flexSecure Update

[tac0s]

In the first step in making this implant more accessible, we’re now preloading Free Memory, FIDO2, OTP, and NFC Sharing. GlobalPlatformPro is now optional for the most popular use cases : )

Thanks, @Pilgrimsmaster, for the suggestion!

Edit: With those apps (and the NFC Sharing being 32k) there is still >55% storage available.

[Pilgrimsmaster]

I feel like there should be some more Hype.

THIS ANNOUNCEMENT IS A BIG DEAL.

FLEXSECURE NOW COMES WITH PRELOADED APPLETS

This option means you can hit the ground running, buy it and use it immediately whilst you find the time and gain the knowledge of how to load more (if you even need to)

Heres the link

flexSecure Java Card Implant

AND ITS CURRENTLY ON SALE

~30% OFF

THANK YOU Tac0 and Amal, for making it happen.

[frail_rearranger]

I’m installing my pre update version tomorrow. I look forward to some hacking as I take my time to figure out how it all works. But those are nice defaults for new buyers to get started more quickly going forward, and gives me an idea of some of the apps I could look into first.

[Pilgrimsmaster]

I don’t want to bombard this thread, so I will just add a little more Context.

When the Apex was released, there were a number of people unsure if they wanted to trust a 3rd Party like Fidesmo and be tied to their environment.

• I think @StarGate01 had the idea of an untethered option - and the FlexSecure was born

• This new offering is a turn key alternative to the ApexFlex.

• @GrimEcho did great write up, for those wanting to learn how to write and remove apps

• My OK review of the FlexSecure

• Some key features of the FlexSecure

• Comes with install pack (needle, lube etc.)

• FlexSecure Applets and documentation
  GitHub

• The flexSecure is for advanced users, BUT also get up and running whilst you learn

• Custom needle or scalpel install

• 8mm x 28mm

• Easy placement in P1-P4

I WOULD STRONLY SUGGEST YOU GET YOURSELF A “FlexSecure Test Card” BEFORE FUCKING WITH ADDING MORE APPS TO YOUR FLEXSECURE IMPLANT

• A little birdy told me DT may stock test cards SOON ™

Cards ordered, awaiting external supplier, so who knows when they will arrive, but what you can do in the mean time is, Keep asking Tac0s and Amal “when is Soon™” because they love that

What you can actually do is, order a FlexSecure, get it installed and healed and use it “as is” until the test cards come in.

[GrimEcho]

What about adding the HMAC-SHA1 applet to the pre-installed list? For me at least, this applet is the #1 reason to get a JavaCard implant. It can be used to secure a KeePassXC database, giving you essentially unlimited implant-secured storage. Also, now that it can be provisioned via Apex Manager, setup is simple (for Android users).

[tac0s]

@GrimEcho

HMAC-SHA1

Configuration is required so it was omitted.

@GrimEcho

Also, now that it can be provisioned via Apex Manager, setup is simple (for Android users)

Wasn’t aware of this because I don’t use it.

Edit: We’ll look into it but presently I’m busy with another issue related to preloading the flexSecure.

[Pilgrimsmaster]

@Pilgrimsmaster

A little birdy told me DT may stock test cards SOON ™

J3R180 - Test Cards for flexSecure

We are now stocking these guys. Want to try an app before committing? Looking for backup for your flexSecure? Doing some JCOP development? One of these is a great choice. dngr.us/j3r180-test-card

SOON™ is now

[tac0s]

So, all flexSecures shipped after this announcement but before tomorrow (12/3) will need to have the fido2 app reinstalled after an attestation certificate is generated. Those shipped after today are good to go. Sorry for the hassle. Feel free to reach out if you run into issues.

[vivivi]

Great announcement and timing. Not to derail, but useful pertaining to cards … Is there a link to a suggested reader / writer for the flexSecure?

[tac0s]

I have been using an ACR-1252u for this project. It’s huge and reliable. I used to have a dl533r that I loved (but lost). Great range and small. It has been discontinued. I have their new PC/SC Zero on the way. It’s supposed to be usb-c

[vivivi]

Appreciate the quick reply!

For the ACR you’re using, it’s this, correct? ACS ACR1252U NFC Forum-Certified USB NFC Reader

I didn’t see something specific to JCOP and just a (slightly ominous) reference to “… and other NFC devices”. The Zero looks great, but import times during the holidays aren’t going on my list of things to deal with

[amal]

@vivivi

it’s this, correct?

yep

[Vpn]

This is great- honestly just got flashbacks to the initial 3-4h sitting confused before figuring out how to get FIDO2 up and working, LOL.

[Pilgrimsmaster]

Just a little roll call for a few people that may have been interested in an alternative to Fidesmo / Apex

The FlexSecure is your option and it comes preloaded with apps, and its still on sale.

Sorry it took so long for me to think about a shout out.

If your still out there

@yeka
@Devilclarke
@mfries18
@vepr
@DonFire
@jens
@Pyrotelekinetic

Apologies if i have missed somebody

Some more info

flexSecure Update

I feel like there should be some more Hype. THIS ANNOUNCEMENT IS A BIG DEAL. FLEXSECURE NOW COMES WITH PRELOADED APPLETS [17329075247144182761496612539072] This option means you can hit the ground running, buy it and use it immediately whilst you find the time and gain the knowledge of how to load more (if you even need to) Heres the link AND ITS CURRENTLY ON SALE ~30% OFF THANK YOU Tac0 and Amal, for making it happen.

Im loving mine, My apex is still my primary, but I love having a backup, and is great for overflow.

[Pyrotelekinetic]

Oh I’m definitely interested, and definitely broke.

Wish I could exchange my still-in-box apex.