FIIP DriveUpdatesDev builds

Dev builds, fresh from the lab.

These are the builds our lab and the people testing with us run. They change often and some of them will break. If nobody handed you a dev build, you want the release page at updates.fiipdrive.com.

Dev builds

No dev builds yet.

The first one lands here the moment it has passed the release gate, signed and notarized like every build after it.

Check a download yourself

Each build above has its own copy of these, filled in. In order, they prove the zip is the one we published, the app inside is signed by us and notarized by Apple, and the zip carries the signature FIIP Drive checks before it installs.

  1. SHA-256. shasum -a 256 fiipDrive-<version>-<build>.zip prints the same hash as the build's card.
  2. Code signature. codesign --verify --deep --strict says valid on disk and satisfies its Designated Requirement.
  3. Gatekeeper. spctl -a -vv says accepted and source=Notarized Developer ID, with origin Developer ID Application, team Y27CNN4MVA.
  4. EdDSA. The Swift snippet on each card checks the zip's signature against the public key below, the same key built into FIIP Drive. It needs Xcode or the Command Line Tools and nothing else.

How an update reaches your Mac

  1. FIIP Drive asks https://dev-updates.fiipdrive.com/appcast.xml for the feed, over HTTPS only. Dev builds read this feed; release builds read updates.fiipdrive.com and never see a dev build.
  2. Each build in the feed carries an EdDSA (Ed25519) signature of its exact zip. FIIP Drive checks it against the public key built into the copy you already have, and refuses a zip that does not match, whoever served it.
  3. The app inside is signed with our Developer ID (team Y27CNN4MVA) under the hardened runtime, notarized by Apple and stapled, so Gatekeeper can check it offline.
  4. Nothing downloads in the background. FIIP Drive installs only when you press Update, and never while a file is still being saved. Your files are not touched by an update.
  5. Build numbers only go up, so a feed cannot walk your Mac back to an older build. A published zip is never replaced or deleted: the storage behind this page refuses both.
Feed
https://dev-updates.fiipdrive.com/appcast.xml
EdDSA public key
Kn/twyrmQON9HD01rx6snioLZYIQXzagifsfq3KhPsI=
Code signature
Developer ID Application, team Y27CNN4MVA, notarized and stapled
Architecture
Apple silicon only
Transport
HTTPS only, TLS 1.2 or newer, HSTS for a year
This page
Static. No JavaScript, no cookies, nothing loaded from another site.