FC (Fay) Stegerman

icon indicating a website link https://obfusk.ch icon indicating an email [email protected]

icon location .nl icon location CS/InfoSec, FP, Software Freedom, Privacy, Math, 日本語 » she/her, they/them

Results 220 issues of FC (Fay) Stegerman

pure python implementation (using apksigtool instead of apksigner)?

Can (soon) be done w/ `--verify-cmd`, though that still uses it as an external command, not via the Python API.

enhancement
maybe

copy_apk: protect against malicious zip files?

* [x] duplicate entries * [ ] ???

enhancement
help wanted
maybe

improve error messages (e.g. "Unexpected metadata")

3 comment

documentation
enhancement
maybe

CI: apksigcopier compare test uses NewPipe, which doesn't build reproducibly

bug
maybe

zipfile regression in python 3.11 beta breaks apksigcopier

Upstream bug: https://github.com/python/cpython/issues/95463 Fixed (i.e. workaround used) on `master` by 21ea669 (not yet part of a release).

bug

update README, docstrings, and man page

enhancement

FIXME: click autocompletion

bug
maybe

FIXME: can we determine signed_sb_offset in patch_v2_sig()?

maybe

FIXME: copy_apk() makes certain assumptions and doesn't handle all valid ZIP files!

maybe

FIXME: is there a better alternative to ReproducibleZipInfo?

maybe