mirror of
https://github.com/permissionlesstech/bitchat-android.git
synced 2026-09-19 04:59:59 +00:00
90d6eedc90
The extraction rules excluded exactly two SharedPreferences files, and one of them is no longer written: EncryptionService moved its key store from "bitchat_crypto" to "bitchat_crypto_secure". Because these lists are allow-by-default, everything not named is eligible — which is the live key store, SecureIdentityStateManager's "bitchat_identity", the geohash alias and conversation registries, and private_conversations.db, the whole private message history. android:allowBackup="false" covers cloud backup. It does not settle device-to-device migration: for apps targeting Android 12 or higher the platform documents that D2D transfer cannot be disabled on some manufacturers' devices, so the <device-transfer> section is the only thing between a phone migration and a copy of the identity keys and every private message. Make both files deny-by-default across every storage domain instead of naming individual files. A name-based list has to be updated every time storage is renamed or added, and this one already wasn't.