bitchat

permissionlesstech/bitchat

Fork 0

mirror of https://github.com/permissionlesstech/bitchat.git synced 2026-07-27 13:05:19 +00:00

Commit Graph

Author	SHA1	Message	Date
Ovi	bbe1793506	fix: toctou in boundPeerID identified by codex	2026-01-28 10:52:02 +00:00
Ovi	af7a664685	Fix iOS BLE mesh authentication bypass chain in BLEService - Bind sender IDs to BLE connection UUIDs for peripherals and centrals to prevent spoofing - Enforce explicit RSR request/response validation and remove legacy TTL==0 RSR path - Remove TTL==0 unconditional acceptance for messages and file transfers - Ensure gossip sync caching only occurs after a packet is accepted - Preserve self‑sync TTL==0 dedup exception without weakening authentication	2026-01-27 15:14:21 +00:00

Author

SHA1

Message

Date

Ovi

bbe1793506

fix: toctou in boundPeerID identified by codex

2026-01-28 10:52:02 +00:00

Ovi

af7a664685

Fix iOS BLE mesh authentication bypass chain in BLEService

- Bind sender IDs to BLE connection UUIDs for peripherals and centrals to prevent spoofing
- Enforce explicit RSR request/response validation and remove legacy TTL==0 RSR path
- Remove TTL==0 unconditional acceptance for messages and file transfers
- Ensure gossip sync caching only occurs after a packet is accepted
- Preserve self‑sync TTL==0 dedup exception without weakening authentication

2026-01-27 15:14:21 +00:00