Skip to content

v0.0.24

Choose a tag to compare

@josepacelli josepacelli released this 20 Aug 13:59
· 56 commits to main since this release

Fixes a real security gap: the "WiFi" listener used to bind to whatever network interface happened to be up first. On a device with WiFi off and mobile data on, that meant the unauthenticated video/control socket landed on the carrier's network — confirmed live on real hardware before this fix (bound to a real LTE IP address instead of failing closed).

Now the listener only binds to WiFi or Ethernet. If neither is available the status honestly says so ("No WiFi network. Turn on WiFi or connect over USB.") instead of the misleading "Listening" text it showed before. And if WiFi drops mid-session, the listener now notices within about a second and drops the stale binding, instead of sitting stuck on a dead address indefinitely.

None of this touches the loopback (adb forward) or USB accessory (AOA) paths — both were already independent of WiFi state and keep working exactly the same.

Also: the landing page and README now credit @jpbhdrey for the USB accessory (AOA) transport shipped in the previous release, and the USB copy that still described the old adb-forward-only workflow got fixed.