-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Screenshots & Metadata #1
Comments
Thank you for your advice |
Thanks for the quick fix! As for screenshots: is there no GUI? Where/how does one select which apps to freeze, or when? I've just translated your Readme using DeepL.com (by myself I could not even read it 🙈):
So I most likely miss some details. Thanks for helping me to understand! |
no need to select, the module will freeze application automatically |
All of them? So one cannot exclude an app needed to run? (Just asking to understand – not to complain 😉) |
by modifying the cfg file, you can specify that the application does not freeze |
Thanks! Integrated Cirno with IoD then: It will show up here with the next sync around 6 pm UTC. Be welcome to pick a badge then to link there e.g. from your Readme here 😃 Btw: At IzzyOnDroid we support Reproducible Builds (see: Reproducible Builds, special client support and more at IzzyOnDroid). Trying for yours, I was able to successfully generate the APK using -rw-r--r-- 0.0 unx 56 b- 52 defN 1981-01-01 01:01:02 b89973a3 META-INF/com/android/build/gradle/app-metadata.properties
- -rw-r--r-- 0.0 unx 46 b- 48 defN 1981-01-01 01:01:02 b8ff6554 META-INF/version-control-info.textproto
+ -rw-r--r-- 0.0 unx 120 b- 118 defN 1981-01-01 01:01:02 5939abba META-INF/version-control-info.textproto
-rw-r--r-- 0.0 unx 885 b- 885 stor 1981-01-01 01:01:02 f9eaa45b assets/dexopt/baseline.prof
-rw-r--r-- 0.0 unx 167 b- 167 stor 1981-01-01 01:01:02 0846b225 assets/dexopt/baseline.profm
-rw-r--r-- 0.0 unx 963976 b- 963976 stor 1981-01-01 01:01:02 deca088b classes.dex
- -rw-r--r-- 0.0 unx 4048 b- 4048 stor 1981-01-01 01:01:02 a9e31f8f lib/arm64-v8a/libcirno.so
- -rw-r--r-- 0.0 unx 2804 b- 2804 stor 1981-01-01 01:01:02 bd9a64e4 lib/armeabi-v7a/libcirno.so
- -rw-r--r-- 0.0 unx 3112 b- 3112 stor 1981-01-01 01:01:02 b842e6da lib/x86/libcirno.so
- -rw-r--r-- 0.0 unx 4048 b- 4048 stor 1981-01-01 01:01:02 28dc6eaa lib/x86_64/libcirno.so
+ -rw-r--r-- 0.0 unx 3856 b- 3856 stor 1981-01-01 01:01:02 3aba276b lib/arm64-v8a/libcirno.so
+ -rw-r--r-- 0.0 unx 2620 b- 2620 stor 1981-01-01 01:01:02 15a38008 lib/armeabi-v7a/libcirno.so
+ -rw-r--r-- 0.0 unx 2924 b- 2924 stor 1981-01-01 01:01:02 e2c71428 lib/x86/libcirno.so
+ -rw-r--r-- 0.0 unx 3856 b- 3856 stor 1981-01-01 01:01:02 529f8265 lib/x86_64/libcirno.so
-rw-r--r-- 0.0 unx 3656 b- 3647 defN 1981-01-01 01:01:02 b0438654 assets/main.jar Taking a look at your
In comparison to that, here's the one from our build: repositories {
system: GIT
local_root_path: "$PROJECT_DIR"
revision: "a26ad205cdfbb37b0145b71e0af68fa293d5d90b"
} (where "revision" is the git commit your tag points to). We'd appreciate if you could help making your build reproducible. We've prepared some hints on reproducible builds for that. Looking forward to your reply! cc @obfusk |
We can either just The |
Because the version in release I signed |
also, the so file is empty because I'm not currently planning to write JNI code |
The reason is simple, because another of my projects needs to be protected with oLLVM. |
The release version was compiled on my own computer, not by GitHub actions |
Nope, signing has nothing to do with that diff. That is taken care for (or we would not have a single RB app instead of the hundreds alone in the IzzyOnDroid repo).
Then why do you apply it to THIS project, and not just to the other? And what kind of "protection" are you talking about? As Fay correctly pointed out, this app here is open source. So if the source is open (and everyone can see), what is the use of obfuscating the compiled code?
