Jade DIY hardware wallet

[dkbit98]

I think this TTGO has wifi connection embedded? How can anybody use this to store your private keys?

Wi-fi is disabled in settings and I know people who are removing wifi chips from this device, they also did the same with RaspberyPi zero.
Than again, nobody is really going to use cheap TTGO device to store keys there, it's just a proof of concept, and it's not very usable without camera anyway.

I wish there was a DIY device that by default has no wifi at all...

Sure there are, Seedsigner aka Raspberry Pi zero v1.3, Krux aka M5StickV K210 or Maix Amigo, they are all airgapped devices without wifi.

https://seedsigner.com/
https://selfcustody.github.io/krux/

[Jason Brendon]

Wi-fi is disabled in settings and I know people who are removing wifi chips from this device, they also did the same with RaspberyPi zero.

How did they remove the wifi chip? by the way, pi zero has no wifi at all.

[dkbit98]

How did they remove the wifi chip? by the way, pi zero has no wifi at all.

What do you mean how? They simply desoldered the wifi chip from the board, and by the way newer version of Rpi zero devices does have wifi (only older version 1.3 doesn't have wifi), so better do your own research:
https://www.raspberrypi.com/products/raspberry-pi-zero-w/

[Jason Brendon]

How did they remove the wifi chip? by the way, pi zero has no wifi at all.

What do you mean how? They simply desoldered the wifi chip from the board, and by the way newer version of Rpi zero devices does have wifi (only older version 1.3 doesn't have wifi), so better do your own research:
https://www.raspberrypi.com/products/raspberry-pi-zero-w/

It's not a fucking pack of peanuts and you could just remove the bad ones. WIFI chip can be removed from an ESP 32 is the first time I have ever heard. It's probably not the easiest thing to do.

[dkbit98]

It's not a fucking pack of peanuts and you could just remove the bad ones. WIFI chip can be removed from an ESP 32 is the first time I have ever heard. It's probably not the easiest thing to do.

Yeah, it was also the first time in your life you ever heard about existence of Raspberry Pi Zero with wifi chip (that can also be removed manually)... I guess you must be smarter than me in this field  
Now let's get back on topic of Jade DIY.

[cygan]

new firmware 1.0.30 is now available for Jade!
the new version released today has the following new features:

• added new api calls 'get_registered_descriptors' and 'get_registered_descriptor' to enhance miniscript support
• menu option for network selection (mainnet/testnet) for stateless qr code users
• updated esp-idf base firmware to v5.1.3 (note: saved bluetooth bonds will need to be re-paired)

this miniscript-capable version can be flashed under the following link: https://jadefw.blockstream.com/upgrade/fwupgrade.html

[Pmalek]

Yep, it feels exactly like a seedsigner, how can I change that??

I guess you set it up using the Advanced Setup mode. The standard and assembled (non DIY) Jade has a beginner setup and advanced setup. The latter one creates a stateless signing device that you can use with SeedQRs. The beginner setup feature creates a standard wallet with the information stored on the device like with any other hardware wallet. You also need to set up a PIN. Like I said, this is for the normal Jade. I can only assume it's the same thing for the DIY variant. So, go through the beginner setup, not the advanced one.

[wavessurfing]

Yep, it feels exactly like a seedsigner, how can I change that??

I guess you set it up using the Advanced Setup mode. The standard and assembled (non DIY) Jade has a beginner setup and advanced setup. The latter one creates a stateless signing device that you can use with SeedQRs. The beginner setup feature creates a standard wallet with the information stored on the device like with any other hardware wallet. You also need to set up a PIN. Like I said, this is for the normal Jade. I can only assume it's the same thing for the DIY variant. So, go through the beginner setup, not the advanced one.

is the DIY variant secure, who has the experience ?

https://www.reddit.com/r/Bitcoin/comments/13wyck9/diy_blockstream_jade_create_your_own_bitcoinonly/

[Pmalek]

is the DIY variant secure, who has the experience ?

I can't comment on that particular video or the software he uses, but the Blockstream Jade is safe to use. It's an open-source and airgapped bitcoin-only hardware wallet. You can use it as a stateless signer via QR codes if you want. You have the choice to purchase the assembled device, which is very affordable and should cost you around $65, or you can purchase the individual components yourself and assemble everything on your own and build it from source.

[Hispo]

I have been keeping an eye on the hardware wallet by Block stream, Jade, though in my opinion the price for the original product in their store sounds rather high compared to the hardware one is receiving and the possible quality of the case and board, so I love these kinds of tutorials which allows anyone to go into cold storage of crypto assets with a minimum budget. 
Last time I saw something similar to this tutorial was a tutorial to build our own Trezor mode Model from the scratch.

