qlrd's avatar
qlrd
npub1kygl...ph68
A beign-there and Krux contributor
qlrd's avatar
qlrd 1 year ago
Linting many files of tests folder of #krux project. Reading them and trying to interpret is a good way to learn more about this amazing code.
qlrd's avatar
qlrd 2 years ago
@npub1acg6thl5psv62405rljzkj8spesceyfz2c32udakc2ak0dmvfeyse9p35c, just updated gossip-bin package for archlinux. The script extract `.deb` package and do a properly install of its contents
qlrd's avatar
qlrd 2 years ago
One of the coolest things that @npub1r4y9mtc2sm020d2fa25qhzept3633ad7mstegu80ur60s4qnqs5sxsuwud created was use #krux to sign (and verify its signature) of any file in an airgapped way. It was originally in your gist as a #python script
Gist
Sign files with Krux, airgapped and export openssl signature and public key
Sign files with Krux, airgapped and export openssl signature and public key - krux_file_signer.py
 Talking to him, I proposed the creation of an executable for any OS that can be found here:
GitHub
GitHub - selfcustody/krux-file-signer: A python script to sign files and verify signatures in a airgapped manner
A python script to sign files and verify signatures in a airgapped manner - selfcustody/krux-file-signer
qlrd's avatar
qlrd 2 years ago
Updated krux-installer-bin package on AUR. Now #archlinux users can install #krux with few commands and mouse clicks and make #bitcoin airgapped transactions.
qlrd's avatar
qlrd 2 years ago
Now i'm co-maintainer of krux-installer-bin package on AUR 😀
qlrd's avatar
qlrd 2 years ago
The maintainer of `krux-installer-bin` package on AUR (https://aur.archlinux.org/packages/krux-installer-bin) just updated its code to `v0.0.1-alpha-6`. But in it's dependencies, declares `electron 24`. I will ask for another update to electron 26.2.1 (i cannot be irresponsible with this security issue).
qlrd's avatar
qlrd 2 years ago
I request help from users and programmers who use Mac to test krux-installer. This post be a long one, sorry. A friend, a Mac user, tested and came across the following problem, during the `flash` stage (the stage where krux-installer use a tool the krux firmware). The problem is with the tool, a `ktool-mac` file: 😭😭😭 ```bash Error: 0:336: execution error: [1047] Cannot open PyInstaller archive from executable (/Users/somefriend/Documents/krux-installer/krux-v23.09.0/ktool-mac) or external archive (/Users/somefriend/Documents/krux-installer/krux-v23.09.0/ktool-mac.pkg) (255) at Socket. (/Applications/krux-installer.app/Contents/Resources/app.asar/dist-electron/main/index.js:6:381) at Socket.emit (node:events:513:28) at addChunk (node:internal/streams/readable:324:12) at readableAddChunk (node:internal/streams/readable:297:9) at Socket.push (node:internal/streams/readable:234:10) at Pipe.onStreamRead (node:internal/stream_base_commons:190:23) ``` 😭😭😭 In krux context, `ktool-mac` is a executable packaged with PyInstaller, for the purpose of running a python script on any operating system, without having to install python. But that's not what's happening in our case. I lightly investigated the problem and found this thread:
GitHub
Cannot open Pyinstaller archive from executable(...) or external archive(...) · Issue #7243 · pyinstaller/pyinstaller
I meet a problem after converting my python project into executable file with pyinstaller 4.9 and python 3.6. The .exe file runs well on windows 10...
 They say that the file (in our case, `ktool-mac`): - Can be corrupted; or - have insufficient permissions. The help that i request is to make the steps below, and give some feedback, as a reply on this post, to confirm a corruption or a permission problem: - (1) download
GitHub
Release Version 23.09.0​ · selfcustody/krux
Version 23.09.0 - September 12, 2023 After a long year, new features are finally coming out of beta and making their way into a stable release. Als...
 ; - (2) extract `ktool-mac` in a separate folder; - (3) execute, in a terminal, `sha256sum <path were you saved the file>/ktool-mac` and save the result hash on a text file; - (4) download
GitHub
Release Krux-Installer v0.0.1-alpha-6 · selfcustody/krux-installer
What's Changed Updated from Urgent Security Issue by @qlrd in #29 Critical WebP bug: many apps, not just browsers, under threat. The heap buffer ...
 - (5) Execute steps on software: (a) `select device`; (b) `select-version` (c) `v23.09.0`; (d) `verification`; (e) `flash`; - (6) Maybe a error will appear, if you want to reproduce the error, fell free to do it; - (7) Now, execute a `sha256sum /Users/somefriend/Documents/krux-installer/krux-v23.09.0/ktool-mac` (change `somefriend` with your current user); - (8) save the result hash on next line of the same text file of step 3; - (9) compare the hashes; If hashes are the same, we can confirm a permission problem.
qlrd's avatar
qlrd 2 years ago
Made a gossip package on AUR (https://aur.archlinux.org/packages/gossip-bin). It's a Nostr client that encrypt the private key and it's very fast. There are 2 other options, but its very processor-intensive, because compile it's `.rs` sources. - `gossip` (https://aur.archlinux.org/packages/gossip) - out of date; - `gossip-git` (https://aur.archlinux.org/packages/gossip-git) - keeps updated with git repository; `gossip-bin` simple download the latest pre-compiled `AppImage` (https://github.com/mikedilger/gossip/releases/tag/v0.8.0), extract its content and install on system.
qlrd's avatar
qlrd 2 years ago
For archlinux users, there's already an AUR package: `krux-installer-bin` (https://aur.archlinux.org/packages/krux-installer-bin) You can install with any AUR package manager (yay, paru, aurutils...) WARN: the krux-isntaller version isnt updated yet. I already commented to PKGBUILD author to update it. Additionally, I will start working on some possible mac bugs and packaging for `deb` and `flatpak` formats.
qlrd's avatar
qlrd 2 years ago
This was the fastest between releases it had 🚩.
GitHub
Release Krux-Installer v0.0.1-alpha-6 · selfcustody/krux-installer
What's Changed Updated from Urgent Security Issue by @qlrd in #29 Critical WebP bug: many apps, not just browsers, under threat. The heap buffer ...
 Like @npub1r4y9mtc2sm020d2fa25qhzept3633ad7mstegu80ur60s4qnqs5sxsuwud said, the vulnerability (see https://forum.obsidian.md/t/urgent-security-issue-please-update-to-electron-26-2-1/67357), would affect only messengers. I hadn't thought about it and, perhaps, I was hasty in making this release. But anguish took over me and I wouldn't want anyone to end up with a broken device because of it. @npub16s7exzaa4le983mjvnw7jfatum0jfxqtpfk2uqdel3c4q97uqznst6hyar, as you requested, it now has a pgp signature to verify authenticity.
qlrd's avatar
qlrd 2 years ago
@odudex already approved PR. Tests are beign run and as soon as it is finished, the release will be done
qlrd's avatar
qlrd 2 years ago
A friend just told me about a bug in electron
Obsidian Forum
Urgent Security Issue: please update to Electron 26.2.1
I don’t see any recent posts discussing Electron, webp, or CVE-2023-4863. I’m concerned this means that Obsidian isn’t preparing an update fo...
 Krux-Installer was built with v26.0.0. I will replace the version with electron 26.2.1 and put a new krux-isntaller v0.0.01-alpha-6. But this will take some time since krux contributors need to aprove a new PR. Sorry and thank you (for your possible) patience.
↑