GOSSIP 0.9.0 has been released git: branch '0.9', tag 'v0.9.0' Upgrade Instructions - SQLite 3 code has been removed. If you are running version 0.7.x of gossip, you need to run a 0.8.x version of gossip at least once in order to keep your old data. Otherwise you can just start fresh. New Features - Person Lists: Curate your own lists of people View a feed of just those people Save to nostr events, synchronize with other nostr clients. Mark members private to save secretly in encrypted contents. - Onboarding wizard: Steps a new user through what is needed to get set up - Support for the new nostr CLOSED message. - Tagging now works by just typing an '@' and the name and picking from a popup list. - Restyle of DM Chat - Restyle of Profile pages - New login page - Improvements to event deletion (multiple issues resolved) - "show more" on long notes - scrolling improvements - name improvements (which name to use) - Better tracking of threads and replies (reposts, replies via 'a') - Command line commands: reprocess_recent, print_followed, print_muted, bech32_decode, bech32_encode_event_addr, print_relay, add_person_relay, print_person, import_event, print_person_lists, add_person_list, rename_person_list, - Relay communications are kinder to relays - Documentation reworked - TLS now defaults to rust code, but native (operating system provided) root certificates. - Restructured as a library and a binary, so that people who want a different UI are free to replace the UI while continuing to use the underlying library. - Lots of little things I didn't bother to add to this list. See the git history for the whole truth. SHA256sums: 67d140fe6336c55596a7556c55f8f9961515613635ba8f0526016e419d76d95a changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 83760acc0ad65f0bea06bdce73a158041b2816a3924d98ab4693bdc7cd9fd22c gossip_0.9.0_amd64.deb 063e209ed9bdba3b64c5d67e0be170883f35bb76df29e6a0922c23eb117a3431 gossip-0.9.0-Darwin-arm64.dmg 73f6708d70867f0e5cc68d55eaa2d81e49f385adb07d9c783552a8a69204f1e1 gossip-0.9.0-Darwin-x86_64.dmg b0fa1af9e5b98aaa13887cf8871850884e5fbc9031c85247cca4e6c9f54cf497 gossip.0.9.0.msi e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP 0.8.2 has been released 9 bugfixes and 2 important improvements. See changelog or git history for details. It might run a bit slower, but your database should not corrupt in the case of a system crash anymore. Due to multiple reports that the AppImage didn't work last time, I'm not able to provide one until I come up with (or somebody provides me) a recipe that actually works. dd26c54f18069220c017974ec324818cfaa8abed09f5c36091c636931e575877 changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 25b5372911a2f699358eab7d641426e5a75ab31596cf5473a5adecce84ec7ca3 gossip_0.8.2_amd64.deb 460b5f449c1b8a15081b259acbd2799541f283d519e28f742c83a74a729317a4 gossip-0.8.2-Darwin-arm64.dmg dc4dad4ce8c15fa5bd8ee9d040a12465dfd3bf80e4f311280b07a4360c120520 gossip-0.8.2-Darwin-x86_64.dmg cc9190aa86d5b9c669e13316f1bb4480706340222afe8670d70e59a7b5055b68 gossip.0.8.2.msi 60a0275523aba27b3b8979e43ee212d33fd2cf7f76be7f177fffbf3ea02609aa gossip-0.8.2.tar.gz 8daa6294a4b7b402eed1e3df349fb81bb408dcc79537c54360251a2c38dc8f2b gossip.0.8.2.wxs e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP USERS: SECURITY ALERT There is an UNPATCHED vulnerability in libwebp that allows a malicious image to infect your computer. This affects gossip, as well as countless other programs. Normally we wouldn't announce an active vulnerability until it is patched and there is a solution, but this news is already widespread. Please go to your settings and uncheck "Render all media inline automatically". Only click to view media from people you trust. We are working towards a better understanding of this, and a fix. Please coorespond with @Mike Dilger ☑️ as this account is only used for announcements and is not watched. Related security alerts:

NVD - CVE-2023-4863

More info

Tenable®

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Frequently asked questions relating to vulnerabilities in Apple, Google and the open source libwebp library.

Ars Technica

Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters

No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.

GOSSIP RELEASE 0.8.1

GitHub

Release 0.8.1 · mikedilger/gossip

Bugfixes applied to 0.8.0 cb8684a 0.8.1-unstable 267e5e8 trim keys before attempting import 01952a6 On DM page, if key not unlocked, give warning l...

