Zero Breach Toolkit 0.1.9.
What changed
- Browsers: "the browser was running" is now said only for a real lock. Other refusals say permission was denied and what to do; on a Mac they point to Full Disk Access.
- The empty
LOCKfile a running Chromium browser holds, Safari's standard cookie link and a large but valid write-ahead log are no longer reported as gaps. - Browser icon stores are read in bounded steps, so a crafted icon database cannot use up memory.
- Downloaded indicator lists are used only if they match the copies pinned for this release. After moving to 0.1.9, update the lists once (menu option 8, or
--update). Lists fetched with--update --latestneed--lateston the scan too. - Ad-network matches note that apps showing ads, such as the new Outlook for Windows, can record them too.
- The release check on GitHub now also compares the downloadable file and checks both signatures.
Full list in CHANGELOG.md.
Verify before running
zero-breach-toolkit.py SHA-256: 8574f7e701bc64e459a2c19f28f8192f0c9d286ed900c95f1ed57a074fb2e828
Signed with key C24E C92B 12D6 670A 2516 065F 9B4D 5754 99AF A53C. See docs/VERIFYING.md.