Skip to content
Snippets Groups Projects
  1. Sep 07, 2016
    • akwizgran's avatar
      Merge branch '633-blog-posts-from-other-users-sometimes-have-bold-nicknames' into 'master' · fc2213c0
      akwizgran authored
      Fix view recycling issue with author name typeface
      
      Closes #633
      
      See merge request !305
      fc2213c0
    • akwizgran's avatar
      Merge branch... · 34f9311f
      akwizgran authored
      Merge branch '638-illegalstateexception-when-navigating-out-of-combined-feed-and-back-in' into 'master'
      
      Allow Blog Controller listener to re-attach
      
      Closes #638
      
      See merge request !304
      34f9311f
    • akwizgran's avatar
      Merge branch... · 28fd84b2
      akwizgran authored
      Merge branch '632-badtokenexception-if-rss-error-dialog-is-show-after-activity-is-destroyed' into 'master'
      
      Only show RSS Feed Import Failed Dialog when Activity lives
      
      Closes #632
      
      See merge request !303
      28fd84b2
  2. Sep 06, 2016
    • Torsten Grote's avatar
      Merge branch 'socks-socket' into 'master' · 91e529a9
      Torsten Grote authored
      Fetch RSS feeds via Tor
      
      This patch replaces jsocks with our own minimal SOCKS 5 implementation, which is compatible with Android's OpenSSL hacks (see discussion on #599 for the horrifying details). This allows us to use OkHttp over Tor to fetch RSS feeds.
      
      It turns out that SOCKS 5 without authentication is a really simple protocol: https://tools.ietf.org/html/rfc1928
      
      Closes #599.
      
      See merge request !308
      91e529a9
  3. Sep 05, 2016
  4. Sep 02, 2016
  5. Sep 01, 2016
  6. Aug 31, 2016
  7. Aug 30, 2016
    • akwizgran's avatar
      Merge branch '494-implement-backend-for-reblogging-and-blog-comments' into 'master' · d8a9d83c
      akwizgran authored
      Add support for comments and reblogging to Blog Client
      
      Comments and reblogs need to depend on the post they refer to.
      Since message dependencies are limited to one group,
      the post and also the comments need to be wrapped
      when commented on or reblogged to another blog (and group).
      
      For this reason, in addition to comments, two new wrapping message types
      are introduced. They retain all data of the original messages and allow
      for reconstruction and signature verification.
      
      This MR breaks backwards compatibility with old blog posts.
      It removes the content type, title and parent ID from the post.
      
      Furthermore, it includes one commit that replaces the `Message` in `MessageSharedEvent` with a `MessageId`.
      
      Closes #494
      
      See merge request !285
      d8a9d83c
    • akwizgran's avatar
      Merge branch '364-introduction-responses-should-be-signed' into 'master' · 70a44e8a
      akwizgran authored
      Sign Introduction Information to be able to discover MITM attack
      
      The local introducee doesn't know whether each piece of information received from the introducer originates from the remote introducee or has been replaced by the introducer, i.e. whether the introducer is carrying out a man-in-the-middle attack.
      
      The introduction protocol doesn't aim to detect or prevent man-in-the-middle attacks. We only aim to establish that if the remote identity public key is not replaced then the remote ephemeral public key, transport properties and timestamp are not replaced either. This MR adds a MAC and a signature to the introduction protocol's ACK message to fulfill that aim. See #364 for the detailed security argument.
      
      Later, when the local introducee verifies that the remote identity public key belongs to a particular person (#513), she can also be sure that the remote ephemeral public key, transport properties and timestamp originated from that person.
      
      Closes #364
      
      See merge request !297
      70a44e8a
    • Torsten Grote's avatar
      Calculate and verify signature and MAC for Introduction ACKs · fc5a7290
      Torsten Grote authored
      Before the introducee sends her ACK,
      she derives a master key from the ephemeral shared secret as before.
      
      Two nonces and a MAC key are then derived from the master key.
      The local introducee signs one of the nonces and calculates a MAC
      over her own identity public key, ephemeral public key,
      transport properties and timestamp.
      The local introducee includes the signature and MAC in her ACK.
      
      On receiving the remote introducee's ACK,
      the local introducee verifies the signature and MAC.
      Should the verification fail, an ABORT is sent to the introducer and
      the remote introducee that was added as inactive is deleted again.
      fc5a7290
    • Torsten Grote's avatar
      Introduction Client: Add MAC and signature to ACK message · 7db0e447
      Torsten Grote authored
      The MAC and signature are not yet generated and verified.
      This will happen in a later commit.
      7db0e447
    • Torsten Grote's avatar
  8. Aug 29, 2016
  9. Aug 26, 2016
  10. Aug 25, 2016
Loading