AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 17 Bitcoin

docs: update installer info (#782)

Public commit record

What the developer wrote

Authored by qlrd

98/100 · Strong
docs: update installer info (#782)

The latest installer changed authenticity/integrity checks. This commit
removes `snippets/verify-the-*.en.txt` as well change some
`getting-started/installing/from-gui` files to comply with the necessary
steps.
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit only updates user documentation for installing the Krux desktop installer. It removes per-platform instructions for verifying downloaded files and replaces them with a single shared verification page. There is no code change, no firmware change, and no change to how Krux devices validate firmware. The only security-relevant aspect is that the docs still tell users to check file signatures and hashes before installing the desktop app.

Recommended action

No security action required. Review the new verify-download.en.md page for accuracy of the Windows PowerShell hash-check regex and ensure the documented signing key matches the actual release key.

Security signals we found

01

Documentation still instructs users to verify GPG signatures and SHA256 hashes of the installer

02

Hardcoded signing key and keyserver moved from snippet into mkdocs.yml template variables

03

No change to actual signature/integrity verification behavior of the installer or device firmware

Risk score

Why this scored 17/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 5/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.