cryptoadvance / cryptoadvance/specter-desktop

Specter-Desktop v2.1.10 security audit report v1.5

Open
#2,677 2 comments 1 reaction 0 assignees View on GitHub
Dominant language
Python
Stars
847
Forks
259
Avg merge
6d 18h
Merged PRs (30d)
2

Description

I made a security audit report for Specter-Desktop v2.1.10 which is limited in scope.
There is one important issue to get on top of immediately I think.

But overall it looks ok.

I was not able to use Kimi K3 (can't even get an account) nor unrestricted ChatGPT Codex 5.6 Sol.

I upgraded to ChatGPT Pro and can now run 5.6 Sol Ultra. And it seems like I can do a pretty good deep and broad audit without running in to Cybersecurity filters too much. But I still get regular system issues and then I have to manually move it along again. But it is running.
So there will come a next deep and much broader report that basically goes through everything including dependancies.

I hope it helps.

[Specter_Desktop_Security_Audit_Report_v1.5.pdf](https://github.com/user-attachments/files/30786936/Specter_Desktop_Security_Audit_Report_v1.5.pdf)

Contributor guide

Open the contributing guide

Research direction

Start by reading the attached Specter_Desktop_Security_Audit_Report_v1.5.pdf and identify the important issue referenced in the report. No source files, tests, entry points, or concrete completion criteria are named, so the scope and definition of done need clarification before implementation can begin.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
desktop-dev, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.