[IT-1E8] Inspect the published Windows ZIP and Android APK

Open Beginner friendly
#588 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
68/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
android, python
Domain
release, security

Research direction

Read the ## 1E8 section of the linked item file, then download the newest Windows ZIP from Lightning-downloads and the newest app APK into separate empty scratchpad folders. List each archive, check for the named sensitive files and paths, scan binaries with the patterns from 1E7, and compare APK permissions with packaging/android-permissions.txt. Record the checked versions and findings; if adding a release check, use tools/release_check.py and tests/test_release_check.py and run the specified pytest command.

Written by the indexing model from the issue text.

Description

Step IT-1E8 of #543 · design and history

Do:
Files: none changed; the newest release's ZIP from Lightning-downloads and the APK from the app's newest release, downloaded into their own empty scratchpad folder.
Do: list each archive (unzip -l); fail on any .git/, tests/, *.db/*.sqlite, recovery.txt, keys.json, *.pem/*.key/*.jks/*.p12, .env, a Documents/Lightning path or a name from the sample households outside lightning/samples/; run strings over the binaries for the patterns of 1E7; compare the APK's permissions (aapt dump permissions or apkanalyzer) with packaging/android-permissions.txt. If a check belongs in every release, add it to tools/release_check.py with a test in tests/test_release_check.py (create it if missing) in its own pull request.
Done when: this file has one dated line naming the two versions checked and "N findings filed privately"; any new release check passes python -m pytest tests/test_release_check.py -q.

Can: opus
Blocked by: none
Read: the section ## 1E8 of the item file above


Generated by Claude Code

Dominant language
Python
Stars
1
Forks
0
Avg merge
2h 30m
Merged PRs (30d)
364

Getting set up

Open in Codespaces

Starts the project's dev container in your browser, under your own GitHub account.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from LightningEg/Lightning

All issues in LightningEg/Lightning

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.