Skip to main content
Firmware ships as a signed .eff bundle applied over A/B slots with automatic rollback. See Firmware Updates for how to check and apply one.
​
v00.09.20
Bluetooth
  • A command that arrives in fragments and then stops no longer holds the link. The incomplete command is discarded on its own, and the commands queued behind it are still answered.
  • Commands sent back to back at ordinary connection intervals are handled without the link stalling, so an app that polls the device stays responsive.
​
v00.09.19
Recording capacity
  • Set the disk-full reserve to 512 MiB, enough to hold one staged update plus log headroom.
Mass storage
  • The M1 can present its recordings as a read-only drive over USB, so a laptop can browse and copy them without any Efference tooling. Deleting a file from the drive deletes the recording on the device.
Bluetooth
  • A phone that has paired once stays paired across disconnect and reboot.
  • Replies no longer go missing after a phone backgrounds, force-quits, or drops out of range.
  • forget-ble-bonds clears every pairing on the device. Each phone must also forget the device on its own side.
Uploads
  • Uploads accept a resumable-session URI. An interrupted transfer continues from the byte the server holds instead of restarting, in 32 MiB chunks.
Reliability
  • Improved WiFi reliability.
​
v00.09.18
  • Added admin password support.
  • You can now supply your own AES-256 key.
  • Reworked the MCAP to MP4 tool.
​
v00.09.17
  • Per-unit hostname (M1-<serial>) is now set before the Bluetooth daemon starts, so devices are distinguishable over BLE.
  • The SDK endpoint reports one serial consistently across both the USB descriptor and the control plane.
  • Boot-resilience work: the boot gate now quiesces filesystems before a reset and records the first bad boot, so field data samples early boots rather than only late ones.
​
v00.09.16
  • Wi-Fi status no longer reports an eternal “connecting” after a link drop.
  • Bluetooth LE tears down live streams when the controlling app dies.
  • /tmp/resolv.conf is exempt from temporary-file aging, fixing DNS loss after the boot-time clock jump.
​
v00.09.15
First image carrying the at-rest encryption and USB access-control work. Everything before this ran from /userdata candidates deployed over adb; none of it had been in a flashed root filesystem until now.Encryption
  • Device-generated encryption key lifecycle. CreateEncryptionKey generates and returns the key once; DeleteEncryptionKey requires the key’s id and reports what it destroyed.
  • A factory reset now destroys the key, closing the path where a reset dropped the password to default and the key could then be read out.
  • Container headers carry the algorithm id and key id.
Access control
  • USB control-plane lock, gated by the same password as Bluetooth LE.
​
v00.09.14
Updates no longer need a URL
  • ef-cli update asks the update-check service what this device should run and passes the result with the download request.
  • Checking for an update no longer downloads the bundle to find out — one request instead of a ~390 MB transfer.
  • The device holds no update server of its own. A one-off URL can no longer become a device’s permanent update source, which previously left devices pointed at a stale directory after a wired push.
  • The URL arrives at a single-use path, validated against a scheme allowlist, read once and removed.
​
v00.09.10
  • Wi-Fi and boot fixes.
  • The build now includes the Bluetooth LE endpoint.
​
v00.09.09
Fault detection and recovery
  • A hung or stalled capture mid-recording was previously undetectable: the device reported healthy while writing nothing. A liveness classifier now latches a SAFE state with a reason.
  • Anomalies are classified: write errors and crashes latch; disk-full and capture-stopped return to idle with the cause surfaced.
  • Replaced the event-counting fault budget with a duration test.
  • Fixed the boot gate re-latching a device whose capture was merely slow to start. A latched unit now recovers on power cycle instead of staying stuck.
  • Added per-boot and per-lifetime event tallies for fleet triage.
Updates
  • Real download percentage, serial trace, and coherent status across the update.
​
v00.09.03
First published OTA bundle for v0.3+ boards. Signed with the deployed update key and encrypted with the deployed content key.