Pages:
Author

Topic: Blockstream Jade Plus (Read 340 times)

legendary
Activity: 2730
Merit: 7065
January 29, 2025, 04:03:38 AM
#26
@Pmalek, when we consider some other airgapped devices, their firmware is upgraded through memory cards, which means that you copy the firmware to the memory card, and then you insert it into the hardware wallet and that way you upgrade the firmware.
I know what you mean and I understand the workings of most other airgapped hardware wallets. The difference between them and the first version of the Blockstream Jade is that the Jade doesn't come with a memory card slot. Thus, your only upgrade options are via a USB cable or Bluetooth. The new Jade Plus has added a memory card slot making it slightly safer to perform firmware installations.

Given the price of BTC today and in the future, it somehow doesn't seem safe to store everything with one hardware wallet, but rather to have several of them and thus reduce the risk even more.
That's one way of doing it. You will need better planning and more areas to hide all the copies of your seeds and optional passphrases, but it can be done.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
January 28, 2025, 06:37:34 AM
#25
@Pmalek, when we consider some other airgapped devices, their firmware is upgraded through memory cards, which means that you copy the firmware to the memory card, and then you insert it into the hardware wallet and that way you upgrade the firmware. What you wrote makes sense, because until recently I wasn't seriously interested in this device, but it seems like a neat little device that I could perhaps add to my collection.

Given the price of BTC today and in the future, it somehow doesn't seem safe to store everything with one hardware wallet, but rather to have several of them and thus reduce the risk even more. Some will say that it is expensive, but for the price of a solid smartphone you can buy top three hardware wallets.
legendary
Activity: 2730
Merit: 7065
January 27, 2025, 11:18:05 AM
#24
I was looking at some reviews of this device and what caught my eye was the ability to choose between three different ways to use the device. If I'm not mistaken, the first one is via USB, and the other two are QR codes or SD card. What I'm wondering is does anyone see an advantage or disadvantage in this, considering that if someone were to use a USB connection, could this device then be considered airgapped even if wallets are created through other options?
The older Blockstream Jade also allows connections via Bluetooth if users installed the Bluetooth-supporting firmware. I guess it's the same with the Jade Plus. The hardware wallet needs to be connected to the computer somehow to transfer the firmware to it. The firmware installation in my case was done via USB. I use my device as stateless signer, so after I turn it off, the Jade's memory gets wiped. The next time I turn it on, I need to scan my seedQR and enter a passphrase before I can work with my wallet. Bluetooth is disabled and can't be turned on. Since it's stateless, there is nothing to leak from it even if the device can leak something if I connected it to a computer.   
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
January 27, 2025, 07:51:54 AM
#23
I was looking at some reviews of this device and what caught my eye was the ability to choose between three different ways to use the device. If I'm not mistaken, the first one is via USB, and the other two are QR codes or SD card. What I'm wondering is does anyone see an advantage or disadvantage in this, considering that if someone were to use a USB connection, could this device then be considered airgapped even if wallets are created through other options?

I prefer the approach taken by other similar devices, which are essentially fully airgapped, which is the best option for those who want maximum security.
?
Activity: -
Merit: -
January 27, 2025, 06:49:01 AM
#22
Hello

I purchased jade plus device and tried to test it. I am not really sure about that device
I installed my local blind oracle  on umbrel. The idea of ​​blind oracle is cool, you can't access wallet if you don't have access to phrase held on the blind oracle. Loosing device itself would be not a problem because noone would decode it. But to use that blind oracle you have to use their app Jade green. You have to use 3rd party software to access the wallet (first alarm). Device also has to be connected all the time(!) via USB to keep device unlocked (second alarm).
If  you enter the pin on device,it connects using jade green app to your local blind oracle to get the rest of the key. If i close my laptop , put into sleep mode and open it again i can still access that wallet because that part of key is still kept in memory. I changed network to be sure i will not have access to blind oracle and i was still able to enter the wallet. Only reboot would remove it from memory  (not good).

