dsh-plugin-tether 0.1.5 → 0.1.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/package.json +6 -6
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,22 @@
|
|
|
2
2
|
|
|
3
3
|
本文件记录面向用户的变化。每个版本的这一节会原样作为该版本 Release 的说明。
|
|
4
4
|
|
|
5
|
+
## 0.1.6
|
|
6
|
+
|
|
7
|
+
### 安全
|
|
8
|
+
|
|
9
|
+
- **身份密钥与配对白名单改为仅属主可读**。此前这些文件以默认权限写入,在 Unix 上通常是 `0644`——同一台机器上任何本地用户都能读到 `identity.key`(32 字节裸私钥),读到即可冒充主机、给自己签发配对码,从而取得对 dsh 界面的完整访问权。
|
|
10
|
+
|
|
11
|
+
这比此前文档中已说明的边界更宽:那条边界要求攻击者能在机器上执行代码,而本问题**只需读权限**。
|
|
12
|
+
|
|
13
|
+
受影响的是 Linux 与 macOS;Windows 无 POSIX 权限位,不受影响。**升级即修复**:程序在读取既有密钥时会一并收紧权限,不需要重新配对,主机身份也不会变。
|
|
14
|
+
|
|
15
|
+
由 [@kagura-agent](https://github.com/kagura-agent) 报告([#1](https://github.com/zexadev/dsh-tether/issues/1))。
|
|
16
|
+
|
|
17
|
+
### 修复
|
|
18
|
+
|
|
19
|
+
- **私密文件改为原子写**。此前是就地截断再写,写入过程中掉电或进程被杀会留下半截文件;对 `identity.key` 而言等同于主机身份丢失,所有已配对的手机都需重新配对。现改为先写临时文件再 rename,目标文件要么是旧内容要么是新内容。
|
|
20
|
+
|
|
5
21
|
## 0.1.5
|
|
6
22
|
|
|
7
23
|
### 新增
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-plugin-tether",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.6",
|
|
4
4
|
"description": "Reach the DeepSeek Harness on your dev machine from your phone — across networks, through no server at all (iroh P2P)",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"dsh",
|
|
@@ -38,10 +38,10 @@
|
|
|
38
38
|
"@deepseek-ai/dsh-user-approval": { "optional": true }
|
|
39
39
|
},
|
|
40
40
|
"optionalDependencies": {
|
|
41
|
-
"dsh-tether-host-darwin-arm64": "0.1.
|
|
42
|
-
"dsh-tether-host-darwin-x64": "0.1.
|
|
43
|
-
"dsh-tether-host-linux-arm64": "0.1.
|
|
44
|
-
"dsh-tether-host-linux-x64": "0.1.
|
|
45
|
-
"dsh-tether-host-win32-x64": "0.1.
|
|
41
|
+
"dsh-tether-host-darwin-arm64": "0.1.6",
|
|
42
|
+
"dsh-tether-host-darwin-x64": "0.1.6",
|
|
43
|
+
"dsh-tether-host-linux-arm64": "0.1.6",
|
|
44
|
+
"dsh-tether-host-linux-x64": "0.1.6",
|
|
45
|
+
"dsh-tether-host-win32-x64": "0.1.6"
|
|
46
46
|
}
|
|
47
47
|
}
|