Blockstream / Blockstream/Jade

Hide Pre-1.038 firmware versions

Open
#288 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
496
Forks
127
PR merge metrics
No merged PRs in 30d

Description

Following the December 2025 vulnerabilty disclosure, perhaps the blockstream website should not list/recommend/offer the vulnerable firmware versions anymore. Or flag them as such. all those <1.0.38

Webpage is: https://jadefw.blockstream.com/upgrade/download.html

And thanks for now listing the file hashes when running the Serial/usb web updater on that page :) 👍 .

I do however suggest that _some_ explananation below that text, to prompt the the user to match the hash value on the device, would now be the next webpage update.
The Jade product is aimed at Beginners/Intermediate users who are still learning to know to do that.

Thx!
M

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.