SQLCipher 3.3.0 Release

2015-03-26 08:00:00 -0400

We are happy to announce the availability of SQLCipher 3.3.0. This release is based on the upstream SQLite 3.8.8.3 release which included many beneficial updates including a general performance increase of over 20% for the same number of CPU cycles from the previous release. Specifics for the SQLite 3.8.8.3 release are covered here.

Directly within SQLCipher we have included a few additional items as well. First, we introduced a new PRAGMA, cipher_default_page_size, a mechanism which facilitates setting a non-default page size value to be used when attaching databases. Next we have added API hooks to support FIPS integration within the OpenSSL crypto provider. SQLCipher for Android has also been updated with community edition binaries available here. Binaries that ship with support for OpenSSL have been upgraded to the latest 1.0.2a release. Commercial binary updates to be available soon.

On App Store Pricing

2015-03-03 08:45:00 -0500

At the Daring Fireball blog John Gruber notes that he and his co-conspirators at Q Branch have increased the price of their excellent note-taking app Vesper:1

Put another way, we’re going to charge something sane or die trying. We tried following the iOS App Store trend by pricing Vesper at just $2.99 for months. It didn’t work. Prices like that are not sane, and not sustainable, at least for well-crafted productivity apps. So Q Branch is drawing a line in the sand, and we hope other iOS developers will follow.

We’re doing the same for our password manager app, STRIP. For a long time we’ve charged pretty low prices for both STRIP for iPhone (and for iPad), and STRIP for Mac: $4.99 and $9.99, respectively. The Android and Windows versions, same deal. Prices this low are not sustainable when we’re doing steady, iterative design and development while maintaining the apps and adapting them to major new hardware and operating system changes.

With the release of the 2.5 series of STRIP for Windows and OS X we’ve increased our prices. STRIP is now $9.99 on Android and iOS, $19.99 on OS X and Windows. The desktop releases are now available as 14-day free trials, which should help people get a feel for the software before deciding whether to make a purchase.

If you’ve purchased STRIP, thank you for supporting our work, it means so much to us!

1. I’ve always wanted Codebook to be more like Vesper, having based it on John’s writing on “The Untitled Note Problem,” and I love the design decisions that they’ve made.

I recently had the opportunity to bend the ear of Brent Simmons, one of the Q branch team making Vesper, during the CocoaLove2 conference in Philadelphia last October. I couldn’t help pitching SQLCipher as a datastore for Vesper. He listened thoughtfully and it was great having the chance to talk. Following the writing of these folks over the last few years has been really educational for me as a software developer and designer.

2. Yes, a footnote for a footnote! CocoaLove was fantastic. I highly recommend it. Check out the talks by William Van Hecke and Laura Savino to see what I mean.

STRIP for OS X 2.5.0 Release

2015-03-03 08:30:00 -0500

STRIP for OS X 2.5 Auto Suggest feature

STRIP for OS X 2.5.0 was released about 12 days ago, just wanted to make a note here for any who hadn’t seen the post in our discussion forum. For Mac App Store customers, the update should be available soon, the app is currently under review. This may be the nicest release of this version yet, with a lot of bug fixes, an improved login experience, window handling, and auto-suggest for frequently used values.

STRIP for Windows 2.5.4 Release

2015-02-02 09:30:00 -0500

STRIP for Windows 2.5.4 has just been released, a priority patch release that addresses application locking.

STRIP for Windows 2.5.4 Update Notification

You should receive a notification the next time you launch STRIP for Windows which looks like the above image. Please upgrade as soon as possible. Feel free to contact us at support@zetetic.net should you have any questions.

POODLE Response: SSLv3 Disabled for Zetetic Sites and Services

2014-10-15 15:30:00 -0400

Google has just published a serious new web vulnerability, POODLE, affecting SSL 3.0. Because this flaw that can leak data, and compromise user and system security, we have disabled SSL 3.0 for our sites and services, including zetetic.net and Tempo. Unfortunately there is no other viable workaround at this time.

Please note that this should not affect the vast majority of users running on modern supported browsers, however IE 6 on Windows XP will no longer be able to connect to these sites. Please feel free to contact us if you have an questions or concerns.