GlcoinCore/specter-desktop
1
0
Fork 0
mirror of https://github.com/cryptoadvance/specter-desktop.git synced 2026-08-13 12:33:29 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

Warn on ColdCard Mk3 seed-entropy advisory at device setup (#2676)

Browse source 
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
This commit is contained in:
Róbert Nagy 2026-08-08 19:33:01 +03:00 • committed by GitHub
parent 48fea77b8a
commit 3d554fbc2e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/cryptoadvance/specter/static/output.css
View file

@ -1100,6 +1100,10 @@ input[type="number"]::-webkit-outer-spin-button,
z-index: 50;
}
.z-20 {
z-index: 20;
}
.z-30 {
z-index: 30;
}

10
src/cryptoadvance/specter/templates/device/new_device/new_device_keys.jinja
View file

@ -30,6 +30,16 @@
</div>
{% endif %}
<div id="coldcard-warning" class="flex p-4 mt-3 mb-4 bg-orange-100 text-orange-700 rounded-lg {% if device_class.device_type != 'coldcard' %}hidden{% endif %}" role="alert">
<img class="flex-shrink-0 w-6 h-6 mr-3" src="{{ url_for('static', filename='img/warning_sign.svg') }}" aria-hidden="true">
<span class="sr-only">{{ _("Security warning") }}</span>
<div>
<span class="font-medium">{{ _("Security warning: ColdCard seed entropy advisory") }}</span><br>
{{ _("Coinkite disclosed a firmware flaw that reduced generated-seed entropy on ColdCard Mk2/Mk3 (firmware 4.0.1-4.1.9) and Mk4/Mk5/Q before their fixed firmware. If your seed was generated on-device with fewer than 50 independent dice rolls, update firmware, generate a new seed and move your funds.") }}
<a class="text-orange-700 underline" href="https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/" target="_blank" rel="noopener noreferrer">{{ _("Read Coinkite's advisory") }}</a>
</div>
</div>
<div id="coldcard-instructions" class="{%if device_class.device_type != 'coldcard' %}hidden{% endif %}">
<p>{{ _("Connect your ColdCard to the computer via USB and unlock it or upload a wallet export file from micro SD card.") }}</p>

2
src/cryptoadvance/specter/templates/device/new_device_manual.jinja
View file

@ -49,7 +49,7 @@
<p class="mt-3 mb-0 selection-button cursor-pointer" data-style="text-decoration: underline; cursor: pointer;" onclick="showPageOverlay('usb_import_account_number')">{{ _("Specify account number (advanced)") }}</p>
<div class="flex space-x-3 mt-3">
<div class="flex space-x-3 mt-3 relative z-20">
<qr-scanner id="xpub-scan">
<a slot="button" href="#" class="button mb-3">
<img src="{{ url_for('static', filename='img/qr-code.svg') }}" data-style="width: 26px; margin-right: 2px;" class="svg-white"> {{ _("Scan QR Code") }}