briar issueshttps://code.briarproject.org/briar/briar/-/issues2022-10-10T18:35:57Zhttps://code.briarproject.org/briar/briar/-/issues/1226### after a contact's name are confusing2022-10-10T18:35:57ZAndres### after a contact's name are confusingThere are ### after contacts' names in the list of members of a group. These are different for different contacts? What do they mean? Why are they there?There are ### after contacts' names in the list of members of a group. These are different for different contacts? What do they mean? Why are they there?https://code.briarproject.org/briar/briar/-/issues/1224Explain when no transports can be used for adding a contact2020-08-12T16:23:17ZakwizgranExplain when no transports can be used for adding a contactWhen adding a contact in person, there are various circumstances where we can tell as soon as we've scanned the contact's QR code that we won't be able to communicate. For example:
* Both devices support Bluetooth, but neither device kno...When adding a contact in person, there are various circumstances where we can tell as soon as we've scanned the contact's QR code that we won't be able to communicate. For example:
* Both devices support Bluetooth, but neither device knows its own Bluetooth address (Android 8, see #1147)
* Both devices support wifi but they're on different networks (see #1223, #1178)
* One device only supports Bluetooth, the other only supports wifi
If the user declines to activate Bluetooth and there's no wifi connection, we can tell even sooner that we won't be able to communicate.
We should detect these situations and explain the problem to the user in an actionable way.https://code.briarproject.org/briar/briar/-/issues/1223Detect whether contact being added is on same wifi network2020-11-18T22:05:45ZakwizgranDetect whether contact being added is on same wifi networkWhen adding a contact in person, it would be useful to be able to detect whether the contact is on the same wifi network. We could do this by including a short hash of the SSID in the QR code.When adding a contact in person, it would be useful to be able to detect whether the contact is on the same wifi network. We could do this by including a short hash of the SSID in the QR code.https://code.briarproject.org/briar/briar/-/issues/1220Notification when messages are shown on the display (read receipts)2022-11-18T17:24:07ZmicressorNotification when messages are shown on the display (read receipts)I have
* [X] I have searched open and closed issues for duplicates
There is a read confirmation in the Signal messenger. As soon as the message is shown on the display, the colour of the good signs changes.
Is something like this alre...I have
* [X] I have searched open and closed issues for duplicates
There is a read confirmation in the Signal messenger. As soon as the message is shown on the display, the colour of the good signs changes.
Is something like this already implemented in briar? I didn't find a hint in the wiki and the manual.https://code.briarproject.org/briar/briar/-/issues/1215Low memory shutdowns2021-04-26T14:04:39ZakwizgranLow memory shutdownsThe low memory shutdown seems to be triggered more easily than expected.
May be related to #1198.The low memory shutdown seems to be triggered more easily than expected.
May be related to #1198.https://code.briarproject.org/briar/briar/-/issues/1214Don't allow introductions if introducee doesn't support introduction client2022-01-06T14:43:23ZakwizgranDon't allow introductions if introducee doesn't support introduction clientIf the ClientVersioningManager says a contact doesn't support the same major version of the introduction client as us, don't allow an introduction request to be sent.If the ClientVersioningManager says a contact doesn't support the same major version of the introduction client as us, don't allow an introduction request to be sent.https://code.briarproject.org/briar/briar/-/issues/1209Unable to add users with Samsung galaxy S8 as contacts2020-11-18T22:17:31ZJoshUnable to add users with Samsung galaxy S8 as contactsI have a OnePlus 3 and I am able to add anyone as contact unless they have a galaxy S8. I have tried pairing via Bluetooth, rebooting both phones, nothing gets the process to work.
Both people can be added as contacts if the invite feat...I have a OnePlus 3 and I am able to add anyone as contact unless they have a galaxy S8. I have tried pairing via Bluetooth, rebooting both phones, nothing gets the process to work.
Both people can be added as contacts if the invite feature is used, but then messages can only be sent when we are both online, never in offline mode.https://code.briarproject.org/briar/briar/-/issues/1208Explain what the clock icon means2022-11-29T14:31:01ZPratiwirExplain what the clock icon meansI am getting a clock symbol for each new chat bubble. I switched to tor, the connection is working. 3 days of trial left. I go to the main contacts screen and select the top left three bars menu, at the bottom left both internet and wifi...I am getting a clock symbol for each new chat bubble. I switched to tor, the connection is working. 3 days of trial left. I go to the main contacts screen and select the top left three bars menu, at the bottom left both internet and wifi symbols are green.
Each contact displays how long ago I typed a message.
I'd like to see some way to get the server status if possible, ideally the response time could be translated to a color with a note of the last round trip time.
I don't know the server ip, in fact multiping on android seems to be working fine over tor.
