GOSSIP 0.8.2 has been released 9 bugfixes and 2 important improvements. See changelog or git history for details. It might run a bit slower, but your database should not corrupt in the case of a system crash anymore. Due to multiple reports that the AppImage didn't work last time, I'm not able to provide one until I come up with (or somebody provides me) a recipe that actually works. dd26c54f18069220c017974ec324818cfaa8abed09f5c36091c636931e575877 changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 25b5372911a2f699358eab7d641426e5a75ab31596cf5473a5adecce84ec7ca3 gossip_0.8.2_amd64.deb 460b5f449c1b8a15081b259acbd2799541f283d519e28f742c83a74a729317a4 gossip-0.8.2-Darwin-arm64.dmg dc4dad4ce8c15fa5bd8ee9d040a12465dfd3bf80e4f311280b07a4360c120520 gossip-0.8.2-Darwin-x86_64.dmg cc9190aa86d5b9c669e13316f1bb4480706340222afe8670d70e59a7b5055b68 gossip.0.8.2.msi 60a0275523aba27b3b8979e43ee212d33fd2cf7f76be7f177fffbf3ea02609aa gossip-0.8.2.tar.gz 8daa6294a4b7b402eed1e3df349fb81bb408dcc79537c54360251a2c38dc8f2b gossip.0.8.2.wxs e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP USERS: SECURITY ALERT There is an UNPATCHED vulnerability in libwebp that allows a malicious image to infect your computer. This affects gossip, as well as countless other programs. Normally we wouldn't announce an active vulnerability until it is patched and there is a solution, but this news is already widespread. Please go to your settings and uncheck "Render all media inline automatically". Only click to view media from people you trust. We are working towards a better understanding of this, and a fix. Please coorespond with @Mike Dilger ☑️ as this account is only used for announcements and is not watched. Related security alerts:

NVD - CVE-2023-4863

More info

Tenable®

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Frequently asked questions relating to vulnerabilities in Apple, Google and the open source libwebp library.

Ars Technica

Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters

No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.

GOSSIP RELEASE 0.8.1

GitHub

Release 0.8.1 · mikedilger/gossip

Bugfixes applied to 0.8.0 cb8684a 0.8.1-unstable 267e5e8 trim keys before attempting import 01952a6 On DM page, if key not unlocked, give warning l...

This is a point release with 18 bugfixes applied to the 0.8 branch. The Darwin builds should now support 12.0 (Monterey) 7966cf4cb37ae3adf81aad61bec4798c1695b6cca3b3648dbb41ec21224936d3 changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 471c42a50e0d9a17f00c0c3338a1b41bef40839fcd413ea0e4cb85f0c1f5844c gossip_0.8.1_amd64.deb 54a123f3366ae672be4339dff5364dce268339cabe6aa99d574c200eb4645f63 gossip.0.8.1.AppImage dbfa4b6f46b000ec88eea0952529d2ecea7dea2cb309df6ec6a8050328a40195 gossip-0.8.1-Darwin-arm64.dmg f6bc0569f654762831d9a0b4b95d8e4ee0acd48c276a4856428135f91764717a gossip-0.8.1-Darwin-x86_64.dmg 544850006bedbeee86ee39cd08d78a30bb2bd78341c1b5c4572cc516d533fbe4 gossip.0.8.1.msi 3f834c87d36b8bb350d4cbd2c1adc5ce48605d5a2e5132f54393c9cfe4050376 gossip-0.8.1.tar.gz e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP RELEASE 0.8.0

GitHub

Release 0.8.0 · mikedilger/gossip

Gossip Release 0.8.0 Big Changes Lightning Zaps have been implemented Direct Messages have been implemented Petname support (including in ContactL...

7c14d84461f3c4b25717ba79de878b74560d2d50fda0e2a282943c660a66cb9f changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example a7973085963ef00baac29a46a11787547290ada2a06d80024b8211bbdb11a4bb gossip_0.8.0_amd64.deb 7987a3c8b0ee6d455a96bb3aeeb97cd8eced98cb6c57fa770a550453d1e105f2 gossip.0.8.0.AppImage 3b589bbf7357904142922270991748c10e380335124df31434058c416cfc168c gossip-0.8.0-Darwin-arm64.dmg f661810442773c816f2eb1d05ec276a3e443a3d0f4e459d9d7715b88d75f8f41 gossip-0.8.0-Darwin-x86_64.dmg 5d55ee7704bb5627d44158078955a4e726e6b921ac224bda85e4611e5453d2e8 gossip.0.8.0.msi e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt Big Changes Lightning Zaps have been implemented Direct Messages have been implemented Petname support (including in ContactList events) has been implemented Relay pages and UX have been completely redone Storage engine changed from SQLite to LMDB Fixed numerous caching related bugs (stale data, invalidation issues) Events that seemed to go missing are no longer missing HTTP fetching rework Verifies older cached files haven't changed, else it downloads the changed file (etag) Handles many kinds of error conditions more sanely Not overloading HTTP servers by limiting the number of parallel fetches Medium Changes Status messages are in a queue, allowing you to see the last 3 Metadata re-fetched periodically Events that augment others are loaded only when the event they augment is in view Settings rework with many more settings Command mode: pass a command as a parameter to run commands. Try 'help' to get started. Minor Changes worth mentioning Performance analyses inspired multiple changes for better performance. Note rendering more dynamic (some changes were previously not immediately visible) Improvements with links to other nostr objects: Fixes around proper rendering Support for nrelay1, naddr1, 'a' tags Automatically fetching the referenced objects Thread searching now includes author's relays Better shutdown sequence, more likely to shutdown fairly quickly now Status info in left panel (optional) Better relay ranking Keyboard scrolling (PgUp, PgDn) Spam filtering with Rhai script file (optional)