cards, or encrypted QR codes.
*Impact*: The encryption strength for these backups may not be as robust as intended.
## Recommended Action:
If you have used AES-CBC encryption for your backups, we recommend the following steps:
Update Your Device: Please install the latest software update where this issue has been resolved.
Replace Your Backups: After updating, recreate your encrypted backups on flash storage, SD cards, or QR codes to ensure they are secured with the corrected encryption implementation.
Thanks @earthdiver for the finding!
Always test your encrypted backups and keys after creation and have a redundant physical backup of your keys.
Tiny Seed + tiny #krux (M5StickV) rocks (@odudex)
https://video.nostr.build/1cb26310a5a044b22ae1cc6b64ea0747cb607e974a4909af4e905f251829d5d7.mp4
It would be a pleasure to eat mocotó or buchada paying in bitcoin
#krux v24.11.0 released!
- Tamper Check Flash Hash and Tamper Check Code (Experimental)
- Flash Map
- Japanese Translation
- BIP85: Allow Export Base64 Passwords
- Vulnerability Fix: Block Import of Python Modules from SD Card
- Add Compatibility to Partial Text Mnemonic QR Codes
- Multi-keypad Position Indicator
- WonderMV Simulator
- Krux Ethos
- Minor Bugfixes and Refactor
Special thanks to:
@jdlcdl for consistent contributions as code, insights and reviews of all new features and improvements.
@tadeubas for the contributions, insights, reviews, and the discovery on frozen modules import from SD cards behavior, crucial TC Flash Hash solution to work.
@qlrd for constant improvements on Krux-Installer, which can now aid on air-gapped firmware updates.
@3rdIteration for the precious insights on TC Flash Hash possible vulnerabilities.
@BitCoisas for the Japanese translation.
@kkdao for spreading the word about Krux around the world.
Krux community for the great ideas, tests and feedback.
Beta testers, please try and help test tamper detection and related features ( #krux 24.10.beta9 )
nostr:npub1q6pnfvhee40rpdpcvmztvz7nzg6w9xlfhsgmq6hsxlkzfr0577hq47vdy9 , if you want to know the #krux, for historical purposes, and to keep the list of developers and contributors, the best place are (i believe)
* https://github.com/selfcustody/krux/releases
* https://github.com/selfcustody/krux/discussions
(Installer itself started on discussions)
#krux installer v0.0.20 released. Many thanks to nostr:npub177zfcmyscnl7805qtx7cn8v9607n3s9m096fl8nev5uzqdg6mruqshdp8e and nostr:npub1mx3sgxc250xl8d6tkwksg0dg5sx2zjwgjxeqfxef7drt0y39yxxqe2raya for allow its japanese translation.
**Major update**
Now user can, after download and verify an official firmware, select between:
* to flash;
* or make an airgapped update:
* user will be requested to insert a SDCard on computer;
* user can select among recognized removable drives;
* both firmware.bin and firmware.bin.sig will be copied to sdcard;
* after the copy, user will be requested to eject sdcard and insert it on device;
* at same time, the firmware.bin's computed hash will appear to compare with the computed hash on device;
**Minor updates**
* added support to de_DE locale;
* added support to ja_JP locale;
* fixes on Windows bug that didn't allow users to select a custom asset folder;
Many thanks to:
* All selfcustody team
* nostr:npub10pensatlcfwktnvjjw2dtem38n6rvw8g6fv73h84cuacxn4c28eqyfn34f for the support
* nostr:npub13s0kzccx2g7pnwwt5mjuwttl3m74t9qxyr6q7f9978e98tyjrw3qvx5g70 for for all incredible people.
kudos to nostr:npub1mx3sgxc250xl8d6tkwksg0dg5sx2zjwgjxeqfxef7drt0y39yxxqe2raya for helping to translate our installer to!
Japanese is being brought to Krux by nostr:npub177zfcmyscnl7805qtx7cn8v9607n3s9m096fl8nev5uzqdg6mruqshdp8e and nostr:npub1mx3sgxc250xl8d6tkwksg0dg5sx2zjwgjxeqfxef7drt0y39yxxqe2raya
nostr:npub1q6pnfvhee40rpdpcvmztvz7nzg6w9xlfhsgmq6hsxlkzfr0577hq47vdy9, there were a old thread about this (the "ghost" guy was Jeff, the Krux creator)
https://github.com/selfcustody/krux/discussions/189
It were implemented once as experiment, but now Krux is a Bitcoin's signer only
(but we talk sometimes to follow the 1 or 2 item described in the link above).
Theory of PIN and Anti-tamper functionalities under development in the #krux project!
New selfcustody releases!
- #krux v24.09.1: https://github.com/selfcustody/krux/releases/tag/v24.09.1
- #krux-installer v0.0.20-alpha-3: https://github.com/selfcustody/krux-installer/releases/tag/v0.0.20-alpha-3
This release introduces support for the WonderMV device, expands language options with Korean and Simplified Chinese translations, enhances performance across several key features, and addresses minor bugs for a smoother user experience. And more!
It was healthy to no longer feel that addictive feeling of opening X
New installer release.
There is still a lot to improve and this step will only be possible with the feedback of the community.
https://github.com/selfcustody/krux-installer/releases/tag/v0.0.2-alpha
I should start to use more the amethyst to see "read only" feeds.
(im a paranoic one to put my unencrypted private key on phone)
i'm only using Gossip client
Thanks BTW.
But I am only the person who receives the people who have heard the good news.
The work on the firmware is thanks to the creator of the project, Jeff (who is no longer present), @oduedex, tadeubas and @jdcdl.
I didnt understood,you used an xpub to export your wallet?
Sorry for late response nostr:npub1ps5mp2hrs4w8973cxkn8nfvxquqrn6ems4ntkgtwthwmzefezapqkuylka, i just saw your message.
I'm still getting used to using nostr and sometimes because of my fiat work I don't have much time (although I program, I still feel like an "uncle joe" with social networks).
I hope that one day I can have a job bitcoin lony to dedicate myself to the system in a full-time way
installer will support wonder_mv in its next release.
BTW, impressed with its IO. It latest around 14 seconds to wipe the device and the "flashing rate" was bigger than Amigo. Wonder reached 83 kiB/s against ~70kiB/s from Amigo and ~53 kiB/s from dock/yahboom
https://video.nostr.build/c92d476bd310f335259a46298e7fb9b0d59ffebf6e94bb94bfb4c94654631573.mp4