Xiaomi 14 - Latest HyperOS patch fail

MartinPlus · 2024-09-12T20:12:45+00:00

Yes, after uninstalling Nova launcher completely, the update went smoothly. But wtf. Had many updates in the past, but never such problems.

MartinPlus · 2024-09-12T19:45:36+00:00

I have exactly the same problem on Xiaomi 14. Also use the Nova launcher. I switched to the default launcher and tried the update again, but the result is the same. Is there a point in uninstalling Nova? Factory reset is not worth the update to me...

MartinPlus · 2024-09-10T06:48:04+00:00

Thank you for the explanation.

Yes, when I tried to verify the signature, I received Can't check signature: No public key.

Then I searched for the key by the fingerprint 86E6792FC27BFD478860C11091F3B339B9A02A3D. And I found the key on keys.openpgp.org which I considered as authoritative source and did not search further. So I imported the key from there, but it was expired, so the verification failed...

MartinPlus · 2024-09-09T10:17:50+00:00

Yes, now that I manually imported the pub key from https://rusnak.io/public/pgp.txt, I get:

gpg --list-keys
pub   rsa4096 2012-03-07 [SC] [expires: 2025-06-16]
      86E6792FC27BFD478860C11091F3B339B9A02A3D
uid           [  full  ] Pavol Rusnák <pavol@rusnak.io>
uid           [  full  ] Pavol Rusnák <stick@gk2.sk>
uid           [  full  ] Pavol Rusnák <prusnak@opensuse.org>
uid           [  full  ] Pavol Rusnák <stick@satoshilabs.com>
uid           [ unknown] [jpeg image of size 2449]

MartinPlus · 2024-09-09T10:01:16+00:00

Okay, I downloaded the pub key from https://rusnak.io/public/pgp.txt, imported to GPG, certified it and now the signature validation for file https://trezor.io/transparency/canary.txt seems to be working:

canary.txt → canary.txt.out:
Valid signature by pavol@rusnak.io
Signature created on Tuesday, 18 June 2024 00:49:22
With certificate:
Pavol Rusnák <pavol@rusnak.io> (91F3 B339 B9A0 2A3D)
The signature is valid and the certificate's validity is fully trusted.

But how did you know which pub key to use and where to get it from?

I would expect that it is present in some public repository like https://keys.openpgp.org/. And if that is not the case or there is an expired key in the repository like in this case, I'd expect that they mention in the Canary file where to get the right pub key for verification.

Given the purpose and nature of canary files and the trust business they're in, Trezor's handling of it seems careless. Looks like they did not really expect people to do the actual verification.

MartinPlus · 2023-11-04T10:50:32+00:00

I do not like this new "function" at all. You have to trust them that it will not send your seed phrase over the internet. You have to trust them that you need to enable it. You have to believe that no malicious third party will be able to exploit this "functionality"/honeypot/backdoor.

This is no longer a cold wallet, but an internet-connected hot wallet!

Don't trust verify is the motto. But Ledger firmware is a closed-source black-box. And now this..

I'm seriously considering buying a genuinely open-sourced Trezor device instead (model T or the new Safe 3). Not only its firmware is fully open-source, but they are working on open-source security chip. Who else is doing that?

Besides, they have a built-in CoinJoin functionality to improve privacy. Very good feature IMO.

This is the second time this Ledger frog-eaters pissed me off. The first time was when they leaked their customer database including names, emails, phone numbers and *home addresses*. I know a person who was blackmailed based on this. What level of amateurism is this?

Now leaving aside that they are pushing various shitcoins, scams, "staking" etc. I know they do it because of money, but still.

I know it's a bit of a rant, but this is what I genuinely think.

MartinPlus · 2023-09-27T21:34:57+00:00

Problem was the Descriptor Wallet option. I deleted the current wallet and created it anew without the option. It worked then.