My APK was compiled on one of my computers, and also not by Github actions. Your version must have been compiled "outside the git tree", i.e. with no |
I am not sure about the reasons for the differences in question 1 |
Partly explained by your screenshot: I see no As for the |
I will resolve the oLLVM issue in the next version (Using NDK 26) |
I don't know about other differences since there is no actual code in the
Does that mean not using it any more? |
So it's either no oLLVM here – or no RB? |
yes, ndk26 do not use ollvm |
Thanks! Please give us a ping when it's ready and we can check again. |
Looks like you forgot the ping, there are a few new releases I see. But, where do you build the APKs? The embedded versionInfo says: So basically, the structure still looks the very same: -rw-r--r-- 0.0 unx 56 b- 52 defN 1981-01-01 01:01:02 b89973a3 META-INF/com/android/build/gradle/app-metadata.properties
- -rw-r--r-- 0.0 unx 46 b- 48 defN 1981-01-01 01:01:02 b8ff6554 META-INF/version-control-info.textproto
+ -rw-r--r-- 0.0 unx 120 b- 118 defN 1981-01-01 01:01:02 4bfbf4c7 META-INF/version-control-info.textproto
-rw-r--r-- 0.0 unx 886 b- 886 stor 1981-01-01 01:01:02 fa74d265 assets/dexopt/baseline.prof
-rw-r--r-- 0.0 unx 167 b- 167 stor 1981-01-01 01:01:02 0846b225 assets/dexopt/baseline.profm
-rw-r--r-- 0.0 unx 964440 b- 964440 stor 1981-01-01 01:01:02 d2c53f11 classes.dex
- -rw-r--r-- 0.0 unx 3936 b- 3936 stor 1981-01-01 01:01:02 e8971c7f lib/arm64-v8a/libcirno.so
- -rw-r--r-- 0.0 unx 2724 b- 2724 stor 1981-01-01 01:01:02 f0290ff8 lib/armeabi-v7a/libcirno.so
- -rw-r--r-- 0.0 unx 3060 b- 3060 stor 1981-01-01 01:01:02 5072333c lib/x86/libcirno.so
- -rw-r--r-- 0.0 unx 3984 b- 3984 stor 1981-01-01 01:01:02 eba7c820 lib/x86_64/libcirno.so
+ -rw-r--r-- 0.0 unx 3784 b- 3784 stor 1981-01-01 01:01:02 5fb9760f lib/arm64-v8a/libcirno.so
+ -rw-r--r-- 0.0 unx 2564 b- 2564 stor 1981-01-01 01:01:02 448d806d lib/armeabi-v7a/libcirno.so
+ -rw-r--r-- 0.0 unx 2900 b- 2900 stor 1981-01-01 01:01:02 a29ca9da lib/x86/libcirno.so
+ -rw-r--r-- 0.0 unx 3832 b- 3832 stor 1981-01-01 01:01:02 6c9595fc lib/x86_64/libcirno.so
-rw-r--r-- 0.0 unx 3656 b- 3647 defN 1981-01-01 01:01:02 b0438654 assets/main.jar
That would have been the previous release then. I guess something happened and you did not yet get to it? No offense meant, just asking for clarification. |
Yeah, I didn't build it using the source code in the repo, but my own source code |
Why? You don't want RB? |
because I'm lazy, I didn't upload github at first. |
Don't you use git for a local clone? The current workflow really makes RB harder to achieve (and keep up)… PS: developing inside a git repo tree brings other advantages as well. Like the following: git pull # get the latest code from your Github
# edit foobar.java, make a big mistake and mess it up totally. Now easily get the previous version back:
git checkout foobar.java You also can save "interim versions" by simply using |
Yes, I don't use it |
Ah. I'd strongly recommend giving it a try, for sooo many reasons 😉 |
Bro, would it really be that hard to put together UI for this application? Because editing the CFG file every time you want to select an app for freezing or not is kind of impractical. Thinking about doing myself. but the app isn't even a RB |
@Steake I cannot help with the UI, sorry. (if you wonder why I respond to that: I suspect apart from you I'm the only one here in this issue who "bro" could apply to 😜) |
Freezer has a UI, Cirno doesn't |
@Nep-Timeline so where do we stand here concerning RB – any chance we can get to that, or shall we drop your app from the RB queue? |
I don't know. I haven't thought about it :( |
No bad feelings if you don't want it. It's not mandatory, but a highly recommended addition. A "confirmed RB" basically proves your APK was indeed built from the code it claims to, so people can feel "safer" about that. But it also requires some "discipline" concerning building the APK for distribution (e.g. it must always be built from a clean tree at the tagged commit). Your workflow is a bit different I understand, so if you feel that being too much, you can of course say so. We don't want to burden you here, we're just offering this additional feature if you want it – but then would need your help to make it work 😉 |
First thanks for making your app available using a FOSS license 🤩 Am I assuming correctly this is a module for Xposed? And would you have some screenshots available? Looking to include your app with the IzzyOnDroid repo – and as the "first impression" is important, it'd better start with some good visuals 😉
Btw, our scanners reported:
This can easily be avoided with a minor adjustment to your
build.gradle
:For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. here: Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.
Thanks in advance!
The text was updated successfully, but these errors were encountered: