Skip to content

VRKA Android 4.0.2

Choose a tag to compare

View all tags
@MaverickRox MaverickRox released this 07 Sep 07:48
· 32 commits to main since this release
v4.0.2
16d4335

VRKA Android 4.0.2 — Release Hardening Pass

VRKA Android 4.0.2 delivers comprehensive updater authenticity hardening, dependency security alignment, browser session isolation, and test suite expansion.

Key Changes & Security Hardening

  • Cryptographically Authenticated Updates: Embedded upstream yt-dlp release trust anchor (AC0CBBE6848D6A873464AF4E57CF65933B5A7581) and integrated standard Bouncy Castle OpenPGP detached signature verification (SHA2-256SUMS.sig over SHA2-256SUMS). Updates are fetched strictly over HTTPS with validated GitHub release redirects, transactional staging, post-update execution validation, and automatic rollback on failure.
  • Truthful Bundled Component Status: Updated component management semantics to reflect uBlock Origin (v1.74.0) and Puemos HLS Detection (v1.0.0) truthfully as immutable APK assets updated exclusively via application releases.
  • Browser Session Storage Clearing: Added dedicated session and storage clearing for the GeckoView fallback runtime under Settings ("Browser Subsystems") utilizing exact StorageController.ClearFlags (COOKIES, DOM_STORAGES, AUTH_SESSIONS, SITE_DATA, ALL_CACHES) and clearing in-memory bridge candidates without touching application history or preferences.
  • Dependency Vulnerability Alignment: Resolved Bouncy Castle bcprov-jdk18on:1.85.2 alongside bcpg-jdk18on:1.85 and audited all transitive runtime dependencies for security and R8 dead-code elimination.
  • Deterministic Unit Test Expansion: Added 32 new offline unit tests (145 tests total, 0 failures) thoroughly validating cryptographic signature checking, tampered manifest rejection, checksum mismatches, redirect policies, rollback mechanics, and JobStore persistence and queue recovery.
  • Canonical Signing Lineage: Signed using canonical release certificate 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa to guarantee seamless in-place updates.

Release Artifacts & Checksums

  • Package: VRKA-Android-v4.0.2.apk
  • SHA-256 Checksum: c8587dafb5ad262cb7e49449b7be16409642a5fd5f615584c1f0ca2bed42dc07
  • Signing Fingerprint (SHA-256): 9befdbf4fb00acedb72f866ce4016944c95ea99448e205768383b310ca11e1fa
Assets 4
Loading