Comments (5)
Duplicate of #305
from foxmagiskmodulemanager.
Of course people didn't read the changelog. A changelog is for understanding what features have changed - the expectation is that the app will otherwise continue to work as expected, and any inconsistent settings state would be handled by the app itself.
This could have been avoided by added a version table/file. If it exists (and isn't too old) nothing to change. If it doesn't, wipe the database, initialize, and write the version.
At the very least the app could detect whatever incorrect state it's in, and rather than displaying nothing, show a "please wipe your data" message.
from foxmagiskmodulemanager.
Of course people didn't read the changelog. A changelog is for understanding what features have changed - the expectation is that the app will otherwise continue to work as expected, and any inconsistent settings state would be handled by the app itself.
This could have been avoided by added a version table/file. If it exists (and isn't too old) nothing to change. If it doesn't, wipe the database, initialize, and write the version.
At the very least the app could detect whatever incorrect state it's in, and rather than displaying nothing, show a "please wipe your data" message.
I assure you every possible solution was explored and none was found, and any such table would have been unreadable anyway due to encryption changes.
In addition, it is not unusual for changelogs to list incompatibilities, breakages, etc, especially for a major version bump.
Do not assume that just because something doesn't work as you expected that we did not try to find a solution. And do not blame us when you don't read the changelog our website editor took the time out of their day to write.
from foxmagiskmodulemanager.
Encryption? You're in control of that.
I just looked at /data/data/com.fox2code.mmm/shared_prefs/com.fox2code.mmm_preferences.xml, and the language/country preferences are all in plaintext ... on both versions of the app.
I did not blame you, I said there are always options.
Do not blame us - the users - for missing something that was confusingly communicated and easily missed, or expecting us to read through something we're likely to expect to just work - because that's the expectation set by 99.9% of apps. Plan for your users to be lazy.
The upgrade notice in the app took us straight to the releases page in github, and the APKs:
https://github.com/Fox2Code/FoxMagiskModuleManager/releases/tag/v2.0.1
There could have been a note about clearing data there, but there was not.
That page had a link to the changelog:
https://www.androidacy.com/magisk-module-manager-v2-0-1/
a 500 word affair that (1) leaves the comparability note until the very end - after a plug for membership, and (2) says "you may need to clear app data" when to read it here sure makes it sound like everyone will.
It's also not technically a changelog, it's high-level release notes.
Both sides have some responsibility here, it's not an either-or. Could users have done a better job? Absolutely. Could the team have been clearer in their communication? Also yes.
from foxmagiskmodulemanager.
We're not playing this game. We apologize for the inconveniences this caused but we do not intend to reverse our stance on encrypting everything viably encryptable.
FoxMMM offers a very attractive attack vector and an unfortunate side effect of encrypting shared preferences (where encryption is under our control and not under the control of external libraries or the system) so that malicious modules can't manipulate them is the app is crashing too early in the application lifecycle, and instead of the system letting our crash handler - that we do in fact have in place - catch the resulting crash, it just stubbornly keeps restarting the app without showing anything to the user, resulting in an ANR instead of a proper crash.
For far too long, apps with root access have taken the stance that since you have root security is moot and have not taken security seriously. We don't intend to follow that flawed logic.
In addition we do follow semantic versioning, and incremented the major version code due to potential and expected breakages.
That being said I will mention something to our editor about potentially editing the wording of the warning in the release notes in our next meeting.
With everything said, I'm locking this issue because I don't feel anything productive is going to come out of it continuing. I may unlock it in a few days.
from foxmagiskmodulemanager.
Related Issues (20)
- [BUG] Simplified Chinese is disappear HOT 4
- [BUG] Update crash HOT 3
- [BUG] 2.0.1 blank screen upon startup HOT 3
- [BUG] Endless black screens HOT 1
- [BUG] Installing any module results in crashloop HOT 3
- [BUG] Crash on installing any module HOT 5
- Add Keep System font option HOT 4
- Add a border around buttons in Light theme HOT 5
- Let the last module in the list to climb higher HOT 4
- [BUG] Module's name can be shown in different font size HOT 5
- Indicator that there are more buttons than visible on the screen HOT 2
- [Issue] Not showing Upgradable modules HOT 3
- Features to change app name or pkg. HOT 2
- [Help] Another Root Access Bug HOT 3
- [BUG] Simplified Chinese option not work HOT 2
- [BUG] Snag issue in new update HOT 2
- F-Droid can't build - Java 19 HOT 1
- [BUG] Incompatibility with "ReVanced" HOT 1
- ISSUES HAVE MIGRATED
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from foxmagiskmodulemanager.