Skip to content

v0.8.3: taint checks catch more of how data leaves

Choose a tag to compare

View all tags
@batrapulkit batrapulkit released this 09 Oct 17:22
· 51 commits to main since this release
v0.8.3
d146971

Taint checks catch more of how data leaves, and stop a false alarm

Taint checks spot an agent sending something to an address that came from content someone else wrote (a web page, an email, an issue). They now catch more of the ways data leaves:

  • Images count as destinations, in any field. An image in an email, a PR or a chat message loads by itself when it's shown, so a URL in it sends data with no click (EchoLeak). This covers Markdown ![](url), reference-style images and <img src>. Plain links in a body are still content, not destinations.
  • Scripts that post data count as sending: requests.post, httpx and axios posts, fetch with a POST, and urllib with data. GETs don't.
  • gh commands that put something on GitHub count as sending: creating a gist, creating or commenting on an issue or PR, uploading to a release, and gh api with fields or a POST.

One false alarm gone: a shared host like github.com, gitlab.com, Hugging Face or Google Docs on its own no longer counts as the destination; the owner part does (github.com/owner/repo). Pushing to your own repo after reading a page that mentions github.com isn't flagged any more.

Benchmark (bench/chains) unchanged: harmful sessions stopped 34/35, false positives 3/41.

Upgrade: run the install line again, or pipx upgrade squidbrake

Install this version (0.8.3)

Windows (PowerShell):

$env:SQUIDBRAKE_VERSION="0.8.3"; irm https://pilots.squidbrake.com/install.ps1 | iex

macOS / Linux:

curl -fsSL https://pilots.squidbrake.com/install.sh | SQUIDBRAKE_VERSION=0.8.3 sh

With pip: pip install squidbrake==0.8.3. Docker: docker pull ghcr.io/batrapulkit/squidbrake:0.8.3

Running the line again without SQUIDBRAKE_VERSION goes back to the newest. Every version:
https://github.com/batrapulkit/squidbrake/releases

Assets 2
Loading