Roadstr v0.5.9 is out β a security hardening release. π
An independent audit turned up a few real issues, now fixed:
β’ Favorites sync was auto-publishing on every edit for anyone signed
in with Nostr, with no separate opt-in despite the app claiming it
was optional. Now off by default β a real "Sync automatically"
toggle in Settings.
β’ Logging in used to publish a profile-visibility event even if you
never touched the setting, tying your key to "uses Roadstr" for no
reason. Only publishes now if you actually chose public visibility.
β’ A relay outage could get hammered every ~1.25s forever instead of
backing off β fixed the reconnect logic.
β’ Capped a few unbounded growth paths in the Nostr event stream that a
flood of throwaway identities could have abused.
β’ Store listing no longer claims things that weren't true (GPS
handling, offline routing, license).
Full changelog + APKs: https://github.com/roadstrapp/roadstr-app/releases/tag/v0.5.9
Free, open-source, no tracking, no Google dependency.
#Nostr #Roadstr #OpenStreetMap #GrowNostr #FuckGoogle
An independent audit turned up a few real issues, now fixed:
β’ Favorites sync was auto-publishing on every edit for anyone signed
in with Nostr, with no separate opt-in despite the app claiming it
was optional. Now off by default β a real "Sync automatically"
toggle in Settings.
β’ Logging in used to publish a profile-visibility event even if you
never touched the setting, tying your key to "uses Roadstr" for no
reason. Only publishes now if you actually chose public visibility.
β’ A relay outage could get hammered every ~1.25s forever instead of
backing off β fixed the reconnect logic.
β’ Capped a few unbounded growth paths in the Nostr event stream that a
flood of throwaway identities could have abused.
β’ Store listing no longer claims things that weren't true (GPS
handling, offline routing, license).
Full changelog + APKs: https://github.com/roadstrapp/roadstr-app/releases/tag/v0.5.9
Free, open-source, no tracking, no Google dependency.
#Nostr #Roadstr #OpenStreetMap #GrowNostr #FuckGoogle
51
