[ADDED] A more generic element listing controller, now used by the
search controller and all elements listing controller.
[IMPROVED] Improved change detection and UI handling in the element
listing controllers.
[FIXED] Bug with previewing generated password types for
non-generated elements.
[REMOVED] Facebook SDK.
[ADDED] Social framework integration for Twitter & Facebook.
[MOVED] User migration warning state moved into MainVC, out of
data model.
[UPDATED] Major overhaul of Core Data integration. Multiple contexts
and making sure we're on the right thread and the right
context even for read access.
[FIXED] Some iOS 6 deprecation fixes.
[FIXED] Some VC rotation issues.
[FIXED] Working migration of old store to new store.
[FIXED] We shouldn't be holding references to CoreData objects anywhere.
In that light, the user NSMenuItems have been fixed.
[MOVED] Extract user migration out of iOS specific codebase.
[UPDATED] iCloud persistence manager.
[ADDED] Mac: Hotkey for signing the user out.
[IMPROVED] Mac: Menu item handling and usability.
[FIXED] Behavior of the Mac menu item and appearance of the password
window.
[ADDED] Disabling menu items while not usable and explaining
disabled items with tooltips.
[UPDATED] Facebook integration bumped for iOS 6.
[FIXED] Bringing Mac version back up to date. Compiles again and
runs with UI bugs.
[ADDED] Mac: User selection.
[FIXED] Sending email with no recipient caused a crash.
[FIXED] Duplicate persistence coordinator.
[UPDATED] Crashlytics and Localytics SDKs.
[UPDATED] Don't continue the Localytics session when device locked.
[UPDATED] Put Localytics communication on HTTPS for confidentiality.
[ADDED] Tagging screens in Localytics.
[REMOVED] Cleaned up some check points that weren't really useful.
[ADDED] Added a few new checkpoints with new functionality.
[ADDED] An "other apps" page that introduces Gorillas and DeBlock.
[IMPROVED] Help is now toggled with a drag handle instead of an action
button.
[UPDATED] A nil type is never OK. Crash early if it is so.
[UPDATED] Set crashlytics identifiers using its userIdentifier and userName property for good metadata.
[FIXED] Make sure the MOC has a PSC with stores when returning it.
[FIXED] Don't reset the store for just any open error! Only if it's actually incompatible.
[IMPROVED] Remove timestamps from Crashlytics and TestFlight logs, they already provide them.
[FIXED] Avoid crashes in some odd cases where there's no type set.
[FIXED] Import fixes:
- Wait for MOC to become available.
- Progress UI while working.
- Import files exported with a different master password.
- Core Data crashes.
[RENAMED] Site's User name -> Login name.
[FIXED] Core Data crashes related to using entities from old MOCs.
[REMOVED] Disable TestFlight for release, it doesn't work anyway.
[FIXED] Properly handle unlock screen when there is no MOC yet.
[FIXED] Some log statements format strings & arguments.
[IMPROVED] Don't block when MOC is not yet ready, just return nil.
[IMPROVED] Outdated tip links to info, icon links to site search.
[IMPROVED] Minor improvements to error handling during import.
[ADDED] Word wall: Show some random dictionary words while user
thinks of a new master password to give him some
inspiration.
[IMPROVED] Only select user after he choose to reset.
[IMPROVED] Ugly backdrops in the guide images cleaned up.
[FIXED] Export of sites should now include a password version field.
[FIXED] Filename to save exported passwords into should use day of
the month instead of day of the year.
[FIXED] No search predicate was set when search scope button wasn't
set. As a result, sites from other users showed up.
[IMPROVED] A master password key is now better abstracted in an object.
[IMPROVED] A master password algorithm is now better astracted in an
object.
[ADDED] Elements now have a specific algorithm version.
[ADDED] Automatic/explicit migration of elements.
[ADDED] Searching outdated elements.
[ADDED] Allow saving a user name per site. This is an optional
addition, toggled by tapping the new settings icon.
Obviously user names can't be recovered after loss.
[ADDED] Versioning and explicit migration to MPElementEntity.
[ADDED] Upgrade button in case the element needs explicit migration.
[ADDED] Messages in Crashlytics and TestFlight logs upon
initialization so we can easily see it worked and what the
client's versioning looks like.
[IMPROVED] Only show firstRun UI tooltips once.
[IMPROVED] Automatically select the latest user upon load of unlock.
[IMPROVED] Automatically select the user when his password is reset.
[IMPROVED] Hide active element when logging a user out.
[ADDED] Page controller in guide to see where in the guide you are.
[ADDED] FontReplacer to be able to "use" Exo from IB (by
substituting "Futura").
[FIXED] A crash when loading the main VC because of the reset
password gesture recogniser.
[IMPROVED] Font in tables to standard system fonts.
[IMPROVED] Guide content positioning and sizing making space for pager.
[IMPROVED] Use action sheets instead of alerts when showing destructive
action choices.
[IMPROVED] Make tappable regions at least 44x44pt.
[IMPROVED] Title/message for alert/sheets.
[REMOVED] Apptentive is now implemented by a standard iOS mail
composer window and can optionally include logs.
[IMPROVED] Better inf-level logging of what's going on.
[AUDITED] Made sure no personal is going out through inf+ levels.
[ADDED] User preference for default password type.
[RENAMED] Secure type to Maximum Security.
[FIXED] Logging bug in password generation.
[ADDED] Confirmation popup after new user creation.
[UPDATED] Crashlytics.
[IMPROVED] Sending logs and configuration to crashlytics, added
sendDebugInfo option that allows the user to choose to send
more info. Now also sending a device identifier.
[ADDED] Avatar selection dialog when a new user is created.
[UPDATED] Algorithm updated to reflect advice from randombit.net
cryptography list:
- Add in a salt (user name) to defeat rainbow tables.
- Add in a fixed string to scope the algorithm and avoid
colliding with someone else's similar or identical
algorithm (also helps protect against precalculated
rainbow tables).
- Use HMAC instead of plain SHA to avoid SHA weaknesses.
The old implementation wasn't vulnerable to extension
attacks or other known weaknesses, but HMAC is a safer
choice and will bring up less suspicion.
- Prefix strings by length as an extra precautionary
measure against possible bugs in hash functions.
