CommitWatch RSS
DN
← Developer activityStrong match

Daniel Newton

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

65 commits1 monitored projects15 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to Daniel NewtonA visual map of monitored and externally discovered repositories.DNdeveloper65Blockstream Jade
Monitored evidence

CommitWatch projects

Blockstream JadeBlockstream65 commits15 candidates0 high risk
External discovery

Other public projects

No external sample loaded yet.

A verified GitHub handle is needed before external discovery.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 40 AI analysisMessage 78 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

libjade: add camera/input/nvs support, refactor

This commit is a large feature/refactor patch for Blockstream Jade's libjade (a desktop emulator of the Jade hardware wallet). It adds RPC endpoints that let a host application read the emulated device's screen, push fake button presses, r…

New RPC endpoints allow external read/write of emulated NVS storageNew RPC endpoints allow external screen capture and synthetic input injectionNew RPC endpoints allow external camera frame injection
f7184945by Daniel Newton+1806−75832 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 65 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

gui/camera: stop the gui task from possibly trying to render an image from a camera task stack that no longer exists

This commit fixes a race condition in the Blockstream Jade hardware wallet's camera and screen rendering code. When the camera task finished, its stack memory could be freed while the GUI task was still trying to draw the last camera image…

Use-after-free / dangling pointer in concurrent GUI/camera task interactionMissing synchronization when camera task memory is freed while GUI may still render itStack-allocated Picture object lifetime exceeds owning task lifetime
c51f7fb9by Daniel Newton+16−03 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 58 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

libjade: clear keychain on libjade_stop()

This change makes the Jade hardware wallet library wipe sensitive key material from memory when the library is stopped. Previously, stopping the library may have left private keys or seed data sitting in memory, which could be read by othe…

Sensitive memory not cleared on teardownKey material potentially left resident after library stopDefensive secret-zeroing patch
38a0e808by Daniel Newton+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 55 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

tests: add liquid descriptor to debug_selfcheck()

This commit only adds a new test case to the device's self-check suite. It exercises Liquid Bitcoin descriptor parsing and checks that blinding keys and script outputs are produced correctly. There is no change to production code, no bug f…

f1da3ebaby Daniel Newton+92−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 29 AI analysisMessage 73 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

descriptor: add support for liquid confidential descriptors

This commit adds support for Liquid confidential descriptors to the Blockstream Jade hardware wallet. It is a feature addition, not a fix for a known vulnerability. The code introduces new validation rules that reject non-SLIP77 blinding k…

Feature-gated Liquid confidential descriptor supportNew validation rejecting non-SLIP77 blinding keys on LiquidNew validation rejecting confidential descriptors on Bitcoin mainchain
0e009e4fby Daniel Newton+160−419 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 75 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

tests: update main test suite with descriptor parsing changes

This commit only updates the project's test file (test_jade.py). It adjusts test cases and adds new tests for how Bitcoin/Liquid wallet descriptors are parsed and validated, including new rules around SLIP-77 blinding keys on Liquid. There…

Test-only change with no production code modificationsNew test coverage for descriptor parsing network rulesSLIP-77 blinding-key requirement enforced for Liquid descriptors
be0c5fd3by Daniel Newton+73−181 file
No security note in commit
Open full analysis →Source commit ↗
Informational 5 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

wally: update to latest master to pick up liquid descriptor support

This commit updates an internal dependency (libwally-core) to a newer version so that Blockstream Jade can support Liquid descriptors. No actual code changes are shown, and the commit message describes only a feature addition, not a securi…

baeedee5by Daniel Newton+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: update jade_builder_base docker image to esp-idf v5.5.4

This commit simply updates the version of Espressif's ESP-IDF development framework used to build Jade's Docker builder image, from v5.4.3 to v5.5.4. There is no indication in the commit of any security issue, vulnerability, or functional …

d4adb65dby Daniel Newton+3−31 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 77 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: update jade_builder docker image script to latest jade_builder_base

This is a routine build-system update. It changes the Dockerfile to use a newer internal base image and a newer version of Espressif's ESP-IDF toolchain. There is no indication of a security bug, vulnerability fix, or malicious change in t…

543e3d64by Daniel Newton+3−121 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 70 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: update sdkconfig definitions

This commit is a routine build-system update that renames several ESP-IDF configuration options to match the names used in ESP-IDF version 5.5. It does not change any actual behavior or security settings of the firmware. The old and new co…

