Roadstr v0.5.9 is out — a security hardening release. 🔒
An independent audit turned up a few real issues, now fixed:
• Favorites sync was auto-publishing on every edit for anyone signed
in with Nostr, with no separate opt-in despite the app claiming it
was optional. Now off by default — a real "Sync automatically"
toggle in Settings.
• Logging in used to publish a profile-visibility event even if you
never touched the setting, tying your key to "uses Roadstr" for no
reason. Only publishes now if you actually chose public visibility.
• A relay outage could get hammered every ~1.25s forever instead of
backing off — fixed the reconnect logic.
• Capped a few unbounded growth paths in the Nostr event stream that a
flood of throwaway identities could have abused.
• Store listing no longer claims things that weren't true (GPS
handling, offline routing, license).
Full changelog + APKs: 
Free, open-source, no tracking, no Google dependency.
#Nostr #Roadstr #OpenStreetMap #GrowNostr #FuckGoogle
GitHub
Release Roadstr v0.5.9 · roadstrapp/roadstr-app
Roadstr 0.5.9
Security hardening from an independent audit: privacy opt-ins, Nostr relay
resilience, and honest store/network claims.
Changed
Favo...
