- Aug 29, 2016
-
-
Torsten Grote authored
Comments and reblogs need to depend on the post they refer to. Since message dependencies are limited to one group, the post and also the comments need to be wrapped when commented on or reblogged to another blog. For this reason, in addition to comments, two new wrapping message types are introduced. They retain all data of the original messages and allow for reconstruction and signature verification. This commit breaks backwards compatibility with old blog posts. It removes the content type, title and parent ID from the post message structure.
-
Torsten Grote authored
-
akwizgran authored
Fix various notification bugs Fixes #539, #564, #568. Depends on !276. See merge request !286
-
- Aug 26, 2016
-
-
Torsten Grote authored
Add MAC function to crypto component See merge request !295
-
Torsten Grote authored
Define iteration order of BdfDictionary Closes #618 See merge request !296
-
akwizgran authored
-
akwizgran authored
-
- Aug 25, 2016
-
-
Torsten Grote authored
Use Briar's IoUtils.copy(), not H2's IOUtils.copy() Our implementation closes both streams, H2's implementation leaves them open. Closes #614. See merge request !293
-
akwizgran authored
-
- Aug 24, 2016
-
-
Torsten Grote authored
Blog controller thread safety This patch removes the mutable list of posts from the blog controller to make it thread-safe, and adds a cache of message bodies to speed up reloads. Closes #555. See merge request !276
-
akwizgran authored
Cleanup Gradle and Proguard to fix connectedCheck Closes #597 See merge request !284
-
akwizgran authored
Merge branch '311-audit-crash-report-and-feedback-fields-for-sensitive-or-identifying-information' into 'master' Remove sensitive information from crash and feedback reports This depends on MR !290 and removes also the crash report settings. Closes #311 See merge request !291
-
akwizgran authored
Scrub addresses before logging them MAC, IP and onion addresses are now scrubbed before logging to ensure we don't leave any sensitive information in plaintext on the device or send it in crash reports or feedback. * Bluetooth MAC addresses keep the first and last octets * IPv4 addresses keep the first and last octets * IPv6 addresses should be scrubbed completely (couldn't test) * Onion addresses keep the first three characters If an address is invalid it will not be scrubbed to enable debugging, because it is most likely not sensitive. Closes #592 See merge request !290
-
Torsten Grote authored
Closes #311
-
Torsten Grote authored
-
Torsten Grote authored
-
akwizgran authored
Add feed title to imported entries Also fixes one bug where a new feed was not saved and improved HTML stripping a bit. Closes #483 See merge request !287
-
Torsten Grote authored
-
Torsten Grote authored
-
Torsten Grote authored
This also fixes a bug where new feeds was not added properly.
-
Torsten Grote authored
Also fixes one bug where a new feed was not saved and improved HTML stripping a bit.
-
Torsten Grote authored
Upgrade gradle to 2.14.1 and gradle plugin to 2.1.3. See merge request !292
-
akwizgran authored
-
- Aug 23, 2016
-
-
akwizgran authored
-
akwizgran authored
-
Torsten Grote authored
Add hidden service address for dev reports Closes #573 See merge request !289
-
akwizgran authored
-
- Aug 22, 2016
-
-
akwizgran authored
Server-side code for accepting crash reports and feedback * Moved some shared code for copying InputStreams to OutputStreams into a utility class * Modified the dev report sender to send one report per connection * Easier to handle on the server side * If the connection fails after sending any reports, they don't need to be resent * Tor will reuse the circuit, so it's cheap * Added server-side code for accepting dev reports * We need to protect the server's resources from DoS attacks * Reports can't be larger than 1 MB * Connections are limited to an average rate of one per minute * The rate limiter uses a token bucket to allow bursts of up to 1,000 connections * If the rate limit is exceeded, connection attempts will fail - clients will retry next time they sign in * The limits can be raised when we move to a bigger server (and when we have some users) See merge request !288
-
akwizgran authored
-
Torsten Grote authored
Stop supporting Gingerbread Closes #566 See merge request !278
-
akwizgran authored
-
Torsten Grote authored
-
Torsten Grote authored
-
akwizgran authored
-
akwizgran authored
This allows simpler server-side code, and a failure part-way through sending won't require restarting from the beginning next time.
-
akwizgran authored
-
akwizgran authored
-
- Aug 21, 2016
-
-
Ernir Erlingsson authored
-
- Aug 20, 2016
-
-
akwizgran authored
-