Just don't know if the server is down or it is some other problem.https://code.briarproject.org/briar/briar/-/issues/1206Install validation2020-11-18T22:29:19ZPratiwirInstall validationThere have been discussions about hardware db keys but these security features of course assume that users have the correct original software on their devices. If this isn't the case then messages could be leaking.
Some general backgrou...There have been discussions about hardware db keys but these security features of course assume that users have the correct original software on their devices. If this isn't the case then messages could be leaking.
Some general background.
Play store, so far as I know, isn't solely located in jurisdictions free of secret court orders, although there are servers for different regions. Distributed software sometimes does vary, depending on the ip address from which it is requested. I have experienced this when doing md5 checks myself.
Play store also has a serious weakness, it works by using google account login, so even if you download over tor you can't be completely anonymous and you will have difficulty creating any google account using tor.
So Play Store might not be advisable if you think you may have been adversely profiled.
In addition there is also the possibility that https can be intercepted and compromised.
https://www.eff.org/deeplinks/2011/10/how-secure-https-today
Either issue might affect users targeted by ip address and not using tor.
Downloading as an apk file at least gives the possibility to check the hash sum. Also downloading over tor will make it difficult for individual users to be targeted.
So, given these considerations, and that apk files may be used frequently I think it is probably important to have file hashes readily available on a website. Will this be the case?
I am also wondering if there is a way to do an application integrity check from a console as root? Perhaps a small script could be available for this purpose? System file checks can be a good added level of security. I would like to think the application could do this automatically for all users, but it seems this might be difficult to guarantee, and the only really secure way would be via the console. Has anyone any ideas on this?https://code.briarproject.org/briar/briar/-/issues/1205Check that registration methods aren't called after startup2020-11-18T22:30:29ZakwizgranCheck that registration methods aren't called after startupVarious registration methods are meant to be called at injection time, before `LifecycleManager#startServices()` is called. Add checks to ensure they aren't called later in the lifecycle (e.g. due to a singleton being created lazily).Various registration methods are meant to be called at injection time, before `LifecycleManager#startServices()` is called. Add checks to ensure they aren't called later in the lifecycle (e.g. due to a singleton being created lazily).https://code.briarproject.org/briar/briar/-/issues/1204Device pipes2020-11-18T22:31:15ZPratiwirDevice pipesI would like a feature where it is possible to send a data stream from one device to another. This would be useful for relaying local internet of things data, current ip address, etc. Perhaps briar could receive and send data between oth...I would like a feature where it is possible to send a data stream from one device to another. This would be useful for relaying local internet of things data, current ip address, etc. Perhaps briar could receive and send data between other programs running on each device, to a particular pipe session that could be set up between users. The linux pipe system might be possible to use.
https://unix.stackexchange.com/questions/342787/how-to-use-pipe-to-apply-a-text-to-a-program
Tor has the unique ability to be immune to dynamic ip address changes, set up vpn etc, but it may be possible to extend briar to enable easily set up data links, if so then it would be easier for the end user and attractive for geeks.https://code.briarproject.org/briar/briar/-/issues/1203Attractive backgrounds2020-11-18T22:31:55ZPratiwirAttractive backgroundsI would like to suggest more personalised user features.
Change colors of bubbles and backgrounds. Be able to shift the overall displayed emoticon colors to personal taste. Add backgrounds for other users of a group chat or forum to ac...I would like to suggest more personalised user features.
Change colors of bubbles and backgrounds. Be able to shift the overall displayed emoticon colors to personal taste. Add backgrounds for other users of a group chat or forum to access.
If possible allow for development of scripts to animate dynamic backgrounds, but strictly limited to the background area of the chat and bubble boundary outlines, up to the user to invoke. If this were possible it could add features that other messaging services don't have.https://code.briarproject.org/briar/briar/-/issues/1202Minimise long messages in UI2020-11-18T22:32:22ZakwizgranMinimise long messages in UIUser feedback: "It would be nice to be able to minimize very long text bubbles. This is a standard feature on many computer notebook environments."User feedback: "It would be nice to be able to minimize very long text bubbles. This is a standard feature on many computer notebook environments."https://code.briarproject.org/briar/briar/-/issues/1201Trust indicator in conversation view2022-11-18T16:46:06ZakwizgranTrust indicator in conversation viewA user asked for trust indicators to be shown in the conversation view.
"It might also be useful to show some sort of security information to be able to check that we are talking directly to who we think we are without a man in the midd...A user asked for trust indicators to be shown in the conversation view.
