We have discovered and fixed an issue in NervesHub. All people running it should update. Read the CVE and security advisory to understand your exposure.
Please reach out if you have any questions.
The update v2.4.0 also contains a bunch of other good stuff.
github.com/nerves-hub/n...
#elixirlang
Please reach out if you have any questions.
The update v2.4.0 also contains a bunch of other good stuff.
github.com/nerves-hub/n...
#elixirlang
Release v2.4.0 · nerves-hub/nerves_hub_web
This release comes with the discovery of CVE-2026-28806 (read advisory). During routine development we noticed lacking authorization checks for device bulk actions. Investigating it we found that i...
github.com
March 10, 2026 at 8:04 AM
We have discovered and fixed an issue in NervesHub. All people running it should update. Read the CVE and security advisory to understand your exposure.
Please reach out if you have any questions.
The update v2.4.0 also contains a bunch of other good stuff.
github.com/nerves-hub/n...
#elixirlang
Please reach out if you have any questions.
The update v2.4.0 also contains a bunch of other good stuff.
github.com/nerves-hub/n...
#elixirlang
A firmware is never small enough.
But we're getting pretty close. We've been improving deltas to remove unnecessary resources when delivering firmware with NervesHub. Available on a NervesCloud near you.
#elixirlang #nerves
But we're getting pretty close. We've been improving deltas to remove unnecessary resources when delivering firmware with NervesHub. Available on a NervesCloud near you.
#elixirlang #nerves
February 23, 2026 at 3:44 PM
A firmware is never small enough.
But we're getting pretty close. We've been improving deltas to remove unnecessary resources when delivering firmware with NervesHub. Available on a NervesCloud near you.
#elixirlang #nerves
But we're getting pretty close. We've been improving deltas to remove unnecessary resources when delivering firmware with NervesHub. Available on a NervesCloud near you.
#elixirlang #nerves
So glad to have this out. The new UI now covers the whole of NervesHub.
youtu.be/cmnsTf6fKls
Now we use the full space of your display where it makes sense. Navigation is nicer. Lots more to improve but should be a good step up. And pinned devices is BACK.
#elixirlang #nerves
youtu.be/cmnsTf6fKls
Now we use the full space of your display where it makes sense. Navigation is nicer. Lots more to improve but should be a good step up. And pinned devices is BACK.
#elixirlang #nerves
- YouTube
Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
youtu.be
February 15, 2026 at 9:01 AM
So glad to have this out. The new UI now covers the whole of NervesHub.
youtu.be/cmnsTf6fKls
Now we use the full space of your display where it makes sense. Navigation is nicer. Lots more to improve but should be a good step up. And pinned devices is BACK.
#elixirlang #nerves
youtu.be/cmnsTf6fKls
Now we use the full space of your display where it makes sense. Navigation is nicer. Lots more to improve but should be a good step up. And pinned devices is BACK.
#elixirlang #nerves
CVE-2025-64097 - NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force
CVE ID : CVE-2025-64097
Published : Jan. 22, 2026, 3:16 p.m. | 19 minutes ago
Description : NervesHub is a web service that allows users to manage over-the-air (OT...
CVE ID : CVE-2025-64097
Published : Jan. 22, 2026, 3:16 p.m. | 19 minutes ago
Description : NervesHub is a web service that allows users to manage over-the-air (OT...
CVE-2025-64097 - NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force
NervesHub is a web service that allows users to manage over-the-air (OTA) firmware updates of devices in the field. A vulnerability present starting in version 1.0.0 and prior to version 2.3.0 allowed attackers to brute-force user API tokens due to the predictable format of previously issued tokens. Tokens included user-identifiable …
cvefeed.io
January 22, 2026 at 4:01 PM
CVE-2025-64097 - NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force
CVE ID : CVE-2025-64097
Published : Jan. 22, 2026, 3:16 p.m. | 19 minutes ago
Description : NervesHub is a web service that allows users to manage over-the-air (OT...
CVE ID : CVE-2025-64097
Published : Jan. 22, 2026, 3:16 p.m. | 19 minutes ago
Description : NervesHub is a web service that allows users to manage over-the-air (OT...
A library for generating firmware deltas for use with fwup. Fwup does a lot of things but it doesn't provide a reference implementation for how deltas should be built. It was extracted from NervesHub. Should make testing delta updates on devices easier.
hexdocs.pm/fwup_delta/r...
#elixirlang
hexdocs.pm/fwup_delta/r...
