Skip to main content

Another #security patch has been applied at the #IzzyOnDroid #IzzySoftRepo to protect against what is described at openwall.com/lists/oss-securit…

Though a full scan of the repo hasn't brought up a single affected APK, that doesn't mean any such cannot show up later – so better safe than sorry, right?

oss-security - [Update] PoC for fdroidserver AllowedAPKSigningKeys certificate pinning bypass

www.openwall.com
#security #IzzySoftRepo #izzyondroid
in reply to IzzyOnDroid ✅

Muntashir Akon
Muntashir Akon
• •
Why not adopt the apksigner itself instead of using a custom implementation?
in reply to Muntashir Akon

IzzyOnDroid ✅
IzzyOnDroid ✅
• •
@muntashir the description of the POC outlines this. github.com/obfusk/fdroid-fakes…

GitHub - obfusk/fdroid-fakesigner-poc: F-Droid Fake Signer PoC

F-Droid Fake Signer PoC. Contribute to obfusk/fdroid-fakesigner-poc development by creating an account on GitHub.
GitHub
@Muntashir Akon
⇧