What the developer wrote
Authored by Lukas Bielesch
chore(core/eckhart): disconnect action
[no changelog]
What changed, and why it matters
This commit removes a confirmation prompt that asked the user before disconnecting a Bluetooth device, and instead immediately disconnects if a device is connected. It is a minor user-experience/behavior change on a new hardware model (Eckhart). There is no direct evidence in the commit that this fixes a security vulnerability.
No immediate action required. Treat as routine UI/UX change unless additional context emerges showing the missing confirmation created a security or safety issue.
Security signals we found
Removal of user confirmation before an action
Bluetooth disconnect handling now executes immediately
Evidence from the diff
In core/src/apps/homescreen/device_menu.py, the DeviceMenuResult.DeviceDisconnect branch was changed from showing a confirm_action UI prompt and a TODO comment to directly calling ble.disconnect() when ble.is_connected(). The diff is small and removes user confirmation before disconnecting a paired/connected BLE device. No security relevance is stated by the vendor, and no references are supplied.
Changed components
core/src/apps/homescreen/device_menu.pyBluetooth (BLE) disconnect flow on Eckhart hardware modelInspect captured patch +2 / −8
diff --git a/core/src/apps/homescreen/device_menu.py b/core/src/apps/homescreen/device_menu.py
index 8c9bf6038..1ae009b28 100644
--- a/core/src/apps/homescreen/device_menu.py
+++ b/core/src/apps/homescreen/device_menu.py
@@ -103,15 +103,9 @@ async def handle_device_menu() -> None:
await wipe_device(WipeDevice())
# Pair & Connect
- elif menu_result is DeviceMenuResult.DeviceDisconnect:
- from trezor.ui.layouts import confirm_action
+ elif menu_result is DeviceMenuResult.DeviceDisconnect and ble.is_connected():
- await confirm_action(
- "device_disconnect",
- "device_disconnect",
- "disconnect currently connected device?",
- )
- # TODO implement device disconnect handling
+ ble.disconnect()
elif menu_result is DeviceMenuResult.DevicePair:
from trezor.ui.layouts import show_warning
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.