#elixirlang
FwupDelta — Fwup delta v0.1.0
A library for generating fwup delta updates from Elixir. Fwup itself does not provide a way to generate delta updates.
hexdocs.pm
August 25, 2025 at 12:01 PM
A library for generating firmware deltas for use with fwup. Fwup does a lot of things but it doesn't provide a reference implementation for how deltas should be built. It was extracted from NervesHub. Should make testing delta updates on devices easier.
hexdocs.pm/fwup_delta/r...
#elixirlang
hexdocs.pm/fwup_delta/r...
#elixirlang
A library I made while improving the firmware delta updates for NervesHub/NervesCloud. Confuse can parse libconfuse style config files and also has some niceties for understanding the specific fwup usage. Lots of features to add still but useful.
hexdocs.pm/confuse/read...
#elixirlang
hexdocs.pm/confuse/read...
#elixirlang
Confuse — Confuse v0.2.0
An all-Elixir parser for libconfuse style config files.
hexdocs.pm
August 23, 2025 at 11:01 AM
A library I made while improving the firmware delta updates for NervesHub/NervesCloud. Confuse can parse libconfuse style config files and also has some niceties for understanding the specific fwup usage. Lots of features to add still but useful.
hexdocs.pm/confuse/read...
#elixirlang
hexdocs.pm/confuse/read...
#elixirlang
Beyond that if you hook it up to NervesHub/NervesCloud you can do the console from there. You can also just SSH into them like normal.
August 7, 2025 at 11:31 AM
Beyond that if you hook it up to NervesHub/NervesCloud you can do the console from there. You can also just SSH into them like normal.
August 1, 2025 at 11:14 AM
How is your day going?
I just got a virtual Nerves device connected to NervesHub. The guest is a single puny virtual core. The host is a 192 core Ampere One. This is a very fun collab for one of our conference sponsors.
We now have one machine...
#elixirlang
I just got a virtual Nerves device connected to NervesHub. The guest is a single puny virtual core. The host is a 192 core Ampere One. This is a very fun collab for one of our conference sponsors.
We now have one machine...
#elixirlang
July 29, 2025 at 2:38 PM
How is your day going?
I just got a virtual Nerves device connected to NervesHub. The guest is a single puny virtual core. The host is a 192 core Ampere One. This is a very fun collab for one of our conference sponsors.
We now have one machine...
#elixirlang
I just got a virtual Nerves device connected to NervesHub. The guest is a single puny virtual core. The host is a 192 core Ampere One. This is a very fun collab for one of our conference sponsors.
We now have one machine...
#elixirlang
NervesHub delta updates are now completely straightforward. Binary diffing, feature detection and more.
All the details:
elixirforum.com/t/nerveshub-...
You can try it on nervescloud.com
#elixirlang
All the details:
elixirforum.com/t/nerveshub-...
You can try it on nervescloud.com
#elixirlang
NervesHub - Delta updates
Nerves, fwup and NervesHub have had delta updates as a feature on the checklist for a long time. A delta update being essentially a patch you send to update the binary data on a device instead of…
elixirforum.com
July 18, 2025 at 8:01 AM
NervesHub delta updates are now completely straightforward. Binary diffing, feature detection and more.
All the details:
elixirforum.com/t/nerveshub-...
You can try it on nervescloud.com
#elixirlang
All the details:
elixirforum.com/t/nerveshub-...
You can try it on nervescloud.com
#elixirlang
I've been working on improving the rudimentary support for firmware update deltas that has existed in NervesHub for a long time. There are some PRs still in flight but the support is becoming less rudimentary by the day :)
underjord.io/delta-suppor...
#elixirlang #embedded
underjord.io/delta-suppor...
#elixirlang #embedded
Delta support - A tale of two firmware versions
Binary deltas of firmware via fwup has been a supported feature for a while. There has also been a kind of rudimentary support for it in NervesHub. We can now remove the word rudimentary. There is…
underjord.io
July 7, 2025 at 11:01 AM
I've been working on improving the rudimentary support for firmware update deltas that has existed in NervesHub for a long time. There are some PRs still in flight but the support is becoming less rudimentary by the day :)
underjord.io/delta-suppor...
#elixirlang #embedded
underjord.io/delta-suppor...
#elixirlang #embedded
CodeBEAM Stockholm looks great! I can't wait to catch up with all of the videos between the accelerated edge ML on RPi5/Nerves, energy-harvested GRiSP, and NervesHub presentations.
June 2, 2025 at 12:34 PM
CodeBEAM Stockholm looks great! I can't wait to catch up with all of the videos between the accelerated edge ML on RPi5/Nerves, energy-harvested GRiSP, and NervesHub presentations.
