Title: Ledger Live customisation, firmware update before Ledger Recover Post by: bestcase on February 23, 2024, 02:46:19 PM Hello!
Everyone's heard about the Ledger Recover. There are last versions of Firmware/Software BEFORE Ledger Live was implemented: Ledger Nano X OS version 2.1.0 Released 14 February 2023 Ledger Nano S Plus Firmware version 1.1.0 Released 14 February 2023 Ledger Live 2.53.1 Released on February 8th, 2023 Who has an experience of building Ledger Live from the source code. Have you tried to change update links to make an update before Ledger Live was released? For now I found in source code a request through the Websocket for the firmware update. wss://scriptrunner.api.live.ledger.com/update/install?firmware=nanos%2B%2F1.1.1%2Ffw_1.0.2%2Fupgrade_osu_1.1.1&perso=perso_11&firmwareKey=nanos%2B%2F1.1.1%2Ffw_1.0.2%2Fupgrade_osu_1.1.1_key&livecommonversion=33.5.0 Here is the path where the firmware update piece of code is located: ledger-live-develop\libs\ledger-live-common\src\deviceSDK\commands\firmwareUpdate Github page for Ledger Live to build: https://github.com/LedgerHQ/ledger-live [Piece of code] BASE_SOCKET_URL: { def: "wss://scriptrunner.api.live.ledger.com/update", parser: stringParser, desc: "Ledger script runner API", }, For Apps installation Ledger Live uses this domain: scriptrunner.api.live.aws.prd.ldg-tech.com. Are here anyone who already done the research and have successfully downgraded / made previous update of ledger firmware? I would happy to receive any tech information that you can share here. Wait for further comments. Title: Re: Ledger Live customisation, firmware update before Ledger Recover Post by: Pmalek on February 25, 2024, 08:30:23 AM It's not possible to downgrade the firmware version of a Ledger hardware wallet. There is no public information on how to do that that I am aware of.
Regarding Ledger Live, you can install older versions of the software from Ledger's signatures page: https://www.ledger.com/ledger-live/lld-signatures Despite Ledger Live being open-source, you are still dealing with a closed-source firmware. Even if you can understand and get rid of lines of code you don't like from Ledger Live, you know absolutely nothing about what the firmware does. And that's true for all of Ledger's firmware versions, not just the ones bearing the Ledger Recover code. Title: Re: Ledger Live customisation, firmware update before Ledger Recover Post by: Yamane_Keto on February 27, 2024, 02:02:50 AM Are here anyone who already done the research and have successfully downgraded / made previous update of ledger firmware? ledger firmware = old firmware + Fix for some errors + New updates.I would happy to receive any tech information that you can share here. Wait for further comments. The firmware is built to be compatible with previous versions, so downgrad will not solve any problem. If there are problems with the update, contact Ledger to release the new firmware. If you are not satisfied with the new updates, do not update the firmware, but over time you will find yourself forced, especially if the update is to fix software vulnerabilities. If you are not like the new updates, then buy a new hardware wallet. Downgrad was possible in the past however it caused battery issues, wallet keeps freezing but according to Ledger_Support the firmware can't be downgraded to an older version. Quote Hey Stan, firmware can't be downgraded to an older version. https://twitter.com/Ledger_Support/status/1663843289059950593Title: Re: Ledger Live customisation, firmware update before Ledger Recover Post by: Meuserna on February 27, 2024, 03:30:00 AM There are last versions of Firmware/Software BEFORE Ledger Live was implemented: You have no way of knowing when the code required to extract seeds was added to Ledger firmware. Assuming it didn't happen until after they announced Ledger Recover is very foolish. I wouldn't be surprised at all if parts of the code required for seed extraction have been in Ledger's firmware since as far back as 2021. Ledger is dirty. Not one single word of what they say should be trusted. |