Repository navigation
Plico 0.2.4
Hardening only: memory tagging, no Play Services emoji font, and checked dependencies.
Requires Android 15 or later (arm64). An update from 0.2.3 keeps your accounts and mail.
Privacy and security
- Memory tagging (MTE) is on. Plico reads untrusted data from the network in its own process (sender logos, part of the message view). On a phone with MTE (GrapheneOS, or a Pixel 8 or later with the developer option or Advanced Protection), a bad memory access stops the app at once.
- Plico no longer asks for a downloadable emoji font. On a phone with Google Play Services, that request went to the Play Services font provider. Plico uses the system emoji font.
- The build checks the SHA-256 of each dependency and of the Gradle distribution.
| File | Use |
|---|---|
Plico-0.2.4.apk |
Release build, signed. |
SHA-256:
Plico-0.2.4.apk:3b5d714bf4d2c8ea686ba14d449ed66967f977ffabbe739cabb2b9d2758c7208
Signing certificate SHA-256: 26:25:a6:b9:7f:74:65:52:7e:9a:d0:c0:d2:70:4e:fc:d8:df:f2:e3:a8:c4:ff:f7:08:fa:21:c8:f0:d9:06:c3