Skip to content

Releases: phishcues/extension

PhishCues 0.8.0

PhishCues 0.8.0 Pre-release
Pre-release

Choose a tag to compare

@phishcues-maintainer phishcues-maintainer released this 26 Aug 17:10

PhishCues 0.8.0 matches the Chrome Web Store 0.8.0 release.

What changed:

  • Keeps Gmail analysis and exact-address Trusted/Suspicious choices local.
  • After Suspicious, adds a separate explicit report-sharing decision; choosing No sends nothing.
  • Shares only the disclosed five-field privacy-safe report after confirmation.
  • Keeps the separately consented link-free preview default-No, limited to two sentences and 220 characters, encrypted, private, and retained for at most 30 days.
  • Keeps full email, subject, headers, recipients, attachments, images, HTML, raw links, Gmail/message/account identifiers, score, and result out of uploads.
  • Adds optional, default-off weekly installation counting with no email, identity, domain, browsing history, or stable cross-week identifier.

The attached deterministic ZIP is the exact reviewed 0.8.0 Store artifact. Verify it with the SHA-256 file before loading it unpacked. This remains a public beta; indicators and Community Cues are not safety or phishing verdicts.

PhishCues Beta v0.7.0-beta.2

Pre-release

Choose a tag to compare

PhishCues Beta 0.7.0 — manual developer prerelease 2

This client-only Apache-2.0 prerelease refreshes the accessible Suspicious sharing dialog, points privacy/homepage metadata to phishcues.com, and keeps the exact staging reporting boundary.

Privacy boundary:

  • Trusted and Suspicious actions remain local by themselves.
  • Sharing requires the separate explicit Share privacy-safe report action.
  • Choosing No after Suspicious uploads nothing.
  • The default-No private preview is limited to the exact visible link-free two-sentence preview, encrypted for at most 30 days, and never published.
  • No full body, subject, headers, attachments, raw links, score, result, browsing history, or remote code is included.

Manual extension ID: lclecfoiolclepjmbmjikbjfpigolkap
Source commit: 912d063
ZIP SHA-256: 1adeae00cb2cde35c354cbd20521a20f7d1838f784bb08e0f7d7bc10cdb7029a

The Chrome Web Store item is separately pending Google review. This GitHub prerelease does not represent Store approval, independent security/privacy certification, or legal approval.

PhishCues v0.7.0 Beta 1

Pre-release

Choose a tag to compare

PhishCues v0.7.0 Beta 1 is a public-source, load-unpacked Chrome beta for Gmail.

Install:

  1. Download and unzip phishcues-beta-v0.7.0.zip.
  2. Open chrome://extensions, enable Developer mode, and choose Load unpacked.
  3. Select the unzipped folder, then follow the PhishCues Gmail onboarding screen.

Integrity:

  • SHA-256: 282b454943d7122e6777050d2cc1fb2772a62d1ebd2b532f022b4e748256a809
  • Stable extension ID: lclecfoiolclepjmbmjikbjfpigolkap

Privacy boundary:

  • Trusted and Suspicious choices stay in the browser by default.
  • After Suspicious, sharing is a separate opt-in with a preview and a No path that makes no upload.
  • The beta does not silently collect full message bodies, subjects, attachments, browsing activity, or raw links.
  • Public Cues are moderated domain aggregates and are not safety, identity, company, or reputation verdicts.

Beta status:

  • This is a prerelease distributed as a GitHub ZIP, not a Chrome Web Store release.
  • The reporting endpoint is the isolated active-beta service identified in the published policy documents.
  • Independent security/privacy review and qualified legal approval remain deferred until funding is available; this release does not claim either approval.