Of course we can use remote blind oracle , but what if some day that blind oracle server will failure( 3rd party).
Other option to use seedQR on a piece of paper, so you dont have to trust anyone
I don't know , i think i will put this device to the drawer for now?.  


regards
greg
legendary
Activity: 2730
Merit: 7065
January 27, 2025, 04:09:02 AM
#21
a very important new feature in my opinion is the genuine check feature that comes with the new hw-wallet.
this uses secure device identity to ensure that the Jade Plus purchased was manufactured by Blockstream and not from a malicious third party.
this can be done both in Blockstream Green and via the web app
Are you sure that the genuine check is exclusive for the Jade Plus? I think a genuine check using Secure Boot v2 also exists for the older Jade airgapped HW. I think I read that the firmware is checked every time you boot the device. Secure Boot v2 verifies if the firmware was signed by the Blockstream team. An exception to this is if you are using a DIY Jade. The secure boot feature won't be on by default then. But you can turn it on and configure it to check if the firmware on the device is the one you signed and installed or if it's something else.
legendary
Activity: 2212
Merit: 7064
January 24, 2025, 03:28:57 PM
#20
A option to pick our own blind oracle would be nice
I don't own Jade devices but I think they are already offering alternative for using their server.
This is alternative for secure element, because you need to trust microchips in other manufacturers.
I found this guide on their website, how to set up a personal blind oracle:
https://help.blockstream.com/hc/en-us/articles/12800132096793-Set-up-a-personal-blind-oracle

Overall coldcard Q seems more airgapped
That is huge crap and it's not open source.
There are other good airgapped wallet like Passport, Keystone, DIY Seesigner and Krux, etc.
hero member
Activity: 714
Merit: 1298
January 23, 2025, 12:04:00 AM
#19
[
Crypto Guide is probably going to review Jade Plus soon and post video on youtube.


Here one can find  the nice quality review and at the same time video tutorial released yesterday on  youtube by BTC Sessions.

It guides step-by-step the setting Jade Plus on both mobile and desktop, delves dip into its advanced features, the aim being to enhance the security of your stash, shows how to recover devise should it be damage.  

hero member
Activity: 714
Merit: 1010
Crypto Swap Exchange
January 19, 2025, 05:20:23 PM
#18
A option to pick our own blind oracle would be nice

E.g. Umbrel node offers the following installable app:


Quote from: About this app
Run a personal blind oracle to encrypt the wallet material on your  Blockstream Jade.

Your blind oracle holds the decryption key to your Jade that is needed  to unlock your device. This allows your Jade to remain protected from  physical key extraction while also enforcing a maximum of 3 PIN attempts.  Your blind oracle does not learn any sensitive information and does not  know anything about the wallet on Jade.

Blind oracle needs a Tor or a Tailscale connection, if you decide to use  Tailscale please enable Tailscale's MagicDNS.

Source code: https://github.com/Blockstream/blind_pin_server
Umbrel app: https://github.com/getumbrel/umbrel-apps/pull/950
jr. member
Activity: 208
Merit: 2
January 18, 2025, 04:16:58 AM
#17
Problem with jade is it connects to blockstream servers and claims to be airgapped.


A option to pick our own blind oracle would be nice


Overall coldcard Q seems more airgapped
legendary
Activity: 2212
Merit: 7064
January 14, 2025, 06:26:50 PM
#16
Does anybody know if there's any difference between "JadeLink" and a normal USB-C storage drive?
There is no way to know this until I try it myself or until we see someone doing a review.
Crypto Guide is probably going to review Jade Plus soon and post video on youtube.
Hardware is probably the same as regular USB flash drives, but maybe they have different firmware and software installed on it.


The following "discount codes" will also come in handy Smiley
I also found out that you can find 10% discount code on thebitcoinhole.com website, and code is:
Code:
thebitcoinhole
legendary
Activity: 2898
Merit: 1823
January 13, 2025, 08:51:41 AM
#15
a very important new feature in my opinion is the genuine check feature that comes with the new hw-wallet.
this uses secure device identity to ensure that the Jade Plus purchased was manufactured by Blockstream and not from a malicious third party.

this can be done both in Blockstream Green and via the web app


That's actually a very good safety/security feature. Cool
 
I bought a Trezor and a Ledger. The Trezor I bought directly from the official website and the Ledger through a reseller. Buying it from a reseller definitely doesn't make it feel safe to store larger amounts of cryptocurrencies in them. Plus I was warned that it's a Ledger. Haha.

I believe ALL hardware-wallet manufacturers should start building that feature into their hardware-wallets, and ACTUALLY open source everything.
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
January 09, 2025, 12:51:30 PM
#14
but the price of this device is in the price range of the Trezor Safe 5.
You have a point, but when I look at the differences between Safe 5 & Safe 3, the price difference isn't justified so IMO, Safe 5 is also overpriced.

