Skip to content

DA Privacy Kit v0.1.0b2

Choose a tag to compare

View all tags
@DigitalArchon DigitalArchon released this 16 Oct 12:16
· 112 commits to main since this release
v0.1.0b2
e9c62ec

A bug-fix release of DA Privacy Kit's public beta, with fixes for problems reported against 0.1.0b1. Thank you
for the reports.

Warning

Still a public beta: expect bugs. It is best used to scan, to learn about your own system and to try its
tools: don't rely on it yet for critical privacy matters. Several fixes and tools run commands with
administrator rights, so keep backups. It is no replacement for Tails or
Qubes OS, and it isn't antivirus.

What's fixed

  • Mullvad VPN no longer shows as "without DNS leak protection or kill switch". Mullvad's app has no
    setting for either: while it is connected, its firewall blocks all traffic outside the tunnel and every DNS
    lookup except to the servers it set. The check now knows this. With Mullvad VPN connected it passes and says
    why, and it shows whether Lockdown mode is on. Lockdown mode is the app's one related setting, and it also
    blocks the internet when you disconnect or quit. The How to… and Guide… steps for the VPN, DNS-leak and IPv6
    tests no longer tell you to turn on a switch that isn't there. If a test still finds a leak, they say what to
    look at (split tunnelling, a custom DNS server). Please report it if your Mullvad app shows something
    different.
  • VPN DNS leaks are judged by what this computer actually uses. The check read systemd-resolved's
    settings even on systems where programs don't ask systemd-resolved. It now checks the servers in
    /etc/resolv.conf there instead.
  • Clearing VLC's and Haruna's history no longer looks like deleting their settings. These fixes only
    remove the history lines from the settings files, but the confirmation said the files were "deleted
    permanently". Each step now says that only those lines change, and lists the settings it empties without
    showing their contents.
    • VLC's fix also emptied matching lines outside its recent-media list. It now changes only that list.
    • Haruna's database is deleted only while it holds nothing but its recent files and resume points.
      Otherwise it is left alone, and the fix says so.
  • Deleting leftovers now shows where they are. Before any files are deleted, the step lists them, or
    their folders with a count when there are many, so you can look first. Before, the editor backup files in
    your folders showed only as "N files in ~". VS Code's local history folders have hashed names, so each is
    shown with the file whose earlier versions it holds.
  • Discord was reported as "made for 0.0". The version Discord's checks were made for was a placeholder,
    so every release from 1.0 on was reported as a newer major version. It is now recorded as 1.0.161.

Install

Download DAPrivacyKit-0.1.0b2-x86_64.AppImage, make it executable and run it:

chmod +x DAPrivacyKit-0.1.0b2-x86_64.AppImage
./DAPrivacyKit-0.1.0b2-x86_64.AppImage
./DAPrivacyKit-0.1.0b2-x86_64.AppImage --install-helper    # once, recommended: the administrator helper

Coming from 0.1.0b1, replace the old file. History, accepted findings and the last report are kept in your home
folder, not in the AppImage, so they carry over. The administrator helper hasn't changed, so an installed one
keeps working as it is.

It needs x86-64 Linux with WebKitGTK 4.1 for its window:

Distribution
Ubuntu, Mint, Debian sudo apt install gir1.2-webkit2-4.1
Fedora sudo dnf install webkit2gtk4.1
Arch, CachyOS sudo pacman -S webkit2gtk-4.1

The README says what it is; the
manual covers the rest.

Verify

The release is signed with the Digital Archon release key,
docs/release-key.asc, whose
fingerprint is:

3AA5 C061 33BB C05A 4151  EA41 5B59 48EB 785E D3AF

If you have 0.1.0b1, open Tools → Verify a download and choose the new AppImage: with its .asc beside
it, it should say Verified: made by Digital Archon. By hand, with the AppImage, its .asc and its .sha256
in one folder:

curl -sSfO https://raw.githubusercontent.com/DigitalArchon/DAPrivacyKit/v0.1.0b2/docs/release-key.asc
gpg --import release-key.asc
gpg --verify DAPrivacyKit-0.1.0b2-x86_64.AppImage.asc DAPrivacyKit-0.1.0b2-x86_64.AppImage
sha256sum -c DAPrivacyKit-0.1.0b2-x86_64.AppImage.sha256

gpg should say Good signature from "Digital Archon Release Signing", with the fingerprint above (its
warning that the key isn't certified is normal).

SHA-256: 2cb6be6f0b5154b577e1744c2c957a9ba3b79b5f1968114cb4f9ec7c89cf4bbe

The AppImage is reproducible: packaging/verify-release.sh v0.1.0b2 in a clone (rootless Podman) builds the
tag and compares the result with this release, byte for byte. See
packaging/README.md.

Known limitations

Unchanged since 0.1.0b1: made for and tested on Cinnamon (Linux Mint) and KDE Plasma 6 only; some checks need
administrator access; deleting is not erasing; x86-64 only. The
0.1.0b1 notes have the full list.

Feedback

Bugs and ideas: issues, with a redacted report if it
helps (Export… with Redact ticked; read it first, since an issue is public). Security problems: please
report privately as described in
SECURITY.md.

Licensed GPL-3.0-or-later.

Assets 6
Loading