jks

I should also mention in connection with the voltage drop post above. I knew about the problem many years ago. One day I made up some short cables out of some random "speaker wire" I had where it wasn't immediately obvious what the wire gauge was. I was astonished when the brownout problem happened when running the admin sd card backup function! (it is known that sd card writes take a lot of additional current).

I didn't believe it until I put a scope on the power connector at the Kiwi set to trigger at lower than 4.8V... And it triggered! lol

I measured the wire gauge and it was 24 AWG or something. I used one of those online voltage drop calculators and it pretty much confirmed the problem for the length of wire I was using (given a guess at the current spike amount -- with some effort I could have measured that too).

SDR protection circuit

SDR MW filter

From the CHANGE_LOG file:

Okay, I think the new admin password reset scheme is working well. See image below.

The option will appear only if you connect from your local network. Not from an Internet connection (e.g. not from a Kiwi-2 serial number based proxy connection: 2xxxx.proxy.kiwisdr.com/admin). Use my.kiwisdr.com to find the local IP address link to your Kiwi's admin page (e.g. 192.168.1.101:8073/admin).

You must also provide the Kiwi's serial number. This should be easy since it's written on the physical hardware (Kiwi-1: written in the white box on the Kiwi PCB, Kiwi-2: written on a label on bottom of case).

As a further security measure the option will only appear for the first 5 minutes after the Kiwi software starts (power-up or software restart).

So the restrictions should guarantee the Kiwi is in your immediate physical control. So no good for your remote Kiwi located 300 km away on a mountain top.

If anyone can think of a flaw in this reasoning please let me know ASAP.

Everything is carefully validated on the server-side. So anyone hacking Javascript on the browser shouldn't be able to exploit the scheme.

I thought of a way to add an admin password reset function. It has to be implemented very, very carefully so as not to cause security problems. I'll try and have this ready for the next release.