ClipSync v3.0.0 — Major Sync & Performance Update

Changelog

v3.0.0

Major Features & Architectural Changes

• Dual Sync Modes (Local LAN/BLE & Cloud): Shifted the core architecture to prioritize completely offline, local transfers using Bluetooth Low Energy (BLE) and Local Area Network (LAN). The legacy Firebase Cloud Sync has been fully retained as an alternative. Users can now seamlessly toggle between two distinct sync options tailored for maximum privacy/speed (Local) or global connectivity (Cloud).

• macOS: Leverages Apple's Network.framework (NWListener) and Bonjour/mDNS (NWListener.Service) to advertise the sync service on the local subnet.

• Android: Binds a raw ServerSocket to an ephemeral port via AndroidTcpReceiver for high-throughput TCP socket connections, handling large file transfers securely without external servers.

• Cross-Device Image Sync: Upgraded the clipboard pipeline to seamlessly serialize and synchronize rich media (images) alongside standard text and OTPs.

• Dedicated Mode: Ultra-Fast Transfer: Introduced a dedicated mode designed for maximum throughput. It bypasses JVM boundaries on Android and actively strips AES-256 encryption on macOS to match or exceed AirDrop speeds for large file transfers.

  [!CAUTION]
  Security Trade-off: Because this mode achieves blazing-fast speeds by completely removing payload encryption, it is strictly recommended to enable this mode only on trusted private or home networks.

• Automated OTP Sync & Global Connectivity

  • Added intelligent parsing of incoming SMS/Notifications to extract One-Time Passwords.

  • BLE & Cloud Fallback Architecture: When devices are in proximity and Bluetooth Low Energy (BLE) is enabled, sync operates directly and instantly over BLE. If BLE is unavailable and the app is in Cloud Sync mode, the pipeline falls back to using Firebase Firestore as a secure cloud relay—ensuring text and OTPs sync seamlessly even when devices are on entirely different networks (e.g., Mobile Data vs. Wi-Fi).

Security & Privacy Hardening

• Hardware-Backed Encrypted Storage
  • macOS: Migrated AES-GCM shared keys from legacy UserDefaults to the secure macOS Keychain via a custom KeychainHelper.swift. Included an idempotent migration path on app startup.
  • Android: Secured AES session keys utilizing EncryptedSharedPreferences backed by the Android hardware Keystore.
• Network Traffic Constraints
  • Enforced strict TLS/HTTPS globally by removing the android:usesCleartextTraffic=true directive from the AndroidManifest.xml.
  • Validated Firebase Cloud Messaging (FCM) push notification URLs strictly against an internal domain allowlist to prevent arbitrary code execution or redirection.
• Least-Privilege Accessibility
  • Refined accessibility_service_config.xml and manifest declarations to request only the exact interaction events required, preventing over-broad system monitoring.

Bug Fixes & Reliability

• Robust Encryption Fallbacks
  • Addressed an edge case where a plaintext fallback during an encryption failure resulted in silent decryption errors on the receiving client (dropped clips).
  • Introduced an explicit isEncrypted boolean flag within Firestore documents to correctly branch decryption logic on macOS.

ClipSync-Major Release

Release Title

Auto OTP Copy — Instant OTP Sync from Android to Mac

---

What's New

Auto OTP Copy (SMS)

OTPs arriving via SMS are now automatically detected, copied, and synced to your Mac — no manual action needed.

• Intercepts incoming SMS messages in the background
• Works with banking apps, authentication services, and any SMS-based OTP delivery

Auto OTP Copy (Email)

OTPs delivered via email notifications are now captured too, closing the gap for services that no longer use SMS.

• Monitors notifications from popular email apps (Gmail, Outlook, Yahoo Mail, and more)
• 2-second debounce suppresses repeated badge-update notifications for the same email
• Requires Notification Listener permission (one-time setup in Android Settings)

End-to-End Encrypted OTP Sync

OTPs are encrypted on Android using AES-GCM before being written to Firestore, and decrypted only on your Mac using your shared pairing key — nobody in between can read your codes.

---

Bug Fixes & Improvements

• Fixed clipboard sync reliability with a Firestore listener watchdog that auto-restarts if no updates are received in 60 seconds
• Improved QR scanner stability and pairing flow initialization.
• Refined background service lifecycle to prevent memory leaks.
• Reset Pairing option added directly from the Homescreen.

Built-in.Retina.Display.mp4

v1.0.0 (Beta) - Initial Public Release

Initial Public Release

ClipSync allows you to seamlessly synchronize your clipboard between your Mac and Android devices. This is the first beta release!

Key Features

• Instant Sync: Copy on one device, paste on the other immediately.(Currently limited to numbers and text, image will be done in near future)
• Secure by Default: End-to-end encryption using a locally generated AES-256 secret key.
• No Accounts Required: Works without user login/signup—just pair your devices.

🛠 Installation

1. Download ClipSync.app.zip for macOS and follow the instruction provided with the zip.
2. Download app-release.apk for Android and follow the readme files for installation instructions.

Pre-release Note

This is a beta version. If you find any bugs, please open an issue in this repository.