🔗 @lawik.bsky.social showcasing NervesHub as the ultimate Elixir ecosystem example! Phoenix + LiveView + Oban + thousands of WebSockets + Erlang clusters = production magic ✨ Perfect for understanding how it all ties together! #CodeBEAM #ElixirLang #NervesHub
June 2, 2025 at 10:47 AM
🔗 @lawik.bsky.social showcasing NervesHub as the ultimate Elixir ecosystem example! Phoenix + LiveView + Oban + thousands of WebSockets + Erlang clusters = production magic ✨ Perfect for understanding how it all ties together! #CodeBEAM #ElixirLang #NervesHub
🚀 Tying it all together – @lawik.bsky.social shares insights from NervesHub, a production-grade Elixir app built with Phoenix, LiveView, Oban & more. Save your spot at Code BEAM Stockholm 2025. codebeamstockholm.com/talks/Tying-...
May 14, 2025 at 11:18 AM
🚀 Tying it all together – @lawik.bsky.social shares insights from NervesHub, a production-grade Elixir app built with Phoenix, LiveView, Oban & more. Save your spot at Code BEAM Stockholm 2025. codebeamstockholm.com/talks/Tying-...
Reminder: Soleil is an open-source HAT for Raspberry Pi which adds low-power capability. Power from a battery, re-charge with USB-C or solar, low-power sleep mode. ATECC608A for connection with NervesHub.
I'll be bringing some boards to ElixirConf this week if anyone wants to see them in person!
I'll be bringing some boards to ElixirConf this week if anyone wants to see them in person!
Soleil
Soleil is a Nerves-first power management board for the Raspberry Pi, offering efficient low-power sleep modes, solar charging support, and flexible wake-up triggers. Perfect for projects that need re
protolux.io
May 12, 2025 at 12:34 PM
Reminder: Soleil is an open-source HAT for Raspberry Pi which adds low-power capability. Power from a battery, re-charge with USB-C or solar, low-power sleep mode. ATECC608A for connection with NervesHub.
I'll be bringing some boards to ElixirConf this week if anyone wants to see them in person!
I'll be bringing some boards to ElixirConf this week if anyone wants to see them in person!
My co-founder Josh presented on the Nerves Meetup a while back and showed the work we do on NervesHub. He also took questions and addressed a lot of interesting parts:
https://youtu.be/_pyR8IVBZDI
What firmware update mechanism would your embedde system need from NervesHub?
#elixirlang
https://youtu.be/_pyR8IVBZDI
What firmware update mechanism would your embedde system need from NervesHub?
#elixirlang
The New Era of NervesHub
Josh Kalderimis, co-founder of NervesCloud and a NervesHub core committer, gives a deep dive into many of the new features and underlying magic that makes Ne...
youtu.be
May 8, 2025 at 9:59 AM
My co-founder Josh presented on the Nerves Meetup a while back and showed the work we do on NervesHub. He also took questions and addressed a lot of interesting parts:
https://youtu.be/_pyR8IVBZDI
What firmware update mechanism would your embedde system need from NervesHub?
#elixirlang
https://youtu.be/_pyR8IVBZDI
What firmware update mechanism would your embedde system need from NervesHub?
#elixirlang
I am quite happy with how my Nerves Community Fleet talk came out. It includes my favorite variant of how to do slides so far. It shows a lot of what is cool about NervesHub and Nerves. But also just rad things about Elixir and the community.
https://youtu.be/yjBFlY1zqDA
#elixirlang
https://youtu.be/yjBFlY1zqDA
#elixirlang
The Nerves Community Fleet - Lars Wikman | Code BEAM Europe 2024
✨ This talk was recorded at Code BEAM Europe 2024. If you're curious about our upcoming event, check https://codebebeameurope.com ✨Underjord is very excited ...
youtu.be
May 6, 2025 at 9:59 AM
I am quite happy with how my Nerves Community Fleet talk came out. It includes my favorite variant of how to do slides so far. It shows a lot of what is cool about NervesHub and Nerves. But also just rad things about Elixir and the community.
https://youtu.be/yjBFlY1zqDA
#elixirlang
https://youtu.be/yjBFlY1zqDA
#elixirlang
Neither of them want to make noise or go on stage. It is on me to talk about what they've done.
I've yet to full shepherd Elliot's work on separating out the WPA Supplicant in VintageNet over the finish-line. But it enables good stuff.
Elin has a lot of commits in NervesHub.
I've yet to full shepherd Elliot's work on separating out the WPA Supplicant in VintageNet over the finish-line. But it enables good stuff.
Elin has a lot of commits in NervesHub.
