Skip to content

Anomalous 0.1.1 — security hardening

Choose a tag to compare

View all tags
@msitarzewski msitarzewski released this 05 Jul 00:57
· 75 commits to main since this release
v0.1.1
cdae9c2

A security-hardening release. Recommended update for everyone on 0.1.0.

Highlights

  • Root helper XPC trust boundary hardened: release builds always enforce client code-signing, and terminate now refuses critical/system processes (never SIGTERMs launchd, WindowServer, security daemons, …).
  • Account token moved from UserDefaults to the Keychain.
  • Bearer token requires HTTPS to any non-loopback host.
  • (Plus server-side auth / billing / attestation fixes on the backend.)

Install: download the DMG, drag Anomalous to Applications.
Requirements: macOS 26 (Tahoe) or later, Apple Silicon. No Intel build (macOS 26 is Apple-Silicon-only).

🌐 https://anomalous.bot · ♥ https://github.com/sponsors/msitarzewski

Assets 3
Loading