Also, one of the biggest advantages of these kinds of wallets which are open software and open hardware is the fact we can try to replace the case with other with better materials, ones of the projects I want to get into is making a highly resistant metallic case of both Jade and Trezor model One. 

[fillippone]

is the DIY variant secure, who has the experience ?

I can't comment on that particular video or the software he uses, but the Blockstream Jade is safe to use. It's an open-source and airgapped bitcoin-only hardware wallet. You can use it as a stateless signer via QR codes if you want. You have the choice to purchase the assembled device, which is very affordable and should cost you around $65, or you can purchase the individual components yourself and assemble everything on your own and build it from source.

The possibility to assemble your own hardware is a guarantee of the solidity of the project.
My own self compiled Jade works smoothly.
The main difference with the commercial solutions is the lack of a photocam, that downs allow to read QR.
Apart from that, I have no reason (to the best of my knowledge) to use a DYO variant using reliable sources.

[Pmalek]

The main difference with the commercial solutions is the lack of a photocam, that downs allow to read QR.

Sorry, this part of your post confused me a bit. Are you saying that the DIY Jade when purchased disassembled doesn't come with a camera or that it does but the camera is of bad quality? If it's the latter, then I can confirm that. More precisely, it's not that the camera sucks to a degree of being useless, it's the software companion apps like Sparrow Wallet that can't scan the QR codes as well as they should. Another user also said that they were struggling with their Sparrow-Jade combo.

Are you using the Jade as a stateless signer and with what companion app?

[fillippone]

The main difference with the commercial solutions is the lack of a photocam, that downs allow to read QR.

Sorry, this part of your post confused me a bit. Are you saying that the DIY Jade when purchased disassembled doesn't come with a camera or that it does but the camera is of bad quality? If it's the latter, then I can confirm that. More precisely, it's not that the camera sucks to a degree of being useless, it's the software companion apps like Sparrow Wallet that can't scan the QR codes as well as they should. Another user also said that they were struggling with their Sparrow-Jade combo.

Are you using the Jade as a stateless signer and with what companion app?

The  platform I used to install the Jade software is the M5Stack module, lacks a photo camera.
Other solutions might include it.
So, my DIY Jade has a limitation regarding the airgapped usage, due to the inability to read QR codes.

[Pmalek]

The  platform I used to install the Jade software is the M5Stack module, lacks a photo camera.
Other solutions might include it.
So, my DIY Jade has a limitation regarding the airgapped usage, due to the inability to read QR codes.

That's too bad. I think Jade's airgapped functionality is the biggest strength of this device. Without it, it's a very limited hardware wallet without a secure element that has to rely on Blockstream's blind oracle and virtual secure element. It was recently discovered that this third-party server was breeched.

[fillippone]

The  platform I used to install the Jade software is the M5Stack module, lacks a photo camera.
Other solutions might include it.
So, my DIY Jade has a limitation regarding the airgapped usage, due to the inability to read QR codes.

That's too bad. I think Jade's airgapped functionality is the biggest strength of this device. Without it, it's a very limited hardware wallet without a secure element that has to rely on Blockstream's blind oracle and virtual secure element. It was recently discovered that this third-party server was breeched.

Indeed the airgapped operation is one of the  main reason why this device is unique.
I saw a Twitter thread where they explain another reason why you should never connect the device to a PC:



As long as I know Jade is the only one able to do this.

[Pmalek]

I saw a Twitter thread where they explain another reason why you should never connect the device to a PC:
As long as I know Jade is the only one able to do this.

The Blockstream Jade requires some type of connection to a PC when you first set it up to install its firmware. You can install the firmware either via the Blockstream Green software wallet or from Blockstream's download portal. There is a third (advanced) option that I have forgotten about. You can connect the device either via USB cable or Bluetooth to install the firmware. The same is true for firmware updates, with one difference being that you can install a firmware with disabled Bluetooth. If you do that, then you can only install new firmware updates by connecting the device via a cable.

[fillippone]

I saw a Twitter thread where they explain another reason why you should never connect the device to a PC:
As long as I know Jade is the only one able to do this.

The Blockstream Jade requires some type of connection to a PC when you first set it up to install its firmware. You can install the firmware either via the Blockstream Green software wallet or from Blockstream's download portal. There is a third (advanced) option that I have forgotten about. You can connect the device either via USB cable or Bluetooth to install the firmware. The same is true for firmware updates, with one difference being that you can install a firmware with disabled Bluetooth. If you do that, then you can only install new firmware updates by connecting the device via a cable.

You are right on one point here: having a signing device (a hardware wallet) and using it via Bluetooth is nonsense, given the amount of bad code an attacker can infect the Bluetooth stack with.
Also the attacker.