briar issueshttps://code.briarproject.org/groups/briar/-/issues2020-11-15T19:09:36Zhttps://code.briarproject.org/briar/briar/-/issues/1519Password entry and confirmation fields should have descriptions2020-11-15T19:09:36ZakwizgranPassword entry and confirmation fields should have descriptionsGoogle Play's pre-launch report warns that the password entry and confirmation fields should have descriptions for screen reader accessibility.
https://support.google.com/accessibility/android/answer/7158690
This may apply to other fie...Google Play's pre-launch report warns that the password entry and confirmation fields should have descriptions for screen reader accessibility.
https://support.google.com/accessibility/android/answer/7158690
This may apply to other fields in the app, but the automated tests don't yet get past the setup screen.https://code.briarproject.org/briar/briar/-/issues/1518Touch target for screen filter checkbox is too small2020-11-15T19:10:24ZakwizgranTouch target for screen filter checkbox is too smallGoogle Play's pre-launch report warns that the screen filter checkbox should be at least 48dp high for accessibility. The current size varies from 32 to 36dp depending on the device.
The same may be true of other checkboxes, but the aut...Google Play's pre-launch report warns that the screen filter checkbox should be at least 48dp high for accessibility. The current size varies from 32 to 36dp depending on the device.
The same may be true of other checkboxes, but the automated testing doesn't go past the setup screen yet (I'm working on a script to allow it to do so).https://code.briarproject.org/briar/briar/-/issues/1511Settings to increase polling time2021-12-13T14:13:45ZDmitry RubtsovSettings to increase polling timeSince Briar takes a lot of battery power (up to 20% of my Galaxy Note 9), I want to customize update frequency for incoming messages. I think, that it is easy and usefulSince Briar takes a lot of battery power (up to 20% of my Galaxy Note 9), I want to customize update frequency for incoming messages. I think, that it is easy and usefulhttps://code.briarproject.org/briar/briar/-/issues/1502Restart obfs4proxy if it crashes2023-03-15T12:55:10ZakwizgranRestart obfs4proxy if it crashesIf the obfs4proxy process is killed (e.g. due to low memory), Tor detects that it's died but doesn't restart it. Setting `DisableNetwork` to 1 and then back to 0 causes Tor to restart obfs4proxy.
Log message from Tor when obfs4proxy die...If the obfs4proxy process is killed (e.g. due to low memory), Tor detects that it's died but doesn't restart it. Setting `DisableNetwork` to 1 and then back to 0 causes Tor to restart obfs4proxy.
Log message from Tor when obfs4proxy dies:
```
TorPlugin: WARN The connection to the SOCKS5 proxy server at 127.0.0.1:42125 just failed. Make sure that the proxy server is up and running.
```https://code.briarproject.org/briar/briar/-/issues/1500Check PNGs for exploits before passing them to Android2021-11-04T11:03:44ZakwizgranCheck PNGs for exploits before passing them to AndroidWe need to find out how to detect PNGs that can exploit this vulnerability, so we can avoid passing them to Android:
https://www.zdnet.com/article/opening-this-image-file-grants-hackers-access-to-your-android-phone/
Subtask of #1237.We need to find out how to detect PNGs that can exploit this vulnerability, so we can avoid passing them to Android:
https://www.zdnet.com/article/opening-this-image-file-grants-hackers-access-to-your-android-phone/
Subtask of #1237.Android 1.4https://code.briarproject.org/briar/briar/-/issues/1499Tor process crashes2023-09-15T16:50:20ZTorsten GroteTor process crashesWhen enabling/disabling the Tor plugin in quick succession one sometimes can get the Tor process to exit.
There's two ways that have been observed so far:
The first one prints an exception whenever trying to make control commands:
```r...When enabling/disabling the Tor plugin in quick succession one sometimes can get the Tor process to exit.
There's two ways that have been observed so far:
The first one prints an exception whenever trying to make control commands:
```ruby
W/TorPlugin: java.io.IOException: Tor is no longer running
java.io.IOException: Tor is no longer running
at net.freehaven.tor.control.TorControlConnection.react(TorControlConnection.java:325)
```
The second one doesn't print anything to the log. The TorPlugin seems to hang (only prints on the event thread) and signing out of Briar isn't possible anymore. It just hangs at the sign out fragment.Android 1.4akwizgranakwizgranhttps://code.briarproject.org/briar/briar/-/issues/1495Consider network to be disabled when entering doze without being whitelisted2020-11-15T19:17:29ZakwizgranConsider network to be disabled when entering doze without being whitelistedIf the user removes us from the doze whitelist we may lose network connectivity when entering doze.
