Skip to content

Zero Breach Toolkit 2.0.4

Latest
Latest

Choose a tag to compare

View all tags
@interplains interplains released this 01 Nov 23:27
v2.0.4
c711c01
This commit was signed with the committer’s verified signature.
interplains ArchiveGenocide
GPG key ID: 9B4D575499AFA53C
Verified
Learn about vigilant mode.

Zero Breach Toolkit 2.0.4. Fixes from real Mac and Windows runs. Thanks to the people testing it.

If you are on 2.0.0 to 2.0.2, please update, and if the window showed a phone as green, check it again: those versions could say more than the check had done (2.0.3 fixed that).

Mac

  • No more false "macOS is out of date" warning. A date in a vulnerability record was being read as a version number, so every current Mac got it. Thanks to s3ba-b for finding it.
  • Safari folders that macOS refuses now give the plain privacy message, and the Full Disk Access advice is left out when access is already on.

Windows

  • Double-clicking no longer leaves a terminal in the taskbar, which ended the check if you closed it.
  • The Quick check estimate is now 5 to 15 minutes, and connections that are closing are labelled "System" instead of "System Idle".
  • Chinese, Japanese and Korean use the matching Windows font.

Everyone

  • The report's date comparison names the AdFection campaign, rather than implying the tool looks for only one campaign.
  • A check that does not apply says why in the report's detail.
  • A stopped check no longer says "nothing matched" in its next steps.
  • The saved report's location shows on the Result tab, and the save dialog lists file types.
  • Help scrolls and fills its tab, and Japanese and Chinese wrap correctly there. Right-to-left lines leave more room in small windows.

Your antivirus may flag these programs. Antivirus products often wrongly flag new programs that are not code-signed yet, and some flag these. If you downloaded the file from this page, this is a false alarm and you can ignore it: the code is public, and each program has a public build record you can check. We have applied for free code signing and are reporting these false alarms to the antivirus companies. If the file came from anywhere else, do not run it and trust the warning.

Downloads and first-launch steps: see the README. Full list: CHANGELOG.

Verify before running

zero-breach-toolkit.py SHA-256: 98279a7212220260f78e72020e52420565cc6c0c00f25bb02d478902288b80fc

Each program: gh attestation verify <file> --repo interplains/Zero-Breach-Toolkit. Their checksums are also GPG-signed: gpg --verify SHA256SUMS-programs.txt.asc SHA256SUMS-programs.txt, then sha256sum -c SHA256SUMS-programs.txt. Signed with key C24E C92B 12D6 670A 2516 065F 9B4D 5754 99AF A53C.

Assets 13
Loading