Riffle 1.0.4

What's new

Riffle 1.0.4: free to share and package

• New license terms: you may now share Riffle and package it for package managers
  (Nix, the AUR, Flathub, distro repos) free of charge. Selling it or changing what
  it does is still not allowed. See LICENSE section 1A.
• Nix: install or run Riffle with nix run github:Naved124/riffle.

Install

Windows 10/11: download Riffle-Setup-1.0.4.exe and run it.
SmartScreen may warn because the installer isn't code-signed: choose More info → Run anyway.

Android 8.0+: download Riffle-1.0.4.apk, allow "Install unknown apps" for your
browser or file manager, and open it. Keep Android System WebView updated from the Play Store.

Already installed? The app finds new versions by itself and offers to update (Settings → About).

Linux: git clone the repo and run ./install.sh (see README).

SHA256SUMS.sig is an Ed25519 signature of SHA256SUMS; check it with the public key in
packaging/release-signing-key.pem (see SECURITY.md).

Riffle 1.0.3

What's new

Read Nix package version from pyproject.toml

Install

Windows 10/11: download Riffle-Setup-1.0.3.exe and run it.
SmartScreen may warn because the installer isn't code-signed: choose More info → Run anyway.

Android 8.0+: download Riffle-1.0.3.apk, allow "Install unknown apps" for your
browser or file manager, and open it. Keep Android System WebView updated from the Play Store.

Already installed? The app finds new versions by itself and offers to update (Settings → About).

Linux: git clone the repo and run ./install.sh (see README).

SHA256SUMS.sig is an Ed25519 signature of SHA256SUMS; check it with the public key in
packaging/release-signing-key.pem (see SECURITY.md).

Riffle 1.0.2

What's new

Riffle 1.0.2: Microsoft Store package

• Riffle is now built as an MSIX package too, ready for the Microsoft
  Store. Copies installed from the Store get their updates from the Store
  instead of checking GitHub.
• Installers and APKs work exactly as before.

Install

Windows 10/11: download Riffle-Setup-1.0.2.exe and run it.
SmartScreen may warn because the installer isn't code-signed: choose More info → Run anyway.

Android 8.0+: download Riffle-1.0.2.apk, allow "Install unknown apps" for your
browser or file manager, and open it. Keep Android System WebView updated from the Play Store.

Already installed? The app finds new versions by itself and offers to update (Settings → About).

Linux: git clone the repo and run ./install.sh (see README).

SHA256SUMS.sig is an Ed25519 signature of SHA256SUMS; check it with the public key in
packaging/release-signing-key.pem (see SECURITY.md).

Riffle 1.0.1

What's new

Riffle 1.0.1: security fixes

• Decks can no longer send any request to your device or local network
  (router, NAS, local services), directly or through the offline cache.
  Host names are checked by their real address, so a public-looking name
  that points at a private address is blocked too.
• A deck can only open a link or trigger a shortcut right after you click
  or press a key in it, and can't open pop-ups by itself.
• Restoring a stats backup only accepts the stats database's own columns.
• CSV stats export stops spreadsheet apps from treating card text as
  formulas.
• Linux updates download into a private temporary folder.

Install

Windows 10/11: download Riffle-Setup-1.0.1.exe and run it.
SmartScreen may warn because the installer isn't code-signed: choose More info → Run anyway.

Android 8.0+: download Riffle-1.0.1.apk, allow "Install unknown apps" for your
browser or file manager, and open it. Keep Android System WebView updated from the Play Store.

Already installed? The app finds new versions by itself and offers to update (Settings → About).

Linux: git clone the repo and run ./install.sh (see README).

SHA256SUMS.sig is an Ed25519 signature of SHA256SUMS; check it with the public key in
packaging/release-signing-key.pem (see SECURITY.md).