Repository navigation
Plico 0.2.6
·
23 commits
to main
since this release
b8bb01b
This commit was signed with the committer’s verified signature.
Turtlecute33
Turtlecute
A security fix: hidden characters in a received address now show.
Requires Android 15 or later, on all ABIs (the APK has no native code). An update from 0.2.5 keeps your accounts, mail and settings.
Privacy and security
- Plico shows hidden characters in a received address as "�". These are control and format characters (bidi marks, zero-width characters), variation selectors and other characters that the screen does not show. A sender cannot use them to make an address look like a different address, and the sender checks see them. Plico does not remove them, so "pay<hidden>pal.com" does not become "paypal.com".
| File | Use |
|---|---|
Plico-0.2.6.apk |
Release build, signed. |
SHA-256:
Plico-0.2.6.apk:dba3f4ce40350d9afdb0913bb14b17ba44e63a623c2a8896ccd7424e3913d97c
Signing certificate SHA-256: 26:25:a6:b9:7f:74:65:52:7e:9a:d0:c0:d2:70:4e:fc:d8:df:f2:e3:a8:c4:ff:f7:08:fa:21:c8:f0:d9:06:c3
Check the certificate with apksigner verify --print-certs Plico-0.2.6.apk or with AppVerifier. Do not install an APK with a different certificate.