Giter Club home page Giter Club logo

Comments (5)

androidacy-user avatar androidacy-user commented on August 17, 2024

Duplicate of #305

from foxmagiskmodulemanager.

f000bar avatar f000bar commented on August 17, 2024

Of course people didn't read the changelog. A changelog is for understanding what features have changed - the expectation is that the app will otherwise continue to work as expected, and any inconsistent settings state would be handled by the app itself.

This could have been avoided by added a version table/file. If it exists (and isn't too old) nothing to change. If it doesn't, wipe the database, initialize, and write the version.
At the very least the app could detect whatever incorrect state it's in, and rather than displaying nothing, show a "please wipe your data" message.

from foxmagiskmodulemanager.

androidacy-user avatar androidacy-user commented on August 17, 2024

Of course people didn't read the changelog. A changelog is for understanding what features have changed - the expectation is that the app will otherwise continue to work as expected, and any inconsistent settings state would be handled by the app itself.

This could have been avoided by added a version table/file. If it exists (and isn't too old) nothing to change. If it doesn't, wipe the database, initialize, and write the version.
At the very least the app could detect whatever incorrect state it's in, and rather than displaying nothing, show a "please wipe your data" message.

I assure you every possible solution was explored and none was found, and any such table would have been unreadable anyway due to encryption changes.

In addition, it is not unusual for changelogs to list incompatibilities, breakages, etc, especially for a major version bump.

Do not assume that just because something doesn't work as you expected that we did not try to find a solution. And do not blame us when you don't read the changelog our website editor took the time out of their day to write.

from foxmagiskmodulemanager.

f000bar avatar f000bar commented on August 17, 2024

Encryption? You're in control of that.
I just looked at /data/data/com.fox2code.mmm/shared_prefs/com.fox2code.mmm_preferences.xml, and the language/country preferences are all in plaintext ... on both versions of the app.

I did not blame you, I said there are always options.
Do not blame us - the users - for missing something that was confusingly communicated and easily missed, or expecting us to read through something we're likely to expect to just work - because that's the expectation set by 99.9% of apps. Plan for your users to be lazy.

The upgrade notice in the app took us straight to the releases page in github, and the APKs:
https://github.com/Fox2Code/FoxMagiskModuleManager/releases/tag/v2.0.1
There could have been a note about clearing data there, but there was not.

That page had a link to the changelog:
https://www.androidacy.com/magisk-module-manager-v2-0-1/
a 500 word affair that (1) leaves the comparability note until the very end - after a plug for membership, and (2) says "you may need to clear app data" when to read it here sure makes it sound like everyone will.
It's also not technically a changelog, it's high-level release notes.

Both sides have some responsibility here, it's not an either-or. Could users have done a better job? Absolutely. Could the team have been clearer in their communication? Also yes.

from foxmagiskmodulemanager.

androidacy-user avatar androidacy-user commented on August 17, 2024

We're not playing this game. We apologize for the inconveniences this caused but we do not intend to reverse our stance on encrypting everything viably encryptable.

FoxMMM offers a very attractive attack vector and an unfortunate side effect of encrypting shared preferences (where encryption is under our control and not under the control of external libraries or the system) so that malicious modules can't manipulate them is the app is crashing too early in the application lifecycle, and instead of the system letting our crash handler - that we do in fact have in place - catch the resulting crash, it just stubbornly keeps restarting the app without showing anything to the user, resulting in an ANR instead of a proper crash.

For far too long, apps with root access have taken the stance that since you have root security is moot and have not taken security seriously. We don't intend to follow that flawed logic.

In addition we do follow semantic versioning, and incremented the major version code due to potential and expected breakages.

That being said I will mention something to our editor about potentially editing the wording of the warning in the release notes in our next meeting.

With everything said, I'm locking this issue because I don't feel anything productive is going to come out of it continuing. I may unlock it in a few days.

from foxmagiskmodulemanager.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.