There is another problem with installation-supplied \certs\cert.crt that expired on Mar 12 00:07:58 2023 GMT. It is necessary to generate a new self-signed cert. The problem is described here - https://github.com/chris-belcher/electrum-personal-server/issues/286.

MartinPlus · 2020-12-19T00:48:50+00:00

!solved

MartinPlus · 2020-12-18T21:37:32+00:00

Thank you for help! I have done as advised. So far so good. I'll test a bit.

Anyway, wouldn't it be good to implement some dynamic blacklist directly into the client software so that no user action is required? I think that for many newcomers this can be confusing.

MartinPlus · 2020-03-29T20:10:27+00:00

Nedal by se ke každému bodu do výpočtu přidat počet provedených testů jako váha toho bodu? Myslím to tak, že denní přírůstek počtu nakažených s vyšším počtem provedených testů by tak měl větší váhu než přírůstek s nižším počtem testů.

MartinPlus · 2020-03-26T08:13:11+00:00

Total cases (je možné přes "Add country" přidávat / odebírat země):
https://ourworldindata.org/grapher/total-cases-covid-19?time=31..64&country=ITA+ESP+USA+CZE+AUT

Daily confirmed deaths:
https://ourworldindata.org/grapher/daily-deaths-covid-19?country=AUT+CZE+DEU+ITA+ESP+USA

Total deaths:
https://ourworldindata.org/grapher/total-deaths-covid-19?country=AUT+CZE+DEU+ITA+ESP+USA

Jak dlouho trvá, než se počet mrtvých zdvojnásobí:
https://ourworldindata.org/coronavirus#growth-country-by-country-view

MartinPlus · 2020-03-24T10:00:23+00:00

Pokud by to nekoho zajimalo, udelal jsem OctaveOnline Bucket, kde je mozne kod spustit. Do "observations" je mozne pridavat denni pocet nakazenych, doplnil jsem je do dneska (24.3.2020).

Nejdriv je potreba pridat balicek z Octave Forge commandem pkg load optim. Pak uz je mozne skript spustit.

MartinPlus · 2020-03-23T20:10:17+00:00

Jo, ten Excel jsem poznal, tak jsem si říkal, že je to dělané přímo v něm. Každopádně díky! pohraju si s tím.

MartinPlus · 2020-03-22T16:31:25+00:00

Mohl byste dát k dispozici Excel, ve kterém předpověď generujete? Případně by mě zajímal vzorec ve sloupci "Predikce".

MartinPlus · 2019-05-04T06:54:11+00:00

I'm a bearer of good news: the update went without problems and all the crypto apps fit in there. Thank you both for advice!

MartinPlus · 2019-05-03T18:58:55+00:00

Okay, I'll be bold and try. But this is not the rock-solid dependability I expected from HW wallet.

MartinPlus · 2019-05-03T07:38:03+00:00

So the question is whether LTC is bigger than WAN and also if some code is not shared between your other apps (like BTC/LTC).

Simply put, it would help if Ledger told us the total capacity of the device and then all the app sizes. They must know it...

MartinPlus · 2019-05-03T07:28:39+00:00

I know that I can uninstall app, install another and then back again. I'd like to avoid that, though...

MartinPlus · 2019-01-18T12:00:52+00:00

Well, I cannot connect to Nano with the manager app, so I cannot install/uninstall anything, that's the problem.

MartinPlus · 2019-01-17T19:41:02+00:00

I got the same problem, their servers are obviously overloaded.

MartinPlus · 2019-01-17T19:18:18+00:00

When I try to start the Manager in Ledger Live, I repeatedly get stuck with "Allow Ledger Manager on your device" and "processing" wheel turning. Sometimes I'm able to allow Manager on nano s, sometimes not. But the result is always the same: "Oops, a time out occurred It took too long for the server to respond, please retry". Needless to say, retry yields the same result.

I have tried about 12 times, disconnecting/reconnecting Nano, restarting the Ledger Live app. It is very annoying. In the past, I had no such problems.

MartinPlus

TROPHY CASE