For someone who has several thousand/tens of thousands of $ worth of BTC, the price for such a device should be quite acceptable.
I agree and the same thing can also be said if the prices of these devices were x2 or x3, but the main issue is for less fortunate people who are starting their journey with limited knowledge of the alternative secure routes [percentage of these people are way higher than those you described (unfortunately)].

In addition, if we look at the prices of some slightly better smartphones or computers, then the prices of hardware wallets do not seem too excessive.
I don't use smartphones that much, but concerning the price hikes of different computer components, I blame scalpers more than the manufacturers.

maybe this post about the JadePlus with a short video sequence can help answer this question...
https://x.com/BlockstreamJade/status/1877019252399481111
Thank you for providing the link to a video that shows there are no differences between those two.
legendary
Activity: 2870
Merit: 7490
Crypto Swap Exchange
January 09, 2025, 03:23:06 AM
#13

Those commit added shortly (Jan 5, 2025) after i write my previous post (January 04, 2025, 08:48:29 AM). I didn't check the code, but the commit title doesn't mention anything about Jade Plus.
legendary
Activity: 3402
Merit: 9199
icarus-cards.eu
January 08, 2025, 12:28:05 PM
#12
✂️
Does anybody know if there's any difference between "JadeLink" and a normal USB-C storage drive?
✂️

maybe this post about the JadePlus with a short video sequence can help answer this question...
https://x.com/BlockstreamJade/status/1877019252399481111
?
Activity: -
Merit: -
January 08, 2025, 06:26:32 AM
#11
And if you're concerned about transparency, i do not find indication Blockstream team add code for Jade Plus on https://github.com/Blockstream/Jade or their other repository.
Nice catch... It appears that it's in the works: Source

That's good to know. While we're waiting for update, i wonder whether they'll also release DIY section for Jade Plus.


https://github.com/Blockstream/Jade/commits/taproot/ this repo Huh
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
January 05, 2025, 07:07:25 AM
#10
It has a nice set of features, but these price tags would keep me away from buying such devices!
- In the past manufacturers came up with shortage excuses to increase their prices, and then some users said inflation had a big say in the outcome of prices, but considering where most of these devices are being made, I can safely rule out the latter part for the past few years!
~snip~

I won't go into how expensive or cheap something is to someone - but the price of this device is in the price range of the Trezor Safe 5. For someone who has several thousand/tens of thousands of $ worth of BTC, the price for such a device should be quite acceptable. In addition, if we look at the prices of some slightly better smartphones or computers, then the prices of hardware wallets do not seem too excessive.
legendary
Activity: 2870
Merit: 7490
Crypto Swap Exchange
January 05, 2025, 03:07:09 AM
#9
And if you're concerned about transparency, i do not find indication Blockstream team add code for Jade Plus on https://github.com/Blockstream/Jade or their other repository.
Nice catch... It appears that it's in the works: Source

That's good to know. While we're waiting for update, i wonder whether they'll also release DIY section for Jade Plus.
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
January 04, 2025, 08:34:28 AM
#8
It has a nice set of features, but these price tags would keep me away from buying such devices!
- In the past manufacturers came up with shortage excuses to increase their prices, and then some users said inflation had a big say in the outcome of prices, but considering where most of these devices are being made, I can safely rule out the latter part for the past few years!

and the JadeLink (a usb-c storage to enable air-gap firmware upgrades and transactions)
Does anybody know if there's any difference between "JadeLink" and a normal USB-C storage drive?

I found out that you can get lower price for this devices if you go to the bottom of the page and find offers there.
The following "discount codes" will also come in handy Smiley

And if you're concerned about transparency, i do not find indication Blockstream team add code for Jade Plus on https://github.com/Blockstream/Jade or their other repository.
Nice catch... It appears that it's in the works: Source
legendary
Activity: 2870
Merit: 7490
Crypto Swap Exchange
January 04, 2025, 03:48:29 AM
#7
The price is somewhat expensive. But more importantly, people should wait until some people write review for Jade Plus. And if you're concerned about transparency, i do not find indication Blockstream team add code for Jade Plus on https://github.com/Blockstream/Jade or their other repository.

Though device looks very portable, but not sure if it's something that can be frequently carried about by those that travels a lot, due to its size, but it still looks good anyways.

If they can carry their smartphone during their travel, they surely can carry this Jade Plus as well. Image shown by OP clearly shows it's much smaller than smartphone.
Pages:
Jump to: