briar issueshttps://code.briarproject.org/groups/briar/-/issues2020-11-21T20:28:14Zhttps://code.briarproject.org/briar/briar/-/issues/36Break up CryptoComponent interface2020-11-21T20:28:14ZakwizgranBreak up CryptoComponent interfaceThis monolithic interface should be separated into smaller interfaces relevant to different components.This monolithic interface should be separated into smaller interfaces relevant to different components.https://code.briarproject.org/briar/briar/-/issues/35Break up DatabaseComponent interface2020-11-21T20:28:33ZakwizgranBreak up DatabaseComponent interfaceThis monolithic interface should be separated into smaller interfaces relevant to different components.This monolithic interface should be separated into smaller interfaces relevant to different components.https://code.briarproject.org/briar/briar/-/issues/31Use built-in error correction for modem plugin?2022-04-18T09:39:27ZakwizgranUse built-in error correction for modem plugin?
Newer dialup modems (presumably the majority of those still in use) support error correction via V.42 LAPM and/or MNP. This may be sufficient to carry BTP without an intermediate reliability layer. If so, the reliability code (SLTP) co...
Newer dialup modems (presumably the majority of those still in use) support error correction via V.42 LAPM and/or MNP. This may be sufficient to carry BTP without an intermediate reliability layer. If so, the reliability code (SLTP) could be removed, reducing the size of the codebase and making BTP connections harder to identify: they would simply be SLIP-framed random data. (SLIP-framed UDP packets full of random data would be another easily implemented option, if that would be less likely to stand out.)
AT commands for enabling error correction (on which modems?):
* AT\N2: Require error correction, report NO CARRIER if the other end doesn't support it.
* AT&Q5: Try to negotiate an error corrected link.https://code.briarproject.org/briar/briar-desktop/-/issues/340Detect when LAN IP address changes2022-04-18T09:39:50ZakwizgranDetect when LAN IP address changesThis already works on Android, but how to do it on the desktop is an open question.This already works on Android, but how to do it on the desktop is an open question.https://code.briarproject.org/briar/briar/-/issues/26Contact details screen2023-06-16T18:29:14ZakwizgranContact details screen* Indication of whether the contact is connected (and via which transports)
* Indication of whether the contact was added directly or introduced
* Indication of whether the contact is using a mailbox
* Indication of whether what features...* Indication of whether the contact is connected (and via which transports)
* Indication of whether the contact was added directly or introduced
* Indication of whether the contact is using a mailbox
* Indication of whether what features are supported by the contact (e.g forums, blogs)
* History of sharing and introduction events
* Button for introducing to another contact
* Button for deleting contacthttps://code.briarproject.org/briar/briar/-/issues/1175Delete private group messages2020-11-18T22:38:48ZakwizgranDelete private group messagesUser feedback: "Will be good if you make function "delete message" and "delete message for all" into group chat. Its really important."
Related to #68, #85.User feedback: "Will be good if you make function "delete message" and "delete message for all" into group chat. Its really important."
Related to #68, #85.https://code.briarproject.org/briar/briar/-/issues/1179Handshake protocol2020-11-18T22:39:28ZakwizgranHandshake protocolTo enable account backups (#110) and simplify the introduction protocol (#474) it would be useful to have a way of bootstrapping from static keys, suitable for storing in a backup or exchanging in an introduction, to forward secret trans...To enable account backups (#110) and simplify the introduction protocol (#474) it would be useful to have a way of bootstrapping from static keys, suitable for storing in a backup or exchanging in an introduction, to forward secret transport keys.https://code.briarproject.org/briar/briar/-/issues/1183Key manager blocks startup by holding DB lock2020-11-18T22:40:15ZakwizgranKey manager blocks startup by holding DB lock`KeyManagerImpl#startService()` uses a read-write transaction to load contacts, store transports, and start key rotation. When there are many contacts this transaction can hold the DB lock for several seconds, preventing the contact list...`KeyManagerImpl#startService()` uses a read-write transaction to load contacts, store transports, and start key rotation. When there are many contacts this transaction can hold the DB lock for several seconds, preventing the contact list from being loaded.
