jks

From the CHANGE_LOG file:

Okay, I think the new admin password reset scheme is working well. See image below.

The option will appear only if you connect from your local network. Not from an Internet connection (e.g. not from a Kiwi-2 serial number based proxy connection: 2xxxx.proxy.kiwisdr.com/admin). Use my.kiwisdr.com to find the local IP address link to your Kiwi's admin page (e.g. 192.168.1.101:8073/admin).

You must also provide the Kiwi's serial number. This should be easy since it's written on the physical hardware (Kiwi-1: written in the white box on the Kiwi PCB, Kiwi-2: written on a label on bottom of case).

As a further security measure the option will only appear for the first 5 minutes after the Kiwi software starts (power-up or software restart).

So the restrictions should guarantee the Kiwi is in your immediate physical control. So no good for your remote Kiwi located 300 km away on a mountain top.

If anyone can think of a flaw in this reasoning please let me know ASAP.

Everything is carefully validated on the server-side. So anyone hacking Javascript on the browser shouldn't be able to exploit the scheme.

I thought of a way to add an admin password reset function. It has to be implemented very, very carefully so as not to cause security problems. I'll try and have this ready for the next release.

Same as with Kiwi-1. The number of simultaneous users varies depending on the FPGA configuration selected on the admin page, "mode" tab.

But there are compromises as described in the text on that page. In 8 channel mode only 2 can have a waterfall. In 20.25 kHz wide audio bandwidth mode there can only be 3 channels etc.

From the CHANGE_LOG file: