Bitcoin Forum
May 11, 2024, 05:08:17 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Ledger Live customisation, firmware update before Ledger Recover  (Read 63 times)
bestcase (OP)
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
February 23, 2024, 02:46:19 PM
Last edit: February 23, 2024, 03:13:39 PM by bestcase
 #1

Hello!

Everyone's heard about the Ledger Recover.

There are last versions of Firmware/Software BEFORE Ledger Live was implemented:

Ledger Nano X
OS version 2.1.0
Released 14 February 2023

Ledger Nano S Plus
Firmware version 1.1.0
Released 14 February 2023

Ledger Live 2.53.1
Released on February 8th, 2023

Who has an experience of building Ledger Live from the source code. Have you tried to change update links to make an update before Ledger Live was released?

For now I found in source code a request through the Websocket for the firmware update.
wss://scriptrunner.api.live.ledger.com/update/install?firmware=nanos%2B%2F1.1.1%2Ffw_1.0.2%2Fupgrade_osu_1.1.1&perso=perso_11&firmwareKey=nanos%2B%2F1.1.1%2Ffw_1.0.2%2Fupgrade_osu_1.1.1_key&livecommonversion=33.5.0

Here is the path where the firmware update piece of code is located: ledger-live-develop\libs\ledger-live-common\src\deviceSDK\commands\firmwareUpdate
Github page for Ledger Live to build: https://github.com/LedgerHQ/ledger-live

[Piece of code]
BASE_SOCKET_URL: {
    def: "wss://scriptrunner.api.live.ledger.com/update",
    parser: stringParser,
    desc: "Ledger script runner API",
  },

For Apps installation Ledger Live uses this domain: scriptrunner.api.live.aws.prd.ldg-tech.com.

Are here anyone who already done the research and have successfully downgraded / made previous update of ledger firmware?
I would happy to receive any tech information that you can share here. Wait for further comments.

1715447297
Hero Member
*
Offline Offline

Posts: 1715447297

View Profile Personal Message (Offline)

Ignore
1715447297
Reply with quote  #2

1715447297
Report to moderator
1715447297
Hero Member
*
Offline Offline

Posts: 1715447297

View Profile Personal Message (Offline)

Ignore
1715447297
Reply with quote  #2

1715447297
Report to moderator
Even in the event that an attacker gains more than 50% of the network's computational power, only transactions sent by the attacker could be reversed or double-spent. The network would not be destroyed.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715447297
Hero Member
*
Offline Offline

Posts: 1715447297

View Profile Personal Message (Offline)

Ignore
1715447297
Reply with quote  #2

1715447297
Report to moderator
1715447297
Hero Member
*
Offline Offline

Posts: 1715447297

View Profile Personal Message (Offline)

Ignore
1715447297
Reply with quote  #2

1715447297
Report to moderator
Pmalek
Legendary
*
Offline Offline

Activity: 2758
Merit: 7137



View Profile
February 25, 2024, 08:30:23 AM
 #2

It's not possible to downgrade the firmware version of a Ledger hardware wallet. There is no public information on how to do that that I am aware of.
Regarding Ledger Live, you can install older versions of the software from Ledger's signatures page: https://www.ledger.com/ledger-live/lld-signatures

Despite Ledger Live being open-source, you are still dealing with a closed-source firmware. Even if you can understand and get rid of lines of code you don't like from Ledger Live, you know absolutely nothing about what the firmware does. And that's true for all of Ledger's firmware versions, not just the ones bearing the Ledger Recover code.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
Yamane_Keto
Sr. Member
****
Offline Offline

Activity: 476
Merit: 486



View Profile WWW
February 27, 2024, 02:02:50 AM
 #3

Are here anyone who already done the research and have successfully downgraded / made previous update of ledger firmware?
I would happy to receive any tech information that you can share here. Wait for further comments.


ledger firmware = old firmware + Fix for some errors + New updates.
The firmware is built to be compatible with previous versions, so downgrad will not solve any problem. If there are problems with the update, contact Ledger to release the new firmware.

If you are not satisfied with the new updates, do not update the firmware, but over time you will find yourself forced, especially if the update is to fix software vulnerabilities. If you are not like the new updates, then buy a new hardware wallet.

Downgrad was possible in the past however it caused battery issues, wallet keeps freezing but according to Ledger_Support the firmware can't be downgraded to an older version.

Quote
Hey Stan, firmware can't be downgraded to an older version.
https://twitter.com/Ledger_Support/status/1663843289059950593

.BEST.CHANGE..███████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
███████████████
..BUY/ SELL CRYPTO..
Meuserna
Full Member
***
Offline Offline

Activity: 128
Merit: 190


View Profile
February 27, 2024, 03:30:00 AM
 #4

There are last versions of Firmware/Software BEFORE Ledger Live was implemented:

You have no way of knowing when the code required to extract seeds was added to Ledger firmware.  Assuming it didn't happen until after they announced Ledger Recover is very foolish.

I wouldn't be surprised at all if parts of the code required for seed extraction have been in Ledger's firmware since as far back as 2021.

Ledger is dirty.  Not one single word of what they say should be trusted.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!