May 6, 2025 at 7:07 AM
Neither of them want to make noise or go on stage. It is on me to talk about what they've done.
I've yet to full shepherd Elliot's work on separating out the WPA Supplicant in VintageNet over the finish-line. But it enables good stuff.
Elin has a lot of commits in NervesHub.
I've yet to full shepherd Elliot's work on separating out the WPA Supplicant in VintageNet over the finish-line. But it enables good stuff.
Elin has a lot of commits in NervesHub.
Did you know about the new and improved NervesHub CLI. If you work with Nerves devices it can be a lot easier to automate and just operate your firmware updates if you grab and use the CLI tool.
https://elixirforum.com/t/the-improved-nerveshub-cli/70711
#elixirlang
https://elixirforum.com/t/the-improved-nerveshub-cli/70711
#elixirlang
The improved NervesHub CLI
NervesHub has had a CLI for a long time. It is called nerves_hub_cli and for the longest time you’d add it as a dependency. But only once you found out it existed, which took me a minute… A while back it was changed to be an escript that you could get separately from your mix project. That was a big improvement, thanks to @gus. And thanks to various efforts by Gus and @joshknz we now have it wrapped up in a Burrito, vastly improved experience throughout the CLI and it can even be installed via...
elixirforum.com
May 5, 2025 at 9:59 AM
Did you know about the new and improved NervesHub CLI. If you work with Nerves devices it can be a lot easier to automate and just operate your firmware updates if you grab and use the CLI tool.
https://elixirforum.com/t/the-improved-nerveshub-cli/70711
#elixirlang
https://elixirforum.com/t/the-improved-nerveshub-cli/70711
#elixirlang
📺 The Nerves Meetup recording on The New Era of NervesHub by Josh Kalderimis is now available!
youtu.be/_pyR8IVBZDI
#elixir #ElixirLang #NervesHub #NervesProject #firmware #embedded #iot #OverTheAir #OTA
youtu.be/_pyR8IVBZDI
#elixir #ElixirLang #NervesHub #NervesProject #firmware #embedded #iot #OverTheAir #OTA
The New Era of NervesHub
Josh Kalderimis, co-founder of NervesCloud and a NervesHub core committer, gives a deep dive into many of the new features and underlying magic that makes Ne...
youtu.be
March 31, 2025 at 6:29 PM
📺 The Nerves Meetup recording on The New Era of NervesHub by Josh Kalderimis is now available!
youtu.be/_pyR8IVBZDI
#elixir #ElixirLang #NervesHub #NervesProject #firmware #embedded #iot #OverTheAir #OTA
youtu.be/_pyR8IVBZDI
#elixir #ElixirLang #NervesHub #NervesProject #firmware #embedded #iot #OverTheAir #OTA
More specs coming soon, but this board will be fully nerves compatible and support OTA updates - including secure NervesHub support (SSL certs can be stored on hardware encryption chip)
March 29, 2025 at 3:18 PM
More specs coming soon, but this board will be fully nerves compatible and support OTA updates - including secure NervesHub support (SSL certs can be stored on hardware encryption chip)
It's been about a week! Checking back in:
28 waitlist sign ups
15 responses
37 boards pre-ordered (!!!)
I'm sending out the next project update via email tomorrow - some really neat developments on the integration with NervesHub thanks to @j2h.bsky.social!
28 waitlist sign ups
15 responses
37 boards pre-ordered (!!!)
I'm sending out the next project update via email tomorrow - some really neat developments on the integration with NervesHub thanks to @j2h.bsky.social!
March 20, 2025 at 1:39 PM
It's been about a week! Checking back in:
28 waitlist sign ups
15 responses
37 boards pre-ordered (!!!)
I'm sending out the next project update via email tomorrow - some really neat developments on the integration with NervesHub thanks to @j2h.bsky.social!
28 waitlist sign ups
15 responses
37 boards pre-ordered (!!!)
I'm sending out the next project update via email tomorrow - some really neat developments on the integration with NervesHub thanks to @j2h.bsky.social!
Looking forward to talking about how we tie things together in NervesHub, it is both a fairly typical Phoenix app and has some really important unusual bits. Expect Phoenix, Ecto, Oban, >100.000 concurrent Channels and a look at how to keep things simple and maintainable. Maybe some adventure?
March 13, 2025 at 7:14 AM
Looking forward to talking about how we tie things together in NervesHub, it is both a fairly typical Phoenix app and has some really important unusual bits. Expect Phoenix, Ecto, Oban, >100.000 concurrent Channels and a look at how to keep things simple and maintainable. Maybe some adventure?