032ddce0by Daniel Newton+37−4829 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 57 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: update jade_builder image references

This commit simply updates the version (SHA hash) of a Docker build image used by the project in four configuration/documentation files. There is no code change, no vulnerability fix, and no security-relevant behavior change visible in the…

4ee1ffa2by Daniel Newton+5−54 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

tools: esp32 move OS functions to flash from IRAM when wifi logging on

This commit changes a build configuration script for the ESP32 version of Blockstream Jade. When Wi-Fi logging is enabled, the script now places some FreeRTOS operating system functions into flash memory instead of fast internal RAM (IRAM)…

No security-relevant code change identifiedBuild configuration adjustment to resolve memory layout issueNo input validation, privilege, cryptographic, or network changes
8330ce0eby Daniel Newton+4−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 24 AI analysisMessage 60 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

serial: set UART0 pins on esp32

This commit explicitly sets the physical pins used for the device's main serial (UART0) communication on ESP32 chips. In newer ESP-IDF versions (from v5.5), the default pins are no longer assigned automatically, so without this change the …

Hardware interface pin configuration now explicit rather than relying on SDK defaultsFailure path added: returns false if uart_set_pin failsChange is defensive against ESP-IDF behavior change, not a response to a disclosed vulnerability
f2cb1e11by Daniel Newton+6−01 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 57 AI analysisMessage 58 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

esp-idf: update to v5.5.4, take multisig bootloader component from https://github.com/Blockstream/esp-idf/tree/securebootv2_multisig_v5.5.4

This is a large update that pulls in Espressif's ESP-IDF v5.5.4 bootloader code, plus Blockstream's own multi-signature secure-boot patches. Most of the visible changes are routine: support for newer ESP32 chips, larger flash sizes, and a …

Anti-fault-injection assertion (ESP_FAULT_ASSERT) added around TEE flash address validationTEE flash write/erase now rejects operations targeting the active TEE partition rangeSecure Boot V2 extended to support ECDSA-P384 / SHA-384 digests
d931d543by Daniel Newton+3879−1437104 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

ui: tidy up message/error activities

This commit is a straightforward code cleanup. It replaces a verbose way of showing on-screen messages and errors with simpler helper functions, and fixes a spelling mistake ('re-encypt' to 're-encrypt'). There is no change to security log…

No security-relevant logic changesRefactoring only: API simplification for UI message displaySpelling correction in user-facing error string
1914ace0by Daniel Newton+162−24625 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: move production config directory into the configs directory

This commit simply moves existing production build configuration files from one folder (production/) into a subfolder (configs/production/). The contents of the files are unchanged, and only two helper scripts are updated to point to the n…

be7f66d2by Daniel Newton+629−6299 files
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 65 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

wire: fix not processing all received data when wire.c timeout hit

This commit fixes a bug in how Blockstream Jade processes incoming messages when a communication timeout occurs. Previously, if old, partial data was sitting in the buffer when new data arrived after a timeout, the code would discard the o…

Logic change in message-boundary parsing after timeoutPotential message loss/desynchronization due to incorrect buffer handlingNo explicit security framing by vendor
fa76e536by Daniel Newton+26−316 files
No security note in commit
Open full analysis →Source commit ↗
Low 25 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

logging: unify esp_log_set_vprintf calls and conditionally compile all esp log functions

This commit is mostly a cleanup of how logging is set up on the device. It moves where the event loop is created, makes some log functions disappear when logging is completely disabled, and changes one error message to a less alarming one.…

Conditional compilation of logging functions to prevent use when logging is disabledCentralized event-loop creation to avoid duplicate initializationChanged duplicate event-loop creation from error to benign idempotent return
f94fc04fby Daniel Newton+42−278 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

qemu: fix outdated scripts/documenation

This commit only updates QEMU emulator helper scripts and documentation. It renames a script from make-flash-img.sh to make_flash_img.sh, adds command-line options, updates README instructions, and removes an unused reboot script. There is…

9cfc58fbby Daniel Newton+109−558 files
No security note in commit
Open full analysis →Source commit ↗
Informational 14 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

qemu: enable logging in CI

This commit only turns on diagnostic logging for automated QEMU (emulated hardware) test runs in CI. It adds a new logger that writes messages to the emulated serial port, changes CI scripts to capture that output, and adjusts a build help…

92b0db75by Daniel Newton+33−66 files
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →