AeroFTP

## [4.1.7] - 2026-08-08

### Summer Release: AeroRsync Extended Attributes, a Rebuilt Duplicate Finder, and Two Independent Pre-Tag Audits

The release that goes looking for the bugs that do not announce themselves. AeroRsync gains extended attributes end to end against stock rsync, `-X` is on by default on Unix, and the file-list, out-of-band and oversized-datum paths that carry them are bounded against a hostile peer. The Find Duplicates dialog is rebuilt around the thing it was missing: the choice of which copy to keep, with real hashes, real distances (the fuzzy "distance" was a hash value, so any sort by similarity was meaningless), live scan progress, thumbnails and per-file sizes. Seventeen provider trash views become one sortable table. A hostile-name sweep across every writable provider profile found six defects, four of which could make `sync --delete` remove the user's own local files, and one XML entity bug that mangled any filename with `&` next to a space in every listing. On Linux, six destructive actions had been asking a confirmation nobody ever saw, because WebKitGTK does not implement `window.confirm`: on that platform an account could be deleted with no question