briar issueshttps://code.briarproject.org/groups/briar/-/issues2021-12-09T00:18:37Zhttps://code.briarproject.org/briar/briar/-/issues/187Implement I2P plugin2021-12-09T00:18:37Zstr4dImplement I2P plugin@akwizgran expressed a keen interest in this happening eventually. The basic idea is to add I2P as a transport, so that contacts can choose to communicate over I2P if they wish. It should be similar to the Tor plugin, and will probably b...@akwizgran expressed a keen interest in this happening eventually. The basic idea is to add I2P as a transport, so that contacts can choose to communicate over I2P if they wish. It should be similar to the Tor plugin, and will probably be easier to implement (because I2P has a native Java API).https://code.briarproject.org/briar/briar/-/issues/445iOS and iPhone2023-03-28T12:51:28ZSimó Albert i BeltraniOS and iPhoneUnfortunatelly I know iPhone users :(
Could they run Briar?Unfortunatelly I know iPhone users :(
Could they run Briar?https://code.briarproject.org/briar/briar-gtk/-/issues/87Port to GTK 4.02021-02-01T11:52:09ZNicoPort to GTK 4.0GTK 4.0 got released some days ago: https://blog.gtk.org/2020/12/16/gtk-4-0/
There are some cool new things in there that are all mentioned in the blog post. However, I marked this issues as blocked for now because I don't want to trans...GTK 4.0 got released some days ago: https://blog.gtk.org/2020/12/16/gtk-4-0/
There are some cool new things in there that are all mentioned in the blog post. However, I marked this issues as blocked for now because I don't want to transition to GTK 4.0 before [Debian stable ships it](https://packages.debian.org/experimental/libgtk-4-0). I think we have good chances to have it in the next Debian release coming in 2021. If we focused only on Flatpak, we could transition to GTK 4.0 today, though.
Related issues: https://code.briarproject.org/briar/briar-gtk/-/issues/80 and all the issues linked in there.
Related links:
* [Migrating from GTK 3.x to GTK 4 - GTK documentation](https://developer.gnome.org/gtk4/4.0/gtk-migrating-3-to-4.html)GTK 0.2.0-beta1https://code.briarproject.org/briar/website/-/issues/18Add RSS icon to website2020-11-15T11:52:28ZakwizgranAdd RSS icon to websiteA user asked for an RSS icon to be added to the website. The icon could point to the news feed produced by Hugo:
https://briarproject.org/news/index.xmlA user asked for an RSS icon to be added to the website. The icon could point to the news feed produced by Hugo:
https://briarproject.org/news/index.xmlhttps://code.briarproject.org/briar/briar/-/issues/1201Trust indicator in conversation view2022-11-18T16:46:06ZakwizgranTrust indicator in conversation viewA user asked for trust indicators to be shown in the conversation view.
"It might also be useful to show some sort of security information to be able to check that we are talking directly to who we think we are without a man in the midd...A user asked for trust indicators to be shown in the conversation view.
"It might also be useful to show some sort of security information to be able to check that we are talking directly to who we think we are without a man in the middle."https://code.briarproject.org/briar/briar/-/issues/1027Titles for blog posts2020-11-19T13:49:41ZakwizgranTitles for blog postsA tester asked for the ability to add a title to a blog post.A tester asked for the ability to add a title to a blog post.https://code.briarproject.org/briar/briar/-/issues/1285Support OPML feeds2020-11-18T02:31:16ZakwizgranSupport OPML feedsA user asked for the ability to import OPML feeds as well as RSS. It looks like ROME has a module for OPML: http://rometools.github.io/rome-opml/A user asked for the ability to import OPML feeds as well as RSS. It looks like ROME has a module for OPML: http://rometools.github.io/rome-opml/https://code.briarproject.org/briar/briar/-/issues/706Migrate crypto to libsodium2020-11-21T16:39:44ZakwizgranMigrate crypto to libsodiumUsing libsodium via JNI would give us constant-time implementations of Curve25519 and Ed25519 (see #236) and a fast implementation of Argon2 (see #170). Our crypto_secretbox implementation could be replaced, and we could use crypto_box i...Using libsodium via JNI would give us constant-time implementations of Curve25519 and Ed25519 (see #236) and a fast implementation of Argon2 (see #170). Our crypto_secretbox implementation could be replaced, and we could use crypto_box instead of ECIES for crash reports and feedback. BLAKE2s would remain in Java (libsodium only has BLAKE2b). If we replaced the Fortuna generator with libsodium's RNG, we could get rid of Bouncy Castle.
https://github.com/joshjdevl/libsodium-jnihttps://code.briarproject.org/briar/briar/-/issues/59Traffic analysis prevention layer2022-11-01T14:51:18ZakwizgranTraffic analysis prevention layerThe traffic analysis prevention (TAP) layer is responsible for preventing an observer from determining the volume and timing of data carried by a BTP stream.
