Gossip changes on the master branch: af515f98..258cdcc1 (2024-Jan-11..2024-Feb-03) * Spam Safe: new setting "Avoid spam from unsafe relays" under content. If on, replies from unknown people will only b\ e fetched from relays marked as safe. * Nostr Connect server: gossip can now serve as a Nostr Connect (NIP-46) server * [Load More] is now implemented for the inbox feed * Advertise relays are now automatically determined * Advertise now happens 10 relays at a time to not overload things * Relay "low quality" indicators * Relay list choices now also have "configured" and "hidden" * freedom: allow setting an empty password * freedom: wizard no longer forcing a minimum number of relays * security: NIP-44 post audit changes have been applied (algorithm has changed) * privacy: do not automatically show images in DMs * command: delete_spam_by_content * fix: QR rendering of encrypted notes now uses the decrypted content * fix: Spam filtering now applies to GiftWrap contents too * fix: Multiple event deletion improvements/fixes * fix: clear some ui sensitive fields that were not being cleared * fix: when relays change, their subscriptions are handled better * fix: update your own person-relay scores when editing read/write bits of a relay * fix: strategy for finding ancestors * fix: race condition in relay usage switches * refactor: identity rewrite (prep for nip46 client work) * refactor: settings cleanup All of these will be in the 0.10 release. Further plans for that release still include (but we probably won't get to all of these): * Pending action alerts * AUTH user confirmation (code is on 'auth' branch, UI is still too annoying) * search at relay * nip46 nostr connect as a client * nip46 nostr connect server to require approvals * sending giftwrap DMs * bookmarks * reposting events that didn't post the first time

I will attempt to start regularly posting changes to the gossip branches. Here is the first one, changes since 0.9 master: af515f98 * Main feeds and person feeds now have "load more" buttons at the bottom. You can configure smaller chunks in Settings > Content and then just use the "load more" buttons when needed. * Person feeds subscribe to their outbox relays (wasn't doing this right before) * Person feeds don't pull so many duplicates anymore * Relay lists are picked up better as they are included in metadata subscriptions now unstable: 5575285d * "load more" support now on inbox too. * spam filter now applies to giftwraps too (to the decrypted content) * several delete logic fixes * new command to delete spam: "delete_spam_by_content". This only deletes locally and they flow right back from the relays currently. BUT if applied to giftwrap, it deletes at the relays and remembers the delete so even if the relay didn't honor the delete, you won't see that giftwrap again. * Relay list new sort (Default) and 2 new filters (Configured, Hidden), plus Private filter fixed * Relay list: Advertise relays now determined automatically * Relay list: indicates low quality relays * Advertise relay list: Now happens in batches of 10 so that you don't open too many connections at a time. Feel free to discuss changes and ongoing work on our telegram:

Telegram

Telegram: Contact @gossipclient

or to submit issues at our github:

GitHub

GitHub - mikedilger/gossip: Gossip is a nostr client

Gossip is a nostr client. Contribute to mikedilger/gossip development by creating an account on GitHub.

GOSSIP 0.9.0 has been released git: branch '0.9', tag 'v0.9.0' Upgrade Instructions - SQLite 3 code has been removed. If you are running version 0.7.x of gossip, you need to run a 0.8.x version of gossip at least once in order to keep your old data. Otherwise you can just start fresh. New Features - Person Lists: Curate your own lists of people View a feed of just those people Save to nostr events, synchronize with other nostr clients. Mark members private to save secretly in encrypted contents. - Onboarding wizard: Steps a new user through what is needed to get set up - Support for the new nostr CLOSED message. - Tagging now works by just typing an '@' and the name and picking from a popup list. - Restyle of DM Chat - Restyle of Profile pages - New login page - Improvements to event deletion (multiple issues resolved) - "show more" on long notes - scrolling improvements - name improvements (which name to use) - Better tracking of threads and replies (reposts, replies via 'a') - Command line commands: reprocess_recent, print_followed, print_muted, bech32_decode, bech32_encode_event_addr, print_relay, add_person_relay, print_person, import_event, print_person_lists, add_person_list, rename_person_list, - Relay communications are kinder to relays - Documentation reworked - TLS now defaults to rust code, but native (operating system provided) root certificates. - Restructured as a library and a binary, so that people who want a different UI are free to replace the UI while continuing to use the underlying library. - Lots of little things I didn't bother to add to this list. See the git history for the whole truth. SHA256sums: 67d140fe6336c55596a7556c55f8f9961515613635ba8f0526016e419d76d95a changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 83760acc0ad65f0bea06bdce73a158041b2816a3924d98ab4693bdc7cd9fd22c gossip_0.9.0_amd64.deb 063e209ed9bdba3b64c5d67e0be170883f35bb76df29e6a0922c23eb117a3431 gossip-0.9.0-Darwin-arm64.dmg 73f6708d70867f0e5cc68d55eaa2d81e49f385adb07d9c783552a8a69204f1e1 gossip-0.9.0-Darwin-x86_64.dmg b0fa1af9e5b98aaa13887cf8871850884e5fbc9031c85247cca4e6c9f54cf497 gossip.0.9.0.msi e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP 0.8.2 has been released 9 bugfixes and 2 important improvements. See changelog or git history for details. It might run a bit slower, but your database should not corrupt in the case of a system crash anymore. Due to multiple reports that the AppImage didn't work last time, I'm not able to provide one until I come up with (or somebody provides me) a recipe that actually works. dd26c54f18069220c017974ec324818cfaa8abed09f5c36091c636931e575877 changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 25b5372911a2f699358eab7d641426e5a75ab31596cf5473a5adecce84ec7ca3 gossip_0.8.2_amd64.deb 460b5f449c1b8a15081b259acbd2799541f283d519e28f742c83a74a729317a4 gossip-0.8.2-Darwin-arm64.dmg dc4dad4ce8c15fa5bd8ee9d040a12465dfd3bf80e4f311280b07a4360c120520 gossip-0.8.2-Darwin-x86_64.dmg cc9190aa86d5b9c669e13316f1bb4480706340222afe8670d70e59a7b5055b68 gossip.0.8.2.msi 60a0275523aba27b3b8979e43ee212d33fd2cf7f76be7f177fffbf3ea02609aa gossip-0.8.2.tar.gz 8daa6294a4b7b402eed1e3df349fb81bb408dcc79537c54360251a2c38dc8f2b gossip.0.8.2.wxs e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP USERS: SECURITY ALERT There is an UNPATCHED vulnerability in libwebp that allows a malicious image to infect your computer. This affects gossip, as well as countless other programs. Normally we wouldn't announce an active vulnerability until it is patched and there is a solution, but this news is already widespread. Please go to your settings and uncheck "Render all media inline automatically". Only click to view media from people you trust. We are working towards a better understanding of this, and a fix. Please coorespond with @Mike Dilger ☑️ as this account is only used for announcements and is not watched. Related security alerts:

