Skip to content

v0.4.6

Choose a tag to compare

View all tags
@zumuvik zumuvik released this 03 Jul 13:30
· 21 commits to main since this release
v0.4.6
5364693

Changes

  • Revert transport from Bluetooth RFCOMM back to Wi-Fi/LAN TCP with UDP discovery.
  • Android listens for UDP discovery and connects back to the PC daemon TCP listener.
  • Add bounded auth windows so arbitrary TCP connections cannot unlock outside wake/manual/start authentication.
  • Harden TOFU: first pairing stores keys only after proof-of-possession and never unlocks on the first TOFU connection.
  • Reject trusted-key mismatches without overwriting pinned keys.
  • Add dynamic TCP port discovery, Android connection debounce, PEM fingerprint validation, and key-based trust with IP/port refresh after verification.
  • Update NixOS module firewall/settings, docs, and version metadata to 0.4.6.

Validation

  • python -m py_compile src/phonect/*.py tests/*.py
  • nix-instantiate --parse phonect-service.nix

Note: full pytest and Android Gradle build were not run in this environment because pytest/pip and Java/JDK are unavailable.

Assets 3
Loading