What should the interfaces between BTP, TAP and the transport plugin look like...The traffic analysis prevention (TAP) layer is responsible for preventing an observer from determining the volume and timing of data carried by a BTP stream.
What should the interfaces between BTP, TAP and the transport plugin look like? Does the plugin need to be able to ask for a specific stream length, other than setting an upper bound? Are there any transports for which sending data as quickly as possible is preferable (from a TAP point of view) to sending it at a limited rate?
The TAP layer could adjust the transmission rate, increasing it if there's data waiting and decreasing it if not. What could the adversary learn by observing changes in the transmission rate and/or manipulating congestion?
Padding could be handled at the BTP layer by choosing a padding multiplier for each stream. The TAP layer would then sit between BTP and the transport and handle chopping and delaying the stream -- that is, segmenting the encrypted, padded stream according to some segment size distribution, and writing segments to the transport according to some inter-segment delay distribution.
The padding, size and delay distributions can be used to produce a characteristic traffic 'shape' for each device or pair of devices:
http://www.cs.kau.se/philwint/pdf/wpes2013.pdf
We can conceal traffic bursts by throttling the output of the TAP layer so that bursts are smoothed out. However, we should make good use of intermittently available transports -- if we send too slowly, the transport connection may be lost before we finish.https://code.briarproject.org/briar/briar-desktop/-/issues/261Upload to Debian main2022-12-12T10:16:43ZNicoUpload to Debian mainIn order to be able to call `apt install briar-desktop`, we need to bring Briar Desktop into Debian's official repositories, specifically its `main` flavor and not `contrib` or `non-free`.
Being in Debian would mean that virtually all i...In order to be able to call `apt install briar-desktop`, we need to bring Briar Desktop into Debian's official repositories, specifically its `main` flavor and not `contrib` or `non-free`.
Being in Debian would mean that virtually all its descendants like Ubuntu and elementaryOS will also contain this package.
However, getting briar-desktop into Debian is potentially blocked by many issues. This is an epic issue to investigate and manage those issues:
* ~~Kotlin is not yet in Debian~~ Seems like [it's now available in `sid`](https://packages.debian.org/sid/kotlin) :tada:
* Briar most likely isn't allowed to ship its own _tor_ binary, especially with focus on descendants like Tails. See https://code.briarproject.org/briar/briar/-/issues/2095
* All packages must be build offline, therefore we can't download gradle dependencies while building
* Open question: do we have to create a new package for each Gradle dependency?
In case we want to do our own apt repository for the time being, keep in mind that there's a draft in https://code.briarproject.org/briar/briar-apt-repo/-/tree/main.
Sub-issues:
* https://code.briarproject.org/briar/briar-desktop/-/issues/50https://code.briarproject.org/briar/briar-gtk/-/issues/97Accessibility User Testing2021-02-08T12:12:33ZNicoAccessibility User TestingWe should test whether Briar GTK is accessible to users with [different types of disability](https://developer.gnome.org/accessibility-devel-guide/stable/idm140487279365936.html.en) by using tools like [Orca](https://wiki.gnome.org/Proje...We should test whether Briar GTK is accessible to users with [different types of disability](https://developer.gnome.org/accessibility-devel-guide/stable/idm140487279365936.html.en) by using tools like [Orca](https://wiki.gnome.org/Projects/Orca).
Relevant links:
* [GNOME Accessibility Developers Guid](https://developer.gnome.org/accessibility-devel-guide/stable/index.html.en)
* [Accessibility in GTK 4](https://blog.gtk.org/2020/10/21/accessibility-in-gtk-4/)GTK 0.2.0-beta1https://code.briarproject.org/briar/website/-/issues/31Design brochure2021-01-31T05:07:50ZCleopatraDesign brochureIt'll be nice to have a brochure that can be printed and handed out at events.
**Size:** 8.5 x 5.5 inches
We could have 2 versions of the brochure, with the same front and different backs:
- **Freedom & Privacy Online:** The target au...It'll be nice to have a brochure that can be printed and handed out at events.
**Size:** 8.5 x 5.5 inches
We could have 2 versions of the brochure, with the same front and different backs:
- **Freedom & Privacy Online:** The target audience here is the general public - helping educate people about the reasons that protecting their privacy is important.
- **Activist & aid workers:** This is meant for activists and people working in disaster response - showing people how they can use Briar to communicate when the internet is not available.