"It might also be useful to show some sort of security information to be able to check that we are talking directly to who we think we are without a man in the middle."https://code.briarproject.org/briar/briar/-/issues/1200Menu options to jump to start/end of conversation2020-11-18T22:34:04ZakwizgranMenu options to jump to start/end of conversationUser feedback: "We should be able to go to the start or end of the chat."User feedback: "We should be able to go to the start or end of the chat."https://code.briarproject.org/briar/briar/-/issues/1198Briar crashes or restarts on Samsung GT-I90822020-11-18T22:44:40ZakwizgranBriar crashes or restarts on Samsung GT-I9082@Pratiwir reported that Briar repeatedly crashes or restarts when switching between foreground apps on the Samsung GT-I9082.
Unfortunately the logs are too short to show anything that happened before Briar restarted. They just show the ...@Pratiwir reported that Briar repeatedly crashes or restarts when switching between foreground apps on the Samsung GT-I9082.
Unfortunately the logs are too short to show anything that happened before Briar restarted. They just show the later stages of Briar starting up.
Maybe we should change the ACRA config to increase the amount of logcat data attached to the feedback.
* Android version: 4.1.2
* Phone Model: Samsung GT-I9082 (baffinxx)
* Briar version: 0.16.20 (89f50bb)https://code.briarproject.org/briar/briar/-/issues/1197Manual section needed for Bluetooth and Wi-fi.2020-11-18T22:43:47ZPratiwirManual section needed for Bluetooth and Wi-fi.I initially loaded Briar on three devices and added each to the other as a contact, as in the manual. I had bluetooth turned on and wi-fi too. The manual says that after scanning the QR code the devices will exchange information and the ...I initially loaded Briar on three devices and added each to the other as a contact, as in the manual. I had bluetooth turned on and wi-fi too. The manual says that after scanning the QR code the devices will exchange information and the contacts will be added. This works fine, but what isn't clear is how the process takes place. "You must meet up with the person you want to add as a contact." This implies that bluetooth or local Wi-fi is being used silently. This assumption creates confusion because I then assumed that in Android one just has to have the services activated and the rest is taken care of, as you might expect for easy use in a crisis.
I now think that for the devices to send local messages one has to host a hotspot over Wi-fi or bluetooth. So this should be clear in the manual, how to set up the Wi-fi links or bluetooth links properly and what the requirement is for adding contacts. Is it local bluetooth turned on, paired devices required or not, Wi-fi transmitters active, or logged onto same network, full internet access? Can both QR codes be sent by secure e-mail and scanned by the camera at remote locations at the same time, what is the time wimdow?
"If the internet's down, Briar can sync via Bluetooth or Wi-Fi, keeping the information flowing in a crisis." This is the only information in the manual and potentially wrong assumptions about it make actual testing and getting it working more difficult and confusing than it needs to be. The manual is quite compact, but needs additional concise information about what is going on.CleopatraCleopatrahttps://code.briarproject.org/briar/briar/-/issues/1192Chat resets to top not bottom.2022-05-14T16:34:26ZPratiwirChat resets to top not bottom.In a briar beta chat if I send an emoticon smiley then hit the keyboard symbol to use characters the chat resets to the top and I have to scroll all the way down to the end. It should be positioned at the end after using the keyboard sym...In a briar beta chat if I send an emoticon smiley then hit the keyboard symbol to use characters the chat resets to the top and I have to scroll all the way down to the end. It should be positioned at the end after using the keyboard symbol.https://code.briarproject.org/briar/briar/-/issues/1191Cannot add contact on Android 8.1/LineageOS2019-02-28T17:17:33ZakwizgranCannot add contact on Android 8.1/LineageOS* Android version: 8.1.0
* Briar version: 0.16.19
* Phone model: LeEco LEX720 (ZL1_CN)
* User feedback: "Adding a first contact fails."
The log shows that the camera is receiving preview frames and decoding them quickly, but no QR code ...* Android version: 8.1.0
* Briar version: 0.16.19
* Phone model: LeEco LEX720 (ZL1_CN)
* User feedback: "Adding a first contact fails."
The log shows that the camera is receiving preview frames and decoding them quickly, but no QR code is found. Probably a one-off, but I'm recording this in case it indicates a problem (e.g. selecting the wrong camera or cropping the wrong part of the preview image).https://code.briarproject.org/briar/briar/-/issues/1187Incognito Keyboard2023-03-09T10:55:41ZTorsten GroteIncognito KeyboardSignal has a feature called Incognito Keyboard which seems to request to disable personalized learning from user input which some proprietary keyboard apps do. This might be a useful feature for us as well. Signal does it like this:
htt...Signal has a feature called Incognito Keyboard which seems to request to disable personalized learning from user input which some proprietary keyboard apps do. This might be a useful feature for us as well. Signal does it like this:
https://github.com/signalapp/Signal-Android/blob/ba849bce2c90287e820a3008e9dc9a1b14de19fc/src/org/thoughtcrime/securesms/components/ComposeText.java#L154-L156
So it seems to be a quick change.