Skip to content

Releases

Datapavan 0.1.0

Datapavan 0.1.0 Pre-release
Pre-release

Choose a tag to compare

@mehdashti mehdashti released this 06 Nov 20:28

A pre-release. Datapavan 0.1.0 is being tried on more phones before it goes to F-Droid and IzzyOnDroid. It has been tested on emulators and two Samsung phones.

First release: the app and permission audit, the tracker and SDK scan, network use per app, the guided check of one activity, and the remediation plan with its journal. No internet permission.

Check your copy

Genuine Datapavan has no internet access and never asks for it.

APK SHA-256 8e290a36dbeddc8490d36e421ac28c49b21c73da1af0064143632c10d176c96a
Signing certificate SHA-256 FA:6A:24:04:2A:BC:AC:8B:D0:09:01:10:F7:04:FF:EF:E7:DA:D3:AD:F5:DB:38:FB:07:38:90:AB:4C:B1:FA:84
Commit 9c24d65272ff73711fd354dd6d4a2f1f1ad18c73

notes.txt says the same, and notes.txt.sig signs it with the release notes key, offline. The tag itself is not signed: the signed notes name its commit.

signify-openbsd -V -e -p keys/datapavan-notes-1.pub -x notes.txt.sig -m /dev/null
apksigner verify --print-certs datapavan-0.1.0.apk

The public keys are in keys/. The APK builds reproducibly from the tagged commit with scripts/reproducible.sh.