Skip to content

Plico 0.2.4

Choose a tag to compare

@Turtlecute33 Turtlecute33 released this 26 Oct 14:43
· 61 commits to main since this release

Hardening only: memory tagging, no Play Services emoji font, and checked dependencies.

Requires Android 15 or later (arm64). An update from 0.2.3 keeps your accounts and mail.

Privacy and security

  • Memory tagging (MTE) is on. Plico reads untrusted data from the network in its own process (sender logos, part of the message view). On a phone with MTE (GrapheneOS, or a Pixel 8 or later with the developer option or Advanced Protection), a bad memory access stops the app at once.
  • Plico no longer asks for a downloadable emoji font. On a phone with Google Play Services, that request went to the Play Services font provider. Plico uses the system emoji font.
  • The build checks the SHA-256 of each dependency and of the Gradle distribution.
File Use
Plico-0.2.4.apk Release build, signed.

SHA-256:

  • Plico-0.2.4.apk: 3b5d714bf4d2c8ea686ba14d449ed66967f977ffabbe739cabb2b9d2758c7208

Signing certificate SHA-256: 26:25:a6:b9:7f:74:65:52:7e:9a:d0:c0:d2:70:4e:fc:d8:df:f2:e3:a8:c4:ff:f7:08:fa:21:c8:f0:d9:06:c3