Your Ledger companion.

Antoine Poinsot

Last update: Jun 1, 2024

Related tags

Cryptography bitcoin ledger

Overview

Brought to you by

Bacca

Your Ledger companion.

WARNING: this is alpha software. Only use for testing.

A minimalistic software to install and upgrade the Bitcoin application on Ledger Nano S, S plus and X.

Why?

Ledger makes great hardware. However their software is lacking.

The Ledger Nano S plus and X are secure, user-friendly and up to date with the latest Bitcoin technologies. They are securely accessible to beginners, while letting their users benefit from advancements and newer standards.

Ledger Live is a cluttered software to manage your device where development resources are allocated toward scammy altcoins instead of making a decent Bitcoin wallet. The trajectory taken by Ledger Live has become increasingly worrying to me and other users of Liana: will my beneficiaries at all be able to navigate through the nudges toward Ponzi schemes and go through the unnecessary complicated procedure of setting up their device to be used with a Bitcoin wallet?

This software offers a simple, straight-to-the-point, alternative.

The state of this project is nowhere near the point where it can stably replace Ledger Live for non tech-savvy bitcoiners, yet. That said we hope to start pulling some of the functionalities into Liana.

Usage

This is a PoC. Use at your own risk.

This software can be used:

Through a Graphical User Interface
Through a Command Line Interface
Through a Rust library for other projects to integrate some of the functionalities

GUI

The recommended way to use this software is through the GUI. Simply connect your Ledger Nano S, S plus or X to the USB port and run:

cargo run -p ledger_manager_gui

We plan on releasing binaries in the future.

CLI

Another way of using this is the CLI, which directly hooks up into the functionalities offered by the Rust crate. The CLI will talk to a Ledger device connected by USB. The commands are communicated using an environment variable, LEDGER_COMMAND. Another env var lets you switch to testnet (for instance to install the test app), simply set LEDGER_TESTNET to any value.

For now those commands are implemented:

getinfo: get information (such as the list of installed apps) for your device
genuinecheck: check your Ledger device is genuine
installapp: install the Bitcoin app on your device
updateapp: update the Bitcoin app on your device
openapp: open the Bitcoin app on your device

Examples

Checking your Ledger is genuine

LEDGER_COMMAND=genuinecheck cargo run -p ledger_manager_cli

Querying Ledger's remote HSM to perform the genuine check. You might have to confirm the operation on your device.
Success. Your Ledger is genuine.

Installing the Bitcoin Test app on your Ledger

LEDGER_TESTNET=1 LEDGER_COMMAND=installapp cargo run -p ledger_manager_cli

Querying installed applications from your Ledger. You might have to confirm on your device.
Querying Ledger's remote HSM to install the app. You might have to confirm the operation on your device.
Successfully installed the app.

Future

We are looking into people to help test this and confirm it works in as many scenarii as possible.

We are probably going to have to introduce an upgradefirmware command.

Contributions welcome! If you are interested, get in touch on the Liana Discord.

NOTE: i am not interested in supporting altcoins. If you want to add support for one, feel free to fork the project.

Comments

Revamp gui
This PR introduce a new structure of the GUI:

a85663a98289337c653245b7d565c891b18f412b split bitcoin_app() in 2 function: get_latests_app() and bitcoin_latest_app(), so the GUI can get both version in a single API call

805d7b841f80f4e3a6b60f6b8499930d46c29380 fix an error issued if we want to list apps and no app installed on device.

64e8af4135fc4b5d829ae13df3c1eb7fa9e81a4a introduce the new GUI structure itself, the genuine check is now doable only once per launch and add the update feature.
opened by pythcoiner 16
Update to fit lib.rs changes
[x] ledger_service.rs::check_apps_installed() now use the 'new' list_installed_apps()

[x] remove get_app_version() as its not used anymore by check_apps_installed()

[x] get the actual installed app version
opened by pythcoiner 5
Genuine check feature

This PR add a feature for check if the ledger device is genuine.

