Kev paub hauv paus Hauv qab hood

Txheeb xyuas qhov tsim

Qhib qhov chaw tsuas yog pab yog tias tus lej koj tab tom khiav yog tus lej uas yog luam tawm. Nymchat yog tsim los txiav txim siab yog li koj tuaj yeem tshawb xyuas koj tus kheej, los ntawm sab hauv app los yog los ntawm lub davhlau ya nyob twg.

Nplooj ntawv no yog tshuab txhais kom yooj yim. Cov lus Askiv thawj yog cov version uas siv.

Reproducible tsim

Tsim lub app emits a build-manifest.json muaj cov lus cog tseg, a SHA-256 hash ntawm txhua qhov kev pabcuam HTML, JavaScript thiab CSS khoom vaj khoom tsev, thiab ib qho bundleHash tshaj qhov khoom vaj khoom tsev tag nrho.

Qhov tso zis tsuas yog nyob ntawm qhov chaw cov ntsiab lus - txawm tias lub sijhawm sau cia yog qhov cog lus lub sij hawm es tsis yog lub sij hawm tsim khiav - yog li leej twg rebuilding tib yam commit tau txais cov ntaub ntawv byte-zoo tib yam thiab tib yam bundleHash.

Ib qho GitHub Action tom qab ntawd rov tsim dua txhua qhov kev cog lus ntawm nws tus kheej thiab kos npe ua pov thawj ntawv pov thawj rau lub hash thiab cov manifest, yog li ntawd muaj ib tug kos npe rau tying a bundleHash rau kev cog lus nyob rau hauv lub repository, tsim los ntawm lwm yam uas tsis yog lub kev xa tawm.

Yuav Ua Li Cas Txog dialog checks

Txog nyob rau hauv header sau daim tshev nyob, hauv koj tus browser.

Lub Nymchat Hais txog kev sib tham, qhia cov version, tsim kev ncaj ncees thiab lav canary raws li txoj cai. — Cov lus hais txog: version, tsim kev ncaj ncees, lav canary thiab ib txoj kab ncaj nraim rau tus tsim tawm.

Nws rov ua dua txhua cov khoom vaj khoom tsev nplooj ntawv tab tom ua haujlwm, hashes nrog Web Crypto API, thiab piv rau qhov tshwm sim. Tom qab ntawd - thiab qhov no yog qhov tseem ceeb - nws recomputes cov bundleHash los ntawm hashs nws tsuas yog xam, tsis yog los ntawm txhua yam uas manifest thov, thiab zoo li ntawd nyob rau hauv lub repository tus kos npe pov thawj los ntawm GitHub API.

Qhov ntawd yog dab tsi txwv kev xa tawm los ntawm vouching rau nws tus kheej: pab hloov cov ntaub ntawv ua ke nrog ib qho kev sib piv manifest tseem ua tsis tau, vim hais tias cov recomputed hash tsis muaj ntawv pov thawj.

xwm txheej	txhais tau tias
& tshawb xyuas; Verified official app (n/n)	Txhua qhov khoom vaj khoom tsev sib tw, cov khoom siv rov ua dua tshiab tau lees paub los ntawm qhov chaw cia khoom, thiab nplooj ntawv no tau txais kev pab los ntawm official domain.
⚠ Verified build · tsis yog lub official app	Cov cai yog qhov tseeb thiab lees paub, tab sis qhov no yog daim iav ntawm lwm tus sau. Daim iav tsis tuaj yeem tshem tawm cov lus ceeb toom no yam tsis ua pov thawj tsis tiav.
✗ Tsis sib haum	Lub cuab tam tsis hash rau qhov manifest hais.
✗ Kev tsim tsis raug cai	Lub recomputed bundle hash tsis muaj ntaub ntawv pov thawj los ntawm lub chaw cia khoom - ib qho kev tshwm sim ntawm tus kheej.
⚠ Cov ntawv pov thawj tsis tuaj yeem ncav cuag	GitHub API tsis tuaj yeem ncav cuag, yog li tsis tuaj yeem kuaj xyuas ob txoj kev.

Txheeb xyuas koj tus kheej

Rebuild lub cog lus hais txog lub npe dialog thiab sib piv:

git clone https://github.com/Spl0itable/NYM
cd NYM
git checkout <commit shown in the About dialog>
npm ci
npm run build   # prints "Build hash: <bundleHash>"

Cov ntawv luam tawm yuav tsum phim ob qho tib si hauv Cov Lus Qhia thiab ib qho hauv qhov kev cog lus ntawd build-provenance run summary. Koj tuaj yeem tshawb xyuas qhov kos npe ncaj qha nrog GitHub CLI:

gh attestation verify dist/build-manifest.json --repo Spl0itable/NYM

Lub warrant canary

Daim ntawv cog lus canary yog ib nqe lus, luam tawm ntawm lub sijhawm teem tseg, uas tus tsim tawm muaj tsis yog tau txais tsab ntawv ceeb toom tseem ceeb uas lawv txwv tsis pub tshaj tawm - a Tsab Ntawv Kev Ruaj Ntseg Hauv Tebchaws, FISA xaj. Tus tsim tawm tuaj yeem yuam kom nyob twj ywm txog xws li kev txiav txim, tab sis tsis tuaj yeem yuam kom dag, yog li tus canary mus stale lossis ploj mus nws tus kheej lub teeb liab.

Nws nyob hauv canary.json ntawm lub hauv paus ntawm lub repository thiab yog nqa ncaj qha los ntawm GitHub, yog li nws keeb kwm tuaj yeem tshawb xyuas ntawm nws tus kheej ntawm txhua qhov chaw xa tawm hais. Qhov Hais txog dialog xim-codes nws:

Xim	txhais tau tias
Ntsuab - txhua yam meej	Kos npe, tam sim no, thiab kos npe sib tw nrog tus tsim tawm tus yuam sij. Tsis tau txais kev txiav txim zais cia.
Daj - dhau sijhawm, lossis tsis meej	Nws tsis tau rov kho dua los ntawm nws cov hnub teev, lossis nws `allClear` chij yog cuav. Kev txiav txim uas ntsiag to tsis tuaj yeem txiav tawm.
Liab - kos npe tsis raug, lossis ploj mus	Qhov kos npe tsis phim tus tsim tawm tus yuam sij, lossis cov ntaub ntawv raug tshem tawm tag nrho. Kho qhov no raws li kev ceeb toom loj.

Freshness thauj tog rau nkoj

Tus kos npe canary embeds qhov tseeb Bitcoin thaiv qhov siab thiab hash thaum lub sijhawm kos npe. Qhov hash tsis tuaj yeem paub ua ntej qhov thaiv muaj, uas ua pov thawj tias canary yog kos npe tom qab ib lub ntsiab lus tshwj xeeb hauv lub sijhawm tsis yog kos npe ua ntej hauv ntau lub hlis ua ntej. Cov lus hais txog txuas lub thauj tog rau nkoj mus rau block explorer yog li koj tuaj yeem tshawb xyuas nws.