Skip to content

slock v0.2.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Sep 06:18
· 8 commits to main since this release
v0.2.7
d475be2

A small hardening release after a second pre-announcement security review, plus a
README written for people meeting Dit for the first time.

  • Nicknames sent by the other Mac are now sanitized by Unicode category. Control,
    formatting, bidirectional-override, zero-width and line-separator characters are
    removed, whitespace runs collapse, names with no visible character become empty,
    and length is bounded. Emoji sequences still display correctly.
  • Saved peer and Recent keys are validated as well-formed public keys before being
    used for routing or key agreement.
  • The README leads with what slock does, a five-step quick start, and a
    "Privacy at a glance" section. Maintainer release steps moved to
    docs/RELEASING.md.
  • Security docs record the follow-up review; no new high- or medium-severity
    code findings were identified.

Download slock.app.zip below. Quit the old app, replace it in Applications,
and reopen it on both Macs. Pairings and preferences remain, but macOS may require
renewed keyboard permissions. SHA256SUMS contains the ZIP's checksum.

This remains a prototype for macOS 13+, Apple Silicon and Intel. It is ad-hoc
signed and not notarized, uses an unauthenticated public test relay, and has no
forward secrecy. Please keep sensitive conversations elsewhere. See
SECURITY.md for the
security limits and reporting guidance.

Assets 4
Loading