I just have concern about how to detect if Ledger API NACK that the device is genuine? or they never NACK? if so we cannot hint the user that his device is not genuine... (or i miss something)

opened by pythcoiner 2
Gui
This PR Introduce a new binary: 'Baaca - Your ledger Bitcoin companion' baaca is a tool that let user install firmware on a ledger device (S/S+/X). i've only test against S/S+ as i don't have a x in hand.

this application is separated in 2 parts:

The Iced(12.1) front-end that run in the main thread:

The GUI implementation is contained in src/baaca/gui.rs

The GUI used the Liana theme that have been cloned in src/baaca/theme.

Ledger backend that run in its own separated thread, communicate to gui thread via message through async-channels

Fews comments about this implementation (that is still alpha):

Update of firmware is deactivated (uncommenting here, here and here.

The ledger thread try to connect to ledger devices every 2 seconds and stop when it get connected ( i let it poll continuously while idle before, but have sometimes weird behaviour )

I do not try the behaviour if 2 ledger devices connected

We rely on a patched minreq as dependency.

For both fetching the firmware and determine the app version installed(w/ app not opened) we have to connect to the Ledger API, that can be at the moment very slow (i sometime experience 40 seconds wait, not sure if it is about ledger API side or a minreq issue)

Wording and sequence of info messages passed to user can be improved a lot (i'm very bad at wording :smile: )

The binary have been tested only under linux at the moment
opened by pythcoiner 2
reinstate container default theme

in 0b29e5a8b41b3914c07477bda8e004e75927de7f i've unintentionally changed the default theme for Container leading to #12 , this PR reinstate former default.

Fixes #12

opened by pythcoiner 0
Add udev update instructions to the documentation

I was giving a try to Bacca and launching the GUI I got the following message:

The device was actually connected and unlocked but apparently it was not detected. Below you can find the log from the polling:

[2024-06-06 14:43:36][ledger_manager_gui::ledger_service][INFO] LedgerService::send_to_gui(Connected(None, None))

I solved it by running the following commands: https://github.com/LedgerHQ/udev-rules/blob/master/add_udev_rules.sh

It could be helpful to add such indications in the documentation.

opened by nondiremanuel 0
Try to make a genuine test fail
> or i miss something

Yes. :) If the device fails the check, the Ledger API would return an error (well, i hope, i guess we could test this by messing with the data transmitted) and query_via_websocket would propagate this error: https://github.com/darosior/ledger_installer/blob/7be54a592540bf42ee1ef83b58882f136f63bf2b/ledger_manager/src/lib.rs#L370-L375

Originally posted by @darosior in https://github.com/darosior/ledger_installer/issues/5#issuecomment-2097768124
opened by pythcoiner 4

Owner

Antoine Poinsot

590B 7292 695A FFA5 B672 CBB2 E13F C145 CD3F 4304

GitHub

Bitcoin Push Notification Service (BPNS) allows you to receive notifications of Bitcoin transactions of your non-custodial wallets on a provider of your choice, all while respecting your privacy

Bitcoin Push Notification Service (BPNS) Description Bitcoin Push Notification Service (BPNS) allows you to receive notifications of Bitcoin transacti

1 May 2, 2022

deductive verification of Rust code. (semi) automatically prove your code satisfies your specifications!

Le marteau-pilon, forges et aciéries de Saint-Chamond, Joseph-Fortuné LAYRAUD, 1889 About Creusot is a tool for deductive verification of Rust code. I

609 Dec 28, 2022

Employ your built-in wetware pattern recognition and signal processing facilities to understand your network traffic

Nethoscope Employ your built-in wetware pattern recognition and signal processing facilities to understand your network traffic. Check video on how it

86 Dec 5, 2022

Koofr Vault is an open-source, client-side encrypted folder for your Koofr cloud storage offering an extra layer of security for your most sensitive files.

Koofr Vault https://vault.koofr.net Koofr Vault is an open-source, client-side encrypted folder for your Koofr cloud storage offering an extra layer o