Repository navigation
⚡ Synkros v1.5.0 — Technical Release Notes
A major leap in security, stability, and transparency.
Every layer — client, server, and documentation — has been reinforced for maximum integrity.
🔐 Core Security & Privacy Enhancements
🧩 Crypto-Worker Implementation
- Introduced a dedicated Web Worker for all cryptographic operations.
- Significantly improves responsiveness during heavy E2EE uploads/downloads.
- Prevents UI blocking and ensures smooth performance across devices.
- Added encryption/decryption logs for debugging and transparency.
🧠 End-to-End Encryption (E2EE) Optimization
- Enhanced key handling and memory cleanup after encryption tasks.
- Optimized internal flow for reduced latency and CPU load.
- Added verbose, structured logs for encryption/decryption stages.
🛡️ Advanced Client-Side Security Suite
- Added multi-layer frontend protection against tampering and injection attacks.
- Features include:
- Right-click disabling
- Frame busting
- Clipboard & paste monitoring
- DOM mutation observation
- Console tampering detection
- Keylogger and suspicious key combo detection
- Storage tampering alerts
- CSP violation reporting
- Drag-and-drop monitoring
- Detects malicious automation and devtools triggers in real time.
🧱 Backend Security Overhaul
🚨 Infrastructure Hardening
- Rate Limiting: Prevents brute-force and denial-of-service attempts.
- Anti-XSS Middleware: Sanitizes requests and enforces safer responses.
- Cloudflare Turnstile Verification: Replaces traditional CAPTCHAs with a privacy-first human check.
- Verification Middleware: Adds validation layers before processing user requests.
- Ray ID System: Generates unique, non-identifying request IDs for debugging and monitoring.
- Winston Logging Integration: Structured and colorized logging for better observability.
- Strict Security Headers: Reinforced
CSP,HSTS, andX-Frame-Options. - Locked Dependency Versions: Prevents insecure or breaking third-party updates.
🧹 Storage & Cleanup Improvements
- Automatic cleanup of orphaned or expired files.
- Better log management and storage optimization to prevent overflow.
- Introduced
/verify?redirect=parameter for smoother post-verification UX.
🪪 Transparency, Docs, and Compliance
- Updated Privacy Policy, Terms of Service, and License (CC BY-NC 4.0).
- Expanded README with new sections:
- Deployment instructions
- Security model overview
- Privacy architecture
- Added console security alerts to warn against Self-XSS and fraud attempts.
💅 UI & UX Enhancements
- The Download button now functions as a progress bar, showing live encryption/decryption progress.
- Introduced custom error pages (404, 500, generic) with consistent design.
- Added crash-safe fallback logic and unified error handling across the app.
- Numerous QoL fixes and performance optimizations for smoother use.
🧩 Technical Summary
| Category | Updates |
|---|---|
| Frontend | Crypto-Worker, Anti-XSS suite, CSP reporting, right-click & console protection |
| Backend | Rate limiting, Turnstile verification, Ray ID, Winston logging, verification middleware |
| Storage | Orphan cleanup, overflow prevention, improved file lifecycle |
| Docs & Legal | Privacy Policy, ToS, License, expanded README |
| UI/UX | Download progress bar, custom error pages, unified error handling |
📦 Repository: github.com/axrxvm/synkros
🌐 Live: synkross.alwaysdata.net
v1.5.0 — encrypted, defended, unstoppable.