ingesto v2.0.2

INGESTO 2.0.2

Major reliability and security release. If you use SECURE mode or multiple destinations, this update matters.

Fixed

• False "hash mismatch" in Verify after a SECURE ingest. SECURE fingerprints and the Verify function used two different hashing libraries that formatted the same value differently (missing leading zeros — roughly 1 file in 16 was affected). Fingerprints are now canonical 16-character xxHash64, and Verify accepts checksum lists written by earlier versions, so folders that previously failed Verify will now pass without re-ingesting.
• {SS} template token produced minutes instead of seconds, and was missing from the live folder-name preview. It now renders real seconds everywhere.
• Auto counter picked up unrelated folders. Folders like 4K_tests or 1080p_exports in a destination no longer bump the counter. Only names starting with 1–4 digits followed by _, - or nothing are counted.
• Failures while writing the checksum list or MHL manifest are now reported in the end-of-copy error panel instead of failing silently.
• Removed a leftover debug log that was written to the Desktop on Windows on every drag & drop.

Changed — new copy engine

• Multi-destination copies now read the source once and write to every destination simultaneously (previously: one full parallel read pass per destination, competing for the same card). Expect a real throughput gain on slow media with 2+ destinations.
• A destination failing mid-copy no longer affects the others — remaining destinations complete normally and the failure is reported per destination.
• PRO double-read now re-reads the source once total, instead of once per destination.
• SECURE and PRO now force each file onto the physical medium (fsync) before verifying it. Verification can no longer be satisfied from the OS write cache, so a bad physical write is caught while the source card is still in hand. Trade-off: SECURE/PRO ingests are slower on cards with thousands of tiny files (Sony/Canon sidecar structures); large-clip cards are barely affected.
• During the copy phase the progress title shows all destinations at once (e.g. Dest1 + Dest2); the verify phase then shows each destination in turn.
• The card sentinel now records every destination that succeeded (destinations list), not just the first. Older sentinel files remain readable.

Security

• Fixed a command injection via volume names on macOS. Disk information was queried through a shell with the volume path interpolated — a hostile volume label could execute code when the card was merely scanned. All diskutil/df calls now pass arguments without a shell.
• Post-ingest hook variables ({card}, {destPath}, …) are sanitized before substitution, closing the same vector through user-configured hook commands.
• Re-enabled Chromium's default web security in the app window (was disabled).
• Hardened HTML escaping of file and volume names in the UI.
• Electron upgraded 28 → 34 (two years of Chromium security fixes).

Performance

• Windows volume scanning is dramatically faster: one PowerShell query for all drives instead of one process per drive letter (previously up to 20–30 s with several drives connected).
• Small files (≤ 8 MB) are fingerprinted with a single buffered read in every mode, removing per-file stream overhead on cards with thousands of sidecar files.

Internal

• All hashing (SECURE, PRO, Verify) is now unified on a single library (hash-wasm); the xxhash-wasm dependency is removed. This eliminates the class of format-mismatch bugs behind the Verify issue above.

Upgrade notes

• Existing checksum lists, MHL manifests, reports and card sentinels remain fully compatible — no re-ingest needed.
• If you use {SS} in a folder template, new folders will now contain the actual seconds.
• First build after updating will download the Electron 34 runtime.

ingesto v2.0.1

Add files via upload

ingesto v2.0.0

v.2.0.0

Add files via upload