Ledger Live customisation, firmware update before Ledger Recover

Meuserna

member

Activity: 99

Merit: 153

Quote from: bestcase on February 23, 2024, 10:46:19 AM

There are last versions of Firmware/Software BEFORE Ledger Live was implemented:

You have no way of knowing when the code required to extract seeds was added to Ledger firmware. Assuming it didn't happen until after they announced Ledger Recover is very foolish.

I wouldn't be surprised at all if parts of the code required for seed extraction have been in Ledger's firmware since as far back as 2021.

Ledger is dirty. Not one single word of what they say should be trusted.

Yamane_Keto

sr. member

Activity: 406

Merit: 443

Quote from: bestcase on February 23, 2024, 10:46:19 AM

Are here anyone who already done the research and have successfully downgraded / made previous update of ledger firmware?
I would happy to receive any tech information that you can share here. Wait for further comments.

ledger firmware = old firmware + Fix for some errors + New updates.
The firmware is built to be compatible with previous versions, so downgrad will not solve any problem. If there are problems with the update, contact Ledger to release the new firmware.

If you are not satisfied with the new updates, do not update the firmware, but over time you will find yourself forced, especially if the update is to fix software vulnerabilities. If you are not like the new updates, then buy a new hardware wallet.

Downgrad was possible in the past however it caused battery issues, wallet keeps freezing but according to Ledger_Support the firmware can't be downgraded to an older version.

Quote

Hey Stan, firmware can't be downgraded to an older version.

https://twitter.com/Ledger_Support/status/1663843289059950593

Pmalek

legendary

Activity: 2730

Merit: 7065

Farewell, Leo. You will be missed!

It's not possible to downgrade the firmware version of a Ledger hardware wallet. There is no public information on how to do that that I am aware of.
Regarding Ledger Live, you can install older versions of the software from Ledger's signatures page: https://www.ledger.com/ledger-live/lld-signatures

Despite Ledger Live being open-source, you are still dealing with a closed-source firmware. Even if you can understand and get rid of lines of code you don't like from Ledger Live, you know absolutely nothing about what the firmware does. And that's true for all of Ledger's firmware versions, not just the ones bearing the Ledger Recover code.

bestcase

newbie

Activity: 1

Merit: 0

Hello!

Everyone's heard about the Ledger Recover.

There are last versions of Firmware/Software BEFORE Ledger Live was implemented:

Ledger Nano X
OS version 2.1.0
Released 14 February 2023

Ledger Nano S Plus
Firmware version 1.1.0
Released 14 February 2023

Ledger Live 2.53.1
Released on February 8th, 2023

Who has an experience of building Ledger Live from the source code. Have you tried to change update links to make an update before Ledger Live was released?

For now I found in source code a request through the Websocket for the firmware update.
wss://scriptrunner.api.live.ledger.com/update/install?firmware=nanos%2B%2F1.1.1%2Ffw_1.0.2%2Fupgrade_osu_1.1.1&perso=perso_11&firmwareKey=nanos%2B%2F1.1.1%2Ffw_1.0.2%2Fupgrade_osu_1.1.1_key&livecommonversion=33.5.0

Here is the path where the firmware update piece of code is located: ledger-live-develop\libs\ledger-live-common\src\deviceSDK\commands\firmwareUpdate
Github page for Ledger Live to build: https://github.com/LedgerHQ/ledger-live

[Piece of code]
BASE_SOCKET_URL: {
   def: "wss://scriptrunner.api.live.ledger.com/update",
   parser: stringParser,
   desc: "Ledger script runner API",
  },

For Apps installation Ledger Live uses this domain: scriptrunner.api.live.aws.prd.ldg-tech.com.

Are here anyone who already done the research and have successfully downgraded / made previous update of ledger firmware?
I would happy to receive any tech information that you can share here. Wait for further comments.

Topic: Ledger Live customisation, firmware update before Ledger Recover (Read 63 times)