mirror of
https://code.gri.mw/GUI/grim.git
synced 2026-07-10 00:47:28 +00:00
2578a35cf7
Security (audit H-2): the legacy update check is OFF by default. It hit code.gri.mw (GRIM's gitea) directly over CLEARNET via the old HttpClient — leaking "this user runs Goblin" metadata on every wallet-list view, which defeats the nothing-clearnet mixnet model, and it pointed at the wrong project's releases anyway. Opt-in only until reworked to run over the mixnet against Goblin's own releases. Build: with the Nym SDK linked in-process there's no sidecar binary to embed or bundle. linux/build_release.sh drops the GOBLIN_NYM_UNIX_BIN embed (AppImage is one self-contained binary); scripts/android.sh stops bundling nym-socks5-client into jniLibs (the cdylib links nym-sdk directly); scripts/nym-android.sh deleted.