Move the transaction off the critical path, and if possible break it up into smaller transactions.https://code.briarproject.org/briar/briar/-/issues/1187Incognito Keyboard2023-03-09T10:55:41ZTorsten GroteIncognito KeyboardSignal has a feature called Incognito Keyboard which seems to request to disable personalized learning from user input which some proprietary keyboard apps do. This might be a useful feature for us as well. Signal does it like this:
htt...Signal has a feature called Incognito Keyboard which seems to request to disable personalized learning from user input which some proprietary keyboard apps do. This might be a useful feature for us as well. Signal does it like this:
https://github.com/signalapp/Signal-Android/blob/ba849bce2c90287e820a3008e9dc9a1b14de19fc/src/org/thoughtcrime/securesms/components/ComposeText.java#L154-L156
So it seems to be a quick change.https://code.briarproject.org/briar/briar/-/issues/1191Cannot add contact on Android 8.1/LineageOS2019-02-28T17:17:33ZakwizgranCannot add contact on Android 8.1/LineageOS* Android version: 8.1.0
* Briar version: 0.16.19
* Phone model: LeEco LEX720 (ZL1_CN)
* User feedback: "Adding a first contact fails."
The log shows that the camera is receiving preview frames and decoding them quickly, but no QR code ...* Android version: 8.1.0
* Briar version: 0.16.19
* Phone model: LeEco LEX720 (ZL1_CN)
* User feedback: "Adding a first contact fails."
The log shows that the camera is receiving preview frames and decoding them quickly, but no QR code is found. Probably a one-off, but I'm recording this in case it indicates a problem (e.g. selecting the wrong camera or cropping the wrong part of the preview image).https://code.briarproject.org/briar/briar/-/issues/1192Chat resets to top not bottom.2022-05-14T16:34:26ZPratiwirChat resets to top not bottom.In a briar beta chat if I send an emoticon smiley then hit the keyboard symbol to use characters the chat resets to the top and I have to scroll all the way down to the end. It should be positioned at the end after using the keyboard sym...In a briar beta chat if I send an emoticon smiley then hit the keyboard symbol to use characters the chat resets to the top and I have to scroll all the way down to the end. It should be positioned at the end after using the keyboard symbol.https://code.briarproject.org/briar/briar/-/issues/1197Manual section needed for Bluetooth and Wi-fi.2020-11-18T22:43:47ZPratiwirManual section needed for Bluetooth and Wi-fi.I initially loaded Briar on three devices and added each to the other as a contact, as in the manual. I had bluetooth turned on and wi-fi too. The manual says that after scanning the QR code the devices will exchange information and the ...I initially loaded Briar on three devices and added each to the other as a contact, as in the manual. I had bluetooth turned on and wi-fi too. The manual says that after scanning the QR code the devices will exchange information and the contacts will be added. This works fine, but what isn't clear is how the process takes place. "You must meet up with the person you want to add as a contact." This implies that bluetooth or local Wi-fi is being used silently. This assumption creates confusion because I then assumed that in Android one just has to have the services activated and the rest is taken care of, as you might expect for easy use in a crisis.
I now think that for the devices to send local messages one has to host a hotspot over Wi-fi or bluetooth. So this should be clear in the manual, how to set up the Wi-fi links or bluetooth links properly and what the requirement is for adding contacts. Is it local bluetooth turned on, paired devices required or not, Wi-fi transmitters active, or logged onto same network, full internet access? Can both QR codes be sent by secure e-mail and scanned by the camera at remote locations at the same time, what is the time wimdow?
"If the internet's down, Briar can sync via Bluetooth or Wi-Fi, keeping the information flowing in a crisis." This is the only information in the manual and potentially wrong assumptions about it make actual testing and getting it working more difficult and confusing than it needs to be. The manual is quite compact, but needs additional concise information about what is going on.CleopatraCleopatrahttps://code.briarproject.org/briar/briar/-/issues/1198Briar crashes or restarts on Samsung GT-I90822020-11-18T22:44:40ZakwizgranBriar crashes or restarts on Samsung GT-I9082@Pratiwir reported that Briar repeatedly crashes or restarts when switching between foreground apps on the Samsung GT-I9082.
Unfortunately the logs are too short to show anything that happened before Briar restarted. They just show the ...@Pratiwir reported that Briar repeatedly crashes or restarts when switching between foreground apps on the Samsung GT-I9082.
Unfortunately the logs are too short to show anything that happened before Briar restarted. They just show the later stages of Briar starting up.
Maybe we should change the ACRA config to increase the amount of logcat data attached to the feedback.
* Android version: 4.1.2
* Phone Model: Samsung GT-I9082 (baffinxx)
* Briar version: 0.16.20 (89f50bb)https://code.briarproject.org/briar/briar/-/issues/1200Menu options to jump to start/end of conversation2020-11-18T22:34:04ZakwizgranMenu options to jump to start/end of conversationUser feedback: "We should be able to go to the start or end of the chat."User feedback: "We should be able to go to the start or end of the chat."https://code.briarproject.org/briar/briar/-/issues/1201Trust indicator in conversation view2022-11-18T16:46:06ZakwizgranTrust indicator in conversation viewA user asked for trust indicators to be shown in the conversation view.
