Skip to content

Reverse Engineering Browser v0.1.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Sep 19:26
· 66 commits to main since this release
v0.1.6
f4e4aad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

macOS downloads

  • Origin Trace v0.1.6: updated macOS research interface, built by GitHub Actions from the v0.1.6 tag.
  • Brave Browser Development v0.1.5: the exact, unchanged Apple-silicon browser archive from v0.1.5. Brave was not rebuilt for this release. If you already have that browser, download only Origin Trace.

Unzip the apps and keep them beside each other so Origin Trace can find the custom Brave browser.

Origin Trace improvements

  • Select exact UTF-16 source columns for runtime hooks on minified code, including inline-script offsets.
  • Navigate individual literal search matches with Enter and Shift+Enter, with highlighting and horizontal scrolling.
  • Remove stale live scripts and resolved breakpoint locations when execution contexts are destroyed, while preserving URL breakpoint definitions and captured evidence.
  • Preserve completed redirect-hop status, headers, and timing in network capture.
  • Report renderer crashes and recovery in the Sources view.
  • Keep source filenames visible in narrow navigation panes.
  • Accept runtime and artifact records in offline evidence validation.
  • Report app version 0.1.6 (build 6).

Browser scope

The source tree also includes the multi-client embedder-pause attribution fix, but the reused v0.1.5 Brave binary does not contain that newer browser change.

Validation

  • Local lint, native and UI checks (155 Python tests), end-to-end checks, sanitizers, app build, strict signature verification, and whitespace checks passed.
  • Packaged native smoke verification loaded bundled UI assets and exercised the decoder successfully.
  • Main-branch CI passed on macOS and Linux.
  • The tag workflow built and signature-verified the published Origin Trace archive from a clean checkout.
  • Reused Brave archive verified against its v0.1.5 SHA-256: f5b3dc4d56fdec11c710295dcd7bc0ab8e93f15b330f61ddc3c3a817c37ff62b.

Origin Trace archive SHA-256: a02448fc3572988fbc219151199365691fa74f6515f0cd1e31d617cdd454cee0.

Distribution

The apps are ad-hoc signed for development and internal testing, not Developer ID signed or notarized.

Full changelog: v0.1.5...v0.1.6

Assets 4
Loading