breezmobile
breezmobile copied to clipboard
Lightning Network mobile client
in AndroidManifest.xml file of generated APK that is locally built the versionCode is 1: `android:versionCode="1"` cause in `./android/app/build.gradle` it set static value of 1: https://github.com/breez/breezmobile/blob/592d8dfd71c97812aba13ba247fd186dd22f0915/android/app/build.gradle#L36 while downloading APK from github...
full-path of build path is leaked in file `libapp.so` running `strings libapp.so | grep "file:"` (the file `libapp.so` exists in a `./lib/arm64-v8a/` directory after unzip a apk file) from APK...
A wallet application is something very sensitive. A careless maintainer catching a backdoor might be enough to have an APK infected, which can only be stopped by another team member...
I translated the app in Italian and I'm testing the strings but noticed that Podcast has no strings to be translated, so all the screens, search fields and other elements...
Suggestion: add Tor support
https://github.com/breez/breezmobile/blob/632068995018566f57ad2bccd2c1568e6605bb0f/android/gradle.properties#L1 See this guide for the steps to ensure it's safe to remove above line `android.enableJetifier=true` (check that all deps are already fully migrated to AndroidX, and migrate the ones...
Had completed some accessibility testing on Breez today. Summary: Breez was impressive in the sense that the QR code was acknowledged by the voice over. This is very good because...
When funding wallet via on-chain make a URI link that include the address and open the default bitcoin wallet.
https://en.bitcoin.it/wiki/Bech32_adoption Need to check with Boltz & validate status after 0.15 merge.
When used LNURL-Withdraw wallet can also save URL for later use, so user can pull sats repetitively from remote wallet. - https://github.com/fiatjaf/lnurl-rfc/blob/luds/14.md - https://github.com/fiatjaf/lnurl-rfc/blob/luds/15.md So if LNURL-Withdraw response contains balanceCheck...