"It might also be useful to show some sort of security information to be able to check that we are talking directly to who we think we are without a man in the midd...A user asked for trust indicators to be shown in the conversation view.
"It might also be useful to show some sort of security information to be able to check that we are talking directly to who we think we are without a man in the middle."https://code.briarproject.org/briar/briar/-/issues/1202Minimise long messages in UI2020-11-18T22:32:22ZakwizgranMinimise long messages in UIUser feedback: "It would be nice to be able to minimize very long text bubbles. This is a standard feature on many computer notebook environments."User feedback: "It would be nice to be able to minimize very long text bubbles. This is a standard feature on many computer notebook environments."https://code.briarproject.org/briar/briar/-/issues/1203Attractive backgrounds2020-11-18T22:31:55ZPratiwirAttractive backgroundsI would like to suggest more personalised user features.
Change colors of bubbles and backgrounds. Be able to shift the overall displayed emoticon colors to personal taste. Add backgrounds for other users of a group chat or forum to ac...I would like to suggest more personalised user features.
Change colors of bubbles and backgrounds. Be able to shift the overall displayed emoticon colors to personal taste. Add backgrounds for other users of a group chat or forum to access.
If possible allow for development of scripts to animate dynamic backgrounds, but strictly limited to the background area of the chat and bubble boundary outlines, up to the user to invoke. If this were possible it could add features that other messaging services don't have.https://code.briarproject.org/briar/briar/-/issues/1204Device pipes2020-11-18T22:31:15ZPratiwirDevice pipesI would like a feature where it is possible to send a data stream from one device to another. This would be useful for relaying local internet of things data, current ip address, etc. Perhaps briar could receive and send data between oth...I would like a feature where it is possible to send a data stream from one device to another. This would be useful for relaying local internet of things data, current ip address, etc. Perhaps briar could receive and send data between other programs running on each device, to a particular pipe session that could be set up between users. The linux pipe system might be possible to use.
https://unix.stackexchange.com/questions/342787/how-to-use-pipe-to-apply-a-text-to-a-program
Tor has the unique ability to be immune to dynamic ip address changes, set up vpn etc, but it may be possible to extend briar to enable easily set up data links, if so then it would be easier for the end user and attractive for geeks.https://code.briarproject.org/briar/briar/-/issues/1205Check that registration methods aren't called after startup2020-11-18T22:30:29ZakwizgranCheck that registration methods aren't called after startupVarious registration methods are meant to be called at injection time, before `LifecycleManager#startServices()` is called. Add checks to ensure they aren't called later in the lifecycle (e.g. due to a singleton being created lazily).Various registration methods are meant to be called at injection time, before `LifecycleManager#startServices()` is called. Add checks to ensure they aren't called later in the lifecycle (e.g. due to a singleton being created lazily).https://code.briarproject.org/briar/briar/-/issues/1206Install validation2020-11-18T22:29:19ZPratiwirInstall validationThere have been discussions about hardware db keys but these security features of course assume that users have the correct original software on their devices. If this isn't the case then messages could be leaking.
Some general backgrou...There have been discussions about hardware db keys but these security features of course assume that users have the correct original software on their devices. If this isn't the case then messages could be leaking.
Some general background.
Play store, so far as I know, isn't solely located in jurisdictions free of secret court orders, although there are servers for different regions. Distributed software sometimes does vary, depending on the ip address from which it is requested. I have experienced this when doing md5 checks myself.
Play store also has a serious weakness, it works by using google account login, so even if you download over tor you can't be completely anonymous and you will have difficulty creating any google account using tor.
So Play Store might not be advisable if you think you may have been adversely profiled.
In addition there is also the possibility that https can be intercepted and compromised.
https://www.eff.org/deeplinks/2011/10/how-secure-https-today
Either issue might affect users targeted by ip address and not using tor.
Downloading as an apk file at least gives the possibility to check the hash sum. Also downloading over tor will make it difficult for individual users to be targeted.
So, given these considerations, and that apk files may be used frequently I think it is probably important to have file hashes readily available on a website. Will this be the case?
I am also wondering if there is a way to do an application integrity check from a console as root? Perhaps a small script could be available for this purpose? System file checks can be a good added level of security. I would like to think the application could do this automatically for all users, but it seems this might be difficult to guarantee, and the only really secure way would be via the console. Has anyone any ideas on this?