AndroidNetworkManager should check whether we're whitelisted for doze when entering doze, and if not (which must mean the user removed u...If the user removes us from the doze whitelist we may lose network connectivity when entering doze.
AndroidNetworkManager should check whether we're whitelisted for doze when entering doze, and if not (which must mean the user removed us from the whitelist), it should consider the network to be disabled and broadcast an event so the Tor plugin can disable Tor's network connectivity.https://code.briarproject.org/briar/briar-spec/-/issues/14How do 2 Briar users find themselves in a network bluetooth / wifi / tor?2021-02-17T01:10:40ZmicressorHow do 2 Briar users find themselves in a network bluetooth / wifi / tor?* How does Briar know in a foreign Wifi which IP address to connect to in order to successfully find a counterparty?
Is this done via broadcast?
* At tor I assume that hidden .onion services will be generated?
In the descriptions of the...* How does Briar know in a foreign Wifi which IP address to connect to in order to successfully find a counterparty?
Is this done via broadcast?
* At tor I assume that hidden .onion services will be generated?
In the descriptions of the protocol I did not find any corresponding hints.
According to the other briar-spec issues, are the protocols probably not yet up to date?CleopatraCleopatrahttps://code.briarproject.org/briar/briar/-/issues/1493Latest message isn't always fully visible after loading conversation2021-11-04T11:03:44ZakwizgranLatest message isn't always fully visible after loading conversationWhen opening a private conversation where the latest message contains multiple images, the bottom of the latest message is sometimes below the viewport, making it necessary to scroll down manually to see the whole message. This can happe...When opening a private conversation where the latest message contains multiple images, the bottom of the latest message is sometimes below the viewport, making it necessary to scroll down manually to see the whole message. This can happen regardless of whether the latest message has any text.
Logging shows that we're eagerly loading the text of the latest message, if it has any, and automatically scrolling to the bottom after adding the text and images to each message, as expected. But for some reason this scrolling doesn't make the whole of the latest message visible.
Steps to reproduce:
* Check out the 1242-display-image-attachments-fake-data branch (commit 54082209)
* Create a test contact with no messages
* Repeatedly send a message to the contact, close and reopen the conversation (fake attachments will be added to the message when the conversation's reopened)
* Once there's more than a screenful of messages and the latest message has multiple images, repeatedly close and reopen the conversation without sending any more messages
* It may take a lot of tries to reproduce the bug
The bug seems to be a race condition. I was able to reproduce it on the Nexus 5X and the Moto G 4G.
Subtask of #1237.Android 1.4https://code.briarproject.org/briar/briar/-/issues/1491Future dates display as "now"2020-11-15T19:20:47ZMatemĂ ticFuture dates display as "now"Steps to reproduce:
- Use two devices with a 1h clock offset
- Add both to a private group
- Exchange messages
- In the device which is behind, all messages will show a time of "now"
This is very confusing and makes it difficult to noti...Steps to reproduce:
- Use two devices with a 1h clock offset
- Add both to a private group
- Exchange messages
- In the device which is behind, all messages will show a time of "now"
This is very confusing and makes it difficult to notice that the devices clocks are off.
Possible solution: show "invalid time" instead, to help the owner of the misconfigured device notice the issue.
The correct solution is #1098, but even if that were in place, there may be cases where this could help, and I can't think of it doing much damage.https://code.briarproject.org/briar/briar/-/issues/1488Gradle witness pins platform specific dependency2020-11-15T19:21:52ZRonaldGradle witness pins platform specific dependencyNo dependency for integrity assertion 'javax.inject:javax.inject:1:javax.inject-1.jar:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff'No dependency for integrity assertion 'javax.inject:javax.inject:1:javax.inject-1.jar:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff'https://code.briarproject.org/briar/briar/-/issues/1486UI lifecycle callbacks may be called when not signed in2022-04-19T15:48:27ZakwizgranUI lifecycle callbacks may be called when not signed inIf the user relaunches Briar from the recent apps list, activities may be recreated, started and resumed before `BriarActivity#onResume()` checks whether the user's signed in and launches PasswordActivity.