NVD - CVE-2023-4863

More info

Tenable®

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Frequently asked questions relating to vulnerabilities in Apple, Google and the open source libwebp library.

Ars Technica

Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters

No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.

GOSSIP RELEASE 0.8.1

GitHub

Release 0.8.1 · mikedilger/gossip

Bugfixes applied to 0.8.0 cb8684a 0.8.1-unstable 267e5e8 trim keys before attempting import 01952a6 On DM page, if key not unlocked, give warning l...

This is a point release with 18 bugfixes applied to the 0.8 branch. The Darwin builds should now support 12.0 (Monterey) 7966cf4cb37ae3adf81aad61bec4798c1695b6cca3b3648dbb41ec21224936d3 changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 471c42a50e0d9a17f00c0c3338a1b41bef40839fcd413ea0e4cb85f0c1f5844c gossip_0.8.1_amd64.deb 54a123f3366ae672be4339dff5364dce268339cabe6aa99d574c200eb4645f63 gossip.0.8.1.AppImage dbfa4b6f46b000ec88eea0952529d2ecea7dea2cb309df6ec6a8050328a40195 gossip-0.8.1-Darwin-arm64.dmg f6bc0569f654762831d9a0b4b95d8e4ee0acd48c276a4856428135f91764717a gossip-0.8.1-Darwin-x86_64.dmg 544850006bedbeee86ee39cd08d78a30bb2bd78341c1b5c4572cc516d533fbe4 gossip.0.8.1.msi 3f834c87d36b8bb350d4cbd2c1adc5ce48605d5a2e5132f54393c9cfe4050376 gossip-0.8.1.tar.gz e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP: lightning zaps are now available on the master branch, for those compiling from source. Please let @Mike Dilger ☑️ know about any problems.

GOSSIP 0.7.0 has been released git: branch '0.7', tag 'v0.7.0' - UI: Side Menu and Theme updates - Zap receipts (no zaps yet) - Improved subscription for augmenting events (likes, zap receipts, deletions) - Better muting - Improvements in relay handling, including job persistence, timeouts, disconnection handling, - More relay configuration settings - Search much more extensive (still local only) - Delegation: delegated events show in feed of person delegated from - MacOS: cmd+enter submits posts; full size content enabled - Multiple profiles (set GOSSIP_PROFILE to any profile you want, each kept separately) - Proof-of-work progress logging - Various bug fixes SHA256 sums: 864cbb89c9f0adcdb12f84e43e6559611f64435783137f94fd8ae24c688d4446 gossip_0.7.0_amd64.deb 7553cfa9cc521dabc76917f3e5866ac3a502886aded09f517079b544f09cc71e gossip-0.7.0-Darwin-arm64.dmg 511ce16e8bb9a8335889c100205b304a780ba004af4599980f9ebabfa1300b98 gossip-0.7.0-Darwin-x86_64.dmg 23503cd594609044934c0eb8739d8f8d17345d61bb307f116a7571f195badf68 gossip.0.7.0.msi 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt

I'm posting these SHA256sums again since I uploaded an Intel MacOS binary. ae29d59d7da493c707a34880a0482b5ef418ac518c0f46a62dce1a3802ee49a1 gossip_0.6.0_amd64.deb f4ebba601a7b476ab99b6e83ab49056874ca7c7312421b662e1c33d616738c87 gossip-0.6.0-Darwin-arm64.dmg 7d796504d0addd270508ea7befbfe262e7e73b4a15e852e81f4fc74a691c3a6a gossip.0.6.0.msi ed3ec26e0996486a68ceb3a954be49dd9150864703925ba4fe26e009f48fb64b gossip-0.6.0-Darwin-x86_64.dmg

Gossip 0.6 has been packaged for MacOS on Intel. I would appreciate it if someone would let me know if it works on said hardware.