freeRASP 4.3.0

• Android SDK version: 17.0.1
• iOS SDK version: 6.13.0

React Native

Added

• Added killOnBypass to TalsecConfig that configures if the app should be terminated when the threat callbacks are suppressed/hooked by an attacker (Android only) (Issue 65)
• Added API for timeSpoofing callback into ThreatEventActions (Android only)
• Added API for unsecureWifi callback into ThreatEventActions (Android only)
• Added API for allChecksFinished callback into new RaspExecutionStateEventActions object
• Added matched permissions to SuspiciousAppInfo object when malware detection reason is suspiciousPermission

Fixed

• Resolved potential collision in threat identifiers

Android

Added

• Added killOnBypass method to the TalsecConfig.Builder that configures if the app should be terminated when the threat callbacks are suppressed/hooked by an attacker Issue 65
• We are introducing a new capability, detecting whether the device time has been tampered with (timeSpoofing)
• We are introducing a new capability, detecting whether the location is being spoofed on the device (locationSpoofing)
• We are introducing a new capability, detection of unsecure WiFi (unecureWifi)
• Removed deprecated functionality Pbkdf2Native and both related native libraries (libpbkdf2_native.so and libpolarssl.so)
• Added new RaspExecutionState which contains onAllChecksFinished() method, which is triggered after all checks are completed.
• Added matched permissions to SuspiciousAppInfo object when malware detection reason is suspiciousPermission
• New option to start Talsec, Talsec.start() takes new parameter TalsecMode that determines the dispatcher thread of initialization and sync checks (uses background thread by default)
• Capability to check if another app has an option REQUEST_INSTALL_PACKAGES enabled in the system settings to malware detection

Fixed

• ANR issue caused by registerScreenCaptureCallback() method on the main thread
• NullPointerException when checking key alias in Keystore on Android 7
• JaCoCo issue causing MethodTooLargeException during instrumentation
• DeadApplicationException when calling Settings.Global.getInt or Settings.Secure.getInt on invalid context
• AndroidKeyStore crashes causing java.util.concurrent.TimeoutException when calling finalize() method on Cipher (GC issues)
• Fixed issue with late initializers and TalsecMode coroutines scopes

Changed

• Shortened the value of threat detection interval
• Refactoring of internal architecture of SDK that newly uses Coroutines to manage threading
• Update of internal dependencies and security libraries

iOS

Changed

• Updated internal dependencies