Usually this only applies to N...If the user relaunches Briar from the recent apps list, activities may be recreated, started and resumed before `BriarActivity#onResume()` checks whether the user's signed in and launches PasswordActivity.
Usually this only applies to NavDrawerActivity, because it's on the top of the stack when the user signs out. But if Briar's killed without signing out, other activities may be on the top of the stack when the user relaunches Briar.
Some of our lifecycle callbacks start operations that could throw exceptions if the user isn't signed in, as in #1482.Android 1.4https://code.briarproject.org/briar/briar/-/issues/1481Show outgoing images differently depending on sent/seen state2022-04-19T11:29:25ZTorsten GroteShow outgoing images differently depending on sent/seen stateWhen the image isn't sent, it is shown blurred.
![Image_Attachment_Contact_Offline](/uploads/ea4a802a719627cc0cacf00c2c381329/Image_Attachment_Contact_Offline.png)
When the contact is online and the message was requested, we might show...When the image isn't sent, it is shown blurred.
![Image_Attachment_Contact_Offline](/uploads/ea4a802a719627cc0cacf00c2c381329/Image_Attachment_Contact_Offline.png)
When the contact is online and the message was requested, we might show progress bar:
![Image_Attachment_Sending](/uploads/9c7c01bb0b27677797b0ee6d40120715/Image_Attachment_Sending.png)
Subtask of #1237.https://code.briarproject.org/briar/website/-/issues/11Linking related projects on the web2021-01-15T04:58:15ZEloyLinking related projects on the webI've been searching for a project like this for a while, I found Ricochet IM some weeks ago and I found it interesting, but it does not work on the phone.
I think that being both so related you should be linking and talking about each o...I've been searching for a project like this for a while, I found Ricochet IM some weeks ago and I found it interesting, but it does not work on the phone.
I think that being both so related you should be linking and talking about each other, that will help users chose the best tool for each job. Adding a comparative overview would help a lot.
Is there any compatibility between those projects, is that even possible?
I think linking between the pages and adding some note about it on the web will help both projects in the long run. I think that the comparative provided by https://secushare.org/ could help on that.https://code.briarproject.org/briar/briar/-/issues/1480Change Light theme background color to pure white2021-11-04T11:03:42ZElio Qoshielio@ura.designChange Light theme background color to pure whiteThe background color in the light theme has been changed to a light gray in the past, although it was not intended for that use. The referred color is `#E3EBEE`
That color should be changed to pure white `#ffffff` to adhere to Material D...The background color in the light theme has been changed to a light gray in the past, although it was not intended for that use. The referred color is `#E3EBEE`
That color should be changed to pure white `#ffffff` to adhere to Material Design standards regarding color.
Examples:
![image](/uploads/2c880d352b6b6681259242b2013ee8d8/image.png) ![image](/uploads/39c80803a6c42724d9768fe652194507/image.png)Android 1.4https://code.briarproject.org/briar/briar/-/issues/1474Check for view recycling issues when language is changed2021-02-26T18:39:12ZakwizgranCheck for view recycling issues when language is changedIn a code review discussion (https://code.briarproject.org/briar/briar/merge_requests/997#note_33406) we identified the possibility of views being recycled without being bound to new view holders when the app or system language changes (...In a code review discussion (https://code.briarproject.org/briar/briar/merge_requests/997#note_33406) we identified the possibility of views being recycled without being bound to new view holders when the app or system language changes (especially when it changes from RTL to LTR or vice versa).
This seems to be prevented at the moment because we (always?) clear the adapter when the activity stops, and the language can't be changed without stopping the activity. The issue might become live in the future if we change our adapters, so this ticket exists to remind us to check for the issue if we do that.https://code.briarproject.org/briar/briar/-/issues/1472Explain how Briar is different (rename the "blog"?)2022-11-18T17:24:07ZBjarni RĂșnar EinarssonExplain how Briar is different (rename the "blog"?)Hi! Thanks for Briar, I'm very impressed with what you've done so far.
I was testing it for a bit (the wife and I now have the world's most secure shopping-list app!), and I wanted to share my first impression before it fades. Please fe...Hi! Thanks for Briar, I'm very impressed with what you've done so far.
I was testing it for a bit (the wife and I now have the world's most secure shopping-list app!), and I wanted to share my first impression before it fades. Please feel free to close this issue if you feel it's unhelpful or redundant.
Basically, my dominant feeling was confusion.
