What's new in Ricochet 1.1.4.1
Nov 9, 2016
- Added translations for Albanian, Chinese (Hong Kong), Estonian, Italian (Italy), Norwegian Bokmål, and Portuguese (Portugal)
- Updated translations for Danish, German, Russian, Czech, and Turkish
- Fix parsing of links containing certain sequences (#403, #372, no security impact)
- Fix 'dead keys' and other compose/ibus input methods with Linux binaries (#60)
- Fix Tor configuration with HTTP proxies (#418)
- Fix copying links with right click (#429)
- Use combined chat window by default (#355)
- Use an external tor instance when TOR_CONTROL_{HOST,PORT,PASSWD} is set
- Fix visual bugs with window resizing during network setup
- Properly display the "X is already your contact" error (#439)
- Revise language selection UI to fit all of our languages (#473)
- Store identity keys in ricochet.json when Tor is new enough (#227)
- Disable ASAN by default for release builds (#341)
- Attempt to disable use of RWX memory for improved security
- Display configuration parsing errors correctly
- Add support for OpenSSL 1.1 (#444)
- Updated builds with Qt 5.6.2, OpenSSL 1.0.2j, and Tor 0.2.8.9
- Windows builds can now be cross-compiled with MinGW
- Re-issued macOS build as 1.1.4.1 to fix #480 (thanks @taoeffect!)
- Use a software-only render to hopefully fix graphical and text issues (#367):
- Also resolves #365, #358, #348, #375, #331, #389, #411, #454, #409, #442, #445, #447
New in Ricochet 1.1.2 (Feb 16, 2016)
- Security fixes:
- By sending a nickname with some HTML tags in a contact request, an attacker could cause Ricochet to make network requests without Tor after the request is accepted, which would reveal the user's IP address. The malicious nickname is clearly displayed, and no network activity takes place unless the request is accepted. We've addressed this vulnerability by sanitizing nicknames in all cases before display, rejecting contact requests with suspicious nicknames, and blocking any network requests at that layer.
- Changes:
- Block all network requests to guard against potential deanonymization issues (#303)
- Reject contact requests with nicknames containing suspicious characters
- Sanitize nicknames before use in UI labels
- Fix a common crash when restarting an outbound connection attempt
- Fix a bug which caused connection attempts to contacts to stall until restarted (#295)
- Added translations for Hebrew, Slovenian, and Chinese
- Updated translations
- Updated to Qt 5.5.1, OpenSSL 1.0.1r, and Tor 0.2.7.6
- OS X builds now use AddressSanitizer for hardening
New in Ricochet 1.1.1 (Oct 30, 2015)
- CHANGES:
- UI:
- Optionally play sounds when messages are received or contacts come online (#37, by qsodev)
- Language can now be changed in preferences (#172, patch by qsodev)
- Add Polish translation (by Kacper Kołodziej)
- Use a custom scrollbar to avoid buggy scrolling behavior
- Show the number of unread messages in the dock on OS X
- Improve UI icon quality
- Avoid bouncing the OS X dock icon indefinitely
- Fix clipboard behavior in some X11 environments
- Update to Qt 5.5.0, including fixes for a variety of text display issues
- Translation updates and fixes for many languages
- Core:
- Use compiler hardening flags when available (by Isis Lovecruft)
- Add experimental apparmor and minijail sandboxing policies (by Jacob Appelbaum)
- Accept public keys generated by vanity address tools (#186, by Gabe Edwards)
- Fix a case where contacts would be stuck in the 'Rejected' category until manually removed
- Treat all random number generator failures as fatal (#164, #89, reported by mik235)
- Update Tor to 0.2.6.10, including a fix for a hidden service reliability issue
- Update OpenSSL to 1.0.1p
New in Ricochet 1.1.0 (Oct 30, 2015)
- Changes:
- Implement a new protocol, intended to improve safety and extensibility
- Brand new application icon (#11), contributed by Lawrence Eastland
- Add Bulgarian, Czech, German, Finnish, Tagalog, French, Dutch, Russian, Swedish, Turkish, and Ukranian translations
- Show a timestamp in chat when more than an hour has passed since the last message. Patch from Jan Noertemann and Robin Burchell
- Improve contact preferences UI design and behavior (#18)
- Refresh contact list UI design
- Make sure chat windows are always opened fully on screen (#85). Patch from Jan Noertemann.
- Fix network setup getting stuck when tor fails to launch
- Correctly display newlines in chat messages (regression from 1.0.1)
- Remove the unnecessary hidden service self-test at startup (#26)
- Update to Qt 5.4.1, OpenSSL 1.0.1m, and Tor 0.2.6.7
New in Ricochet 1.0.4 (Oct 30, 2015)
- Fixes:
- Fixed a bug which caused the chat window to move erratically in some cases when receiving messages or scrolling (#76)
- Fixed "Configuration is already in use" errors appearing on startup after unexpected system reboots (#73)
- Improved documentation on building from source (#56, #57)
- Fixed Tor errors after moving Ricochet configuration between folders or computers (#59)
- Improved text input focus in "single window" mode
- Other:
- Updated Spanish translation from strel
- Updated Brazilian Portuguese translation from swperman
- Updated Danish translation from @mkroman
- Updated OpenSSL to 1.0.1i
New in Ricochet 1.0.3 (Oct 30, 2015)
- Security:
- Updated tor to 0.2.4.23
- Features:
- Migrated configuration to a more useful and robust system (#21)
- OS X bundles are now signed to remove Gatekeeper warnings
- Added optional 'single window' mode (#19)
- Added options to skip the "Open Browser" security nagging dialog
- The contact list shows the number of unread messages
- Added Danish translation by Mikkel Kroman
- Added Portuguese (Brazil) translation by swperman
- Fixes:
- Fixed loading old platform-location configuration files (1.0.2 regression)
New in Ricochet 1.0.2 (Oct 30, 2015)
- Features:
- Renamed to Ricochet. Contact addresses now begin with ricochet:
- Added Spanish translation, contributed by strel via Transifex
- Fixes:
- Fix some characters like " being displayed incorrectly in chat messages (#36)
- OS X now supports automatic GPU switching
- Packaging:
- Updated Tor to 0.2.4.22
- Updated OpenSSL to 1.0.1h
- Updated Qt to 5.3.1
New in Ricochet 1.0.1 (Oct 30, 2015)
- Features:
- Added Italian translation, contributed by HostFat and GIANNAT via Transifex
- URLs in chat are highlighted and can be copied or opened in the default browser (with a warning)
- Polished add contact UI to make usage clearer and explain validation problems
- Fixes:
- Fixed display of hidden service state in Tor preferences
- Fixed rendering issues with message text on some platforms
- Fixed crash when pressing 'Remove' in contact preferences with nothing selected
- Fixed compatibility with older versions of OS X
- Improved debugging when bundled Tor fails to start