Skip to content

v3.3.2-beta.2

Pre-release
Pre-release

Choose a tag to compare

@Mightyiest Mightyiest released this 19 Jun 14:55
c60ae15
  1. PBKDF2 + Fernet Cryptography Upgrade (crypto.py):

    • Upgraded banking details encryption to use AES (via cryptography.fernet.Fernet) with PBKDF2HMAC key derivation.
    • Built a backward-compatible legacy XOR decryption fallback for seamless transition of existing user profiles.
  2. Cross-Platform Linux Trash Fallback (config.py):

    • Implemented a native-Python fallback on Linux that moves deleted files to ~/.local/share/Trash/files/ and generates standard .trashinfo metadata files instead of executing permanent file deletions.
  3. Zip Slip Protection (backup_manager.py):

    • Secured the backup restoration workflow (import_settings) by validating all zip member paths before extraction to prevent path traversal vulnerabilities.
  4. Performance & Thread-Safety Improvements:

    • Optimized O(N²) directory scanning inside statistics.py and aggregator.py.
    • Debounced disk operations for TagManager configurations in tracker.py.
    • Enforced thread-safe initialization via double-checked locking for the TimeTamperDetector singleton in secure_time.py.