Amber 6.6.9 · Signing permissions
Revoked should mean revoked
The Android signer’s new release fixes permissions that could remain active after withdrawal, along with clipboard cleanup and a possible loss of key material.
Taking permission away did not always stop it working. Amber releases version 6.6.9 with a fix for revoked permissions that could remain effective until the cache was cleared, and for reject rules being ignored when an app was marked fully trusted.
The same release clears a copied secret key, encrypted secret key or seed words after sixty seconds even when Amber is backgrounded or closed. Another fix addresses possible loss of the secret key and seed words when changing the setting that requires the device to be unlocked.
There are connection and interface repairs too. Connections approved from the multi-request screen should now receive their reply, on the relays named in the connection request. That screen groups requests by app, displaying its name, icon and request count, with remembered choices kept separately for each app.
These are changes to the signer’s handling of permission and key material. The announcement names three security advisories; its emphasis is on making the user’s choices take effect.

