this post was submitted on 25 Jun 2025
8 points (100.0% liked)

meshtastic

212 readers
2 users here now

Meshtastic® is a project that enables you to use inexpensive LoRa radios as a long range off-grid communication platform in areas without existing or reliable communications infrastructure. This project is 100% community driven and open source!

https://meshtastic.org/

founded 2 years ago
MODERATORS
J4g2F@lemmy.ml
8
Critical Meshtastic Flaw Allows Attackers to Decrypt Private Messages (gbhackers.com)
submitted 2 weeks ago by kid@sh.itjust.works to c/meshtastic@lemmy.ml
0 comments fedilink hide all child comments
 

Meshtastic developers released firmware version 2.6.11 with critical fixes:

Key generation delay: Keys are now generated when users first set their LoRa region, preventing vendor-side duplication. Entropy improvements: Added multiple randomness sources to strengthen cryptographic initialization. Compromised key detection: Devices now warn users if known vulnerable keys are detected. An upcoming version (2.6.12) will automatically wipe compromised keys. For immediate protection, users should:

Update devices to firmware 2.6.11 or later. Perform a factory reset using Meshtastic’s CLI: meshtastic –factory-reset-device. Manually generate high-entropy keys via OpenSSL for critical deployments.

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here