What is all this stuff? How does it work? The messages and contacts are straightforward, and the private groups as well... but the forums and blogs had me scratching my head. I still don't fully get them.
How do people discover a blog, or a forum? Are they completely public? Are they shared word-of-mouth over messages? Are there any access controls?
The fact that I couldn't edit or delete blog posts after writing a couple of inane tests was very unsettling - this goes against the expectations any normal user will have for something named "blog", and it's bad enough that after perfectly normal "test behaviour" one is likely going to be forced to delete one's account and start over because anyone with a quirky (let alone risque) sense of humour is likely to write "test posts" that absolutely shouldn't stay on the public record.
I'm technical enough to understand that a lot of this has to do with the underlying p2p distribution, and is also likely emergent from the design goal of making things censorship resistant. But for someone less technical, these limitations are simply baffling and disconcerting. They're also a major roadblock to adoption - I will never use a blog like this as a casual, social tool for expressing myself, and I would strongly recommend against their use to anyone else as well. For personal safety, being able to edit and delete and curate ones' public identity is vital.
There is absolutely a place and a need in this world for a feature like this - but my personal feeling is it needs to be carefully explained and shouldn't be called "blog", as that word implies all sorts of casual social interactions which this is simply inappropriate for (in its current iteration).
But obviously these are just my opinions, I hope they're helpful!CleopatraCleopatrahttps://code.briarproject.org/briar/briar/-/issues/1470Message Timestamps not localized for all languages2021-02-09T14:05:03ZJulian DehmMessage Timestamps not localized for all languagesWe are currently using `DateUtils` to create the timestamp strings for messages/posts/statuses. Unfortunately the languages supported by it varies greatly across APIs.
I wrote a test application which dumps the strings for all our lang...We are currently using `DateUtils` to create the timestamp strings for messages/posts/statuses. Unfortunately the languages supported by it varies greatly across APIs.
I wrote a test application which dumps the strings for all our languages (fallback means it's falling back to the system language):
| API | 15 - 16 | 17 - 19 | 21 - 22 | 23 | 24 - 25 | 26 - 28 |
|-----|--------|---|---|---|---|---|
| Failed | br (fallback) <br> eu (fallback) <br> gl (fallback) <br> ms (fallback) <br> oc (fallback) <br> sq (fallback)| br (fallback) <br> eu (fallback) <br> gl (fallback) <br> he (fallback) <br> ms (fallback) <br> oc (fallback) <br> sq (fallback) | ast (fallback) <br>br (fallback) <br>eu (fallback) <br>fa (fallback)<br>gl(fallback)<br>he (fallback)<br>ms (fallback)<br>oc (fallback)<br>sq (fallback)<br> | ast <br> br <br> oc | ast <br> oc | oc |Julian DehmJulian Dehmhttps://code.briarproject.org/briar/briar/-/issues/1466Add screenshots of Briar interface to f-droid page2021-01-14T19:46:07Zduyeyix@ethersportz.infoAdd screenshots of Briar interface to f-droid pageF-droid allows to have a gallery with screenshots from the app, it is a good way to show the user what the app looks like. I think Briar should have screenshots as well, log-in menu,man page,chat menu and so on. If you search "dandelior*...F-droid allows to have a gallery with screenshots from the app, it is a good way to show the user what the app looks like. I think Briar should have screenshots as well, log-in menu,man page,chat menu and so on. If you search "dandelior*" a disapora* client, you see they have a nice gallery.CleopatraCleopatrahttps://code.briarproject.org/briar/briar/-/issues/1465Tor takes longer to start since upgrading to 0.3.42022-06-06T16:02:02ZakwizgranTor takes longer to start since upgrading to 0.3.4Tor 0.3.4.8 takes much longer to start than Tor 0.2.9.16 on the same hardware. The time to start the Tor process and create the auth cookie is pretty much unchanged (3 seconds on the Moto G 4G), but the time between logging "Auth cookie ...Tor 0.3.4.8 takes much longer to start than Tor 0.2.9.16 on the same hardware. The time to start the Tor process and create the auth cookie is pretty much unchanged (3 seconds on the Moto G 4G), but the time between logging "Auth cookie created" and logging "Creating hidden service" has increased (from 4 seconds to 19 on the Moto G 4G).
Results for 5 runs with each version:
|Tor version|Mean (seconds)|Standard deviation|
|---|---|---|
|0.2.9.16|3.9|0.3|
|0.3.4.8|19.0|1.8|