{"slug": "show-hn-verifiable-receipts-for-firmware-cve-reproduction", "title": "Show HN: Verifiable receipts for firmware CVE reproduction", "summary": "Prevot released a tool that reproduces firmware vulnerabilities deterministically against digital twins and issues a signed, re-verifiable receipt, demonstrated with CVE-2018-19988 on the D-Link DIR-868L rev B router, anchored in the Rekor transparency log at logIndex 2237342620. The receipt is signed by a machine identity via Sigstore/cosign and requires only Docker to verify, with no access to Prevot's infrastructure needed.", "body_md": "**Prevot** reproduces **public, known** firmware vulnerabilities **deterministically**\nagainst digital twins, and issues a **receipt**: a signed attestation that anyone can\n**re-verify** — without trusting us, without seeing the exploit.\n\nEvidence, not assertion.The security community is drowning in AI-generated reports thatclaimvulnerabilities without proving them. A Prevot receipt is the opposite: a cryptographic proof, re-verifiable by third parties, that the reproduction actually happened.\n\nThis repo ships a real receipt — **CVE-2018-19988**, root command injection on the D-Link\nDIR-868L rev B router — signed and anchored in the public transparency log **Rekor**\n([logIndex 2237342620](https://search.sigstore.dev/?logIndex=2237342620)).\n\nYou only need **Docker**:\n\n```\ncd receipts/examples/dir868l-hnap-19988\ndocker run --rm -v \"$PWD:/w\" -w /w \\\n  gcr.io/projectsigstore/cosign:v2.4.1@sha256:b03690aa52bfe94054187142fba24dc54137650682810633901767d8a3e15b31 \\\n  verify-blob --new-bundle-format --bundle statement.cosign.bundle \\\n  --certificate-identity 616124453047-compute@developer.gserviceaccount.com \\\n  --certificate-oidc-issuer https://accounts.google.com \\\n  statement.json\n# → Verified OK\n```\n\nStep-by-step, including the tamper test: [ guides/verify-a-receipt-in-5-min.md](/prevotai/colmena/blob/main/guides/verify-a-receipt-in-5-min.md).\n\nIt also states what it does **not** know:\n\n**Medium grade, declared.** It reproduces deterministically (2/2)**and** discriminates the injection (we proved the effect is caused by the payload, not by the request). It lacks the patched-version control — that firmware is encrypted — so we do**not** call it high grade.**It corrects a public data point.** The CVE is published as exploitable*without credentials*(`PR:N`\n\n); on the real firmware it requires authentication. We declare it`PR:L`\n\n. Reproduction against the real artifact overrides the metadata.\n\nA verifier that cannot tell its own grades of certainty apart is not a verifier.\n\n| Piece | What it is |\n|---|---|\n`receipts/schema/` |\nthe receipt schema (in-toto attestation, evidence by `sha256` ) |\n`receipts/examples/dir868l-hnap-19988/` |\nthe signed receipt + its evidence |\n`receipts/README.md` |\nanatomy of the receipt |\n`receipts/validate_receipt.py` |\noptional schema + content-addressing check |\n`guides/` |\nthe 5-minute verification guide |\n\nSigning is **keyless** (Sigstore/cosign): a short-lived certificate (Fulcio) bound to an\nidentity, anchored in Rekor. No private keys to manage. The bundle is self-contained: it\nverifies with just this repo and Docker — **no access to Prevot's infrastructure**.\n\nOn the signer.This receipt is signed by amachine identity(the service account that runs the verifier), not a person — honest, since the receipt is produced by automation. A canonical human signature can be added later; Rekor allows multiple signatures over the same receipt.\n\nAGPL-3.0-or-later. (See `LICENSE`\n\n.)\n\n**Signal S1** — first public proof. This is a *first brick* of a cyber-physical trust seal\nfor firmware under the European regulatory framework (CRA/RED).", "url": "https://wpnews.pro/news/show-hn-verifiable-receipts-for-firmware-cve-reproduction", "canonical_source": "https://github.com/prevotai/colmena", "published_at": "2026-07-28 20:53:58+00:00", "updated_at": "2026-07-28 21:23:08.614742+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy", "developer-tools"], "entities": ["Prevot", "D-Link DIR-868L rev B", "CVE-2018-19988", "Rekor", "Sigstore", "cosign", "Fulcio", "Docker"], "alternates": {"html": "https://wpnews.pro/news/show-hn-verifiable-receipts-for-firmware-cve-reproduction", "markdown": "https://wpnews.pro/news/show-hn-verifiable-receipts-for-firmware-cve-reproduction.md", "text": "https://wpnews.pro/news/show-hn-verifiable-receipts-for-firmware-cve-reproduction.txt", "jsonld": "https://wpnews.pro/news/show-hn-verifiable-receipts-for-firmware-cve-reproduction.jsonld"}}