Skip to content

Zero Breach Toolkit v0.1.9

Choose a tag to compare

@interplains interplains released this 28 Oct 19:18
fd39f35

Superseded by v2.0.0: https://github.com/interplains/Zero-Breach-Toolkit/releases/tag/v2.0.0

Zero Breach Toolkit 0.1.9.

What changed

  • Browsers: "the browser was running" is now said only for a real lock. Other refusals say permission was denied and what to do; on a Mac they point to Full Disk Access.
  • The empty LOCK file a running Chromium browser holds, Safari's standard cookie link and a large but valid write-ahead log are no longer reported as gaps.
  • Browser icon stores are read in bounded steps, so a crafted icon database cannot use up memory.
  • Downloaded indicator lists are used only if they match the copies pinned for this release. After moving to 0.1.9, update the lists once (menu option 8, or --update). Lists fetched with --update --latest need --latest on the scan too.
  • Ad-network matches note that apps showing ads, such as the new Outlook for Windows, can record them too.
  • The release check on GitHub now also compares the downloadable file and checks both signatures.

Full list in CHANGELOG.md.

Verify before running

zero-breach-toolkit.py SHA-256: 8574f7e701bc64e459a2c19f28f8192f0c9d286ed900c95f1ed57a074fb2e828

Signed with key C24E C92B 12D6 670A 2516 065F 9B4D 5754 99AF A53C. See docs/VERIFYING.md.