{"action":"published","release":{"url":"https://api.github.com/repos/google/nogotofail/releases/927396","assets_url":"https://api.github.com/repos/google/nogotofail/releases/927396/assets","upload_url":"https://uploads.github.com/repos/google/nogotofail/releases/927396/assets{?name}","html_url":"https://github.com/google/nogotofail/releases/tag/v1.1.0","id":927396,"tag_name":"v1.1.0","target_commitish":"dev","name":"","draft":false,"author":{"login":"chadbrubaker","id":9422938,"avatar_url":"https://avatars.githubusercontent.com/u/9422938?v=3","gravatar_id":"","url":"https://api.github.com/users/chadbrubaker","html_url":"https://github.com/chadbrubaker","followers_url":"https://api.github.com/users/chadbrubaker/followers","following_url":"https://api.github.com/users/chadbrubaker/following{/other_user}","gists_url":"https://api.github.com/users/chadbrubaker/gists{/gist_id}","starred_url":"https://api.github.com/users/chadbrubaker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chadbrubaker/subscriptions","organizations_url":"https://api.github.com/users/chadbrubaker/orgs","repos_url":"https://api.github.com/users/chadbrubaker/repos","events_url":"https://api.github.com/users/chadbrubaker/events{/privacy}","received_events_url":"https://api.github.com/users/chadbrubaker/received_events","type":"User","site_admin":false},"prerelease":false,"created_at":"2015-02-06T18:31:31Z","published_at":"2015-02-06T18:34:29Z","assets":[],"tarball_url":"https://api.github.com/repos/google/nogotofail/tarball/v1.1.0","zipball_url":"https://api.github.com/repos/google/nogotofail/zipball/v1.1.0","body":"Changes since 1.0:\r\n\r\nImproved connection throughput and reduced latency.\r\n\r\nAdd serverkeyreplace TLS/SSL attack to test that clients verify that the\r\nserver possesses the private key corresponding to the SSL certificate\r\nthat was presented to the client.\r\n\r\nData handlers that can modify the connection data are now run\r\nprobabilistically with the same probability as set with -p or by the\r\nclient. Passive detection handlers will still run on all connections.\r\n\r\nNogotofail clients will now receive vulnerability notifications when\r\nHTTP is detected. To prevent spamming the Android client supports muting\r\non a per (application, vulnerability) level.\r\n\r\nRemoved the -a and -v nogotofail.mitm flags and made them default.\r\nThe -b and -q flags were added to bridge all connections from\r\nnon-clients and limit logging respectively.\r\n\r\nImproved robustness of earlyCCS TLS/SSL attack.\r\n\r\nAdded a basic android test app under nogotofail/test/android with a\r\nhandful of vulnerabilities."}}