**Front content:**
- Briar's mission
- Link to learn more
- How to contribute to the project
- Briar's main features
- How to download
**Back content:**
- Who uses Briar
- Main features
- Use cases
- How Briar workshttps://code.briarproject.org/briar/briar-gtk/-/issues/86Provide firejail profile2020-11-20T16:52:36ZNicoProvide firejail profileA user of Briar GTK said:
> Contributing a firejail profile would also help [with getting Briar GTK into Debian]!A user of Briar GTK said:
> Contributing a firejail profile would also help [with getting Briar GTK into Debian]!https://code.briarproject.org/briar/briar-gtk/-/issues/73Redesign contact list2022-01-28T10:54:10ZNicoRedesign contact listInspiration by the GNOME Project:
![mobile-shell-convergence](/uploads/c7c585bd2133b1e37cd70487b7baf6a5/mobile-shell-convergence.png)
Source: https://gitlab.gnome.org/Teams/Design/os-mockups/-/blob/f69fa82f8676582d900af8716522a27ddd77d...Inspiration by the GNOME Project:
![mobile-shell-convergence](/uploads/c7c585bd2133b1e37cd70487b7baf6a5/mobile-shell-convergence.png)
Source: https://gitlab.gnome.org/Teams/Design/os-mockups/-/blob/f69fa82f8676582d900af8716522a27ddd77d87f/mobile-shell/mobile-shell-convergence.pnghttps://code.briarproject.org/briar/briar/-/issues/1736Investigate whether library desugaring in Android Studio 4 allows us to upgra...2020-11-15T15:49:34ZakwizgranInvestigate whether library desugaring in Android Studio 4 allows us to upgrade any dependenciesAndroid Studio 4 adds support for certain Java 8+ APIs that aren't natively supported on older versions of Android, which has prevented us from upgrading certain dependencies (eg newer versions of H2 require ThreadLocalRandom). Find out ...Android Studio 4 adds support for certain Java 8+ APIs that aren't natively supported on older versions of Android, which has prevented us from upgrading certain dependencies (eg newer versions of H2 require ThreadLocalRandom). Find out whether upgrading to AS 4 would allow us to upgrade any dependencies.https://code.briarproject.org/briar/briar/-/issues/1690Add private message deletion to user manual2020-11-15T17:10:49ZakwizgranAdd private message deletion to user manualCleopatraCleopatrahttps://code.briarproject.org/briar/website/-/issues/15Open external links in a new tab using rel="noopener"2020-11-15T17:13:26ZakwizgranOpen external links in a new tab using rel="noopener"Before the Hugo migration, external links opened in a new tab using `rel="noopener noreferrer"`. We had to remove `noopener` because Hugo didn't support it. But @grote has pointed out that [it's now possible with Hugo](https://code.briar...Before the Hugo migration, external links opened in a new tab using `rel="noopener noreferrer"`. We had to remove `noopener` because Hugo didn't support it. But @grote has pointed out that [it's now possible with Hugo](https://code.briarproject.org/briar/website/merge_requests/24#note_39615):
> Hugo 0.62 now supports [Markdown Render Hooks](https://gohugo.io/getting-started/configuration-markup/#markdown-render-hooks) which can be used for things like adding `rel="noopener"` attributes on all links.https://code.briarproject.org/briar/website/-/issues/13Update screenshots2021-01-15T14:19:48ZakwizgranUpdate screenshotsCleopatraCleopatrahttps://code.briarproject.org/briar/briar/-/issues/1337Scroll to bottom when writing new post in private group2020-11-18T01:46:13ZakwizgranScroll to bottom when writing new post in private groupUser feedback: "In private conversations, when you tap the text bar to begin typing and it expands, the message history lifts up as well so that you are still seeing the most recent message above what you are typing. In groups, that is n...User feedback: "In private conversations, when you tap the text bar to begin typing and it expands, the message history lifts up as well so that you are still seeing the most recent message above what you are typing. In groups, that is not the case. When the typing bar expands, it covers the most recent messages and you have to scroll down to see them. I find the behavior in the private conversations more convenient."https://code.briarproject.org/briar/briar/-/issues/1172Briar doesn't use Tor when connected via Bluetooth dial-up networking2020-11-18T22:38:10ZakwizgranBriar doesn't use Tor when connected via Bluetooth dial-up networkingUser feedback: "On my Android device I use dial up network (DUN) via a BlueTooth connection to a phone. With no mobile network and no WiFi, Briar doesn't find the internet connection and doesn't use it for Tor, while all other apps inclu...User feedback: "On my Android device I use dial up network (DUN) via a BlueTooth connection to a phone. With no mobile network and no WiFi, Briar doesn't find the internet connection and doesn't use it for Tor, while all other apps including OrBot do."