This is a point release with 18 bugfixes applied to the 0.8 branch. The Darwin builds should now support 12.0 (Monterey) 7966cf4cb37ae3adf81aad61bec4798c1695b6cca3b3648dbb41ec21224936d3 changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example 471c42a50e0d9a17f00c0c3338a1b41bef40839fcd413ea0e4cb85f0c1f5844c gossip_0.8.1_amd64.deb 54a123f3366ae672be4339dff5364dce268339cabe6aa99d574c200eb4645f63 gossip.0.8.1.AppImage dbfa4b6f46b000ec88eea0952529d2ecea7dea2cb309df6ec6a8050328a40195 gossip-0.8.1-Darwin-arm64.dmg f6bc0569f654762831d9a0b4b95d8e4ee0acd48c276a4856428135f91764717a gossip-0.8.1-Darwin-x86_64.dmg 544850006bedbeee86ee39cd08d78a30bb2bd78341c1b5c4572cc516d533fbe4 gossip.0.8.1.msi 3f834c87d36b8bb350d4cbd2c1adc5ce48605d5a2e5132f54393c9cfe4050376 gossip-0.8.1.tar.gz e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt

GOSSIP RELEASE 0.8.0

GitHub

Release 0.8.0 · mikedilger/gossip

Gossip Release 0.8.0 Big Changes Lightning Zaps have been implemented Direct Messages have been implemented Petname support (including in ContactL...

7c14d84461f3c4b25717ba79de878b74560d2d50fda0e2a282943c660a66cb9f changelog.txt e1e6149e34b95de289a08cdedda32d9b1b44544a4925d6e23980489603d772cf filter.rhai.example a7973085963ef00baac29a46a11787547290ada2a06d80024b8211bbdb11a4bb gossip_0.8.0_amd64.deb 7987a3c8b0ee6d455a96bb3aeeb97cd8eced98cb6c57fa770a550453d1e105f2 gossip.0.8.0.AppImage 3b589bbf7357904142922270991748c10e380335124df31434058c416cfc168c gossip-0.8.0-Darwin-arm64.dmg f661810442773c816f2eb1d05ec276a3e443a3d0f4e459d9d7715b88d75f8f41 gossip-0.8.0-Darwin-x86_64.dmg 5d55ee7704bb5627d44158078955a4e726e6b921ac224bda85e4611e5453d2e8 gossip.0.8.0.msi e2860f22b4ae91017e138509f14a0c6c7e63aaae1bda7178b85020301b67cce4 LICENSE.txt 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt 65a1e61fc5374f7c391f230856809c8b37c8527c25a7a0d9113ce46d8920a8ef README.txt Big Changes Lightning Zaps have been implemented Direct Messages have been implemented Petname support (including in ContactList events) has been implemented Relay pages and UX have been completely redone Storage engine changed from SQLite to LMDB Fixed numerous caching related bugs (stale data, invalidation issues) Events that seemed to go missing are no longer missing HTTP fetching rework Verifies older cached files haven't changed, else it downloads the changed file (etag) Handles many kinds of error conditions more sanely Not overloading HTTP servers by limiting the number of parallel fetches Medium Changes Status messages are in a queue, allowing you to see the last 3 Metadata re-fetched periodically Events that augment others are loaded only when the event they augment is in view Settings rework with many more settings Command mode: pass a command as a parameter to run commands. Try 'help' to get started. Minor Changes worth mentioning Performance analyses inspired multiple changes for better performance. Note rendering more dynamic (some changes were previously not immediately visible) Improvements with links to other nostr objects: Fixes around proper rendering Support for nrelay1, naddr1, 'a' tags Automatically fetching the referenced objects Thread searching now includes author's relays Better shutdown sequence, more likely to shutdown fairly quickly now Status info in left panel (optional) Better relay ranking Keyboard scrolling (PgUp, PgDn) Spam filtering with Rhai script file (optional)

ANNOUNCEMENT ABOUT GOSSIP UNSTABLE BRANCH It has come to my attention that a lot of people are using the 'unstable' branch of gossip. That's great if you want to encounter bugs and thus help me fix them. But it is not so good if you don't want your database to become corrupted. Unstable is not meant for people to be using as their daily driver. The master branch will have the following guarantee: Any database migrations will remain, and further changes will migrate from that point. I won't roll back any commits. Neither of those guarantees are true for unstable. I may force-push, roll back commits, and change migrations. if you run off of unstable, these actions could cause your database to corrupt. So for those brave souls doing this (and I'm glad there are a few of you), I strongly recommend you backup your database every time you fetch and compile new code (unless you don't care about event history and like starting fresh). Here is one way to do that on linux: tar cvf - lmdb | zstd -c > lmdb.$(date +%Y%m%d).tar.zst

GOSSIP: lightning zaps are now available on the master branch, for those compiling from source. Please let @Mike Dilger ☑️ know about any problems.

GOSSIP 0.7.0 has been released git: branch '0.7', tag 'v0.7.0' - UI: Side Menu and Theme updates - Zap receipts (no zaps yet) - Improved subscription for augmenting events (likes, zap receipts, deletions) - Better muting - Improvements in relay handling, including job persistence, timeouts, disconnection handling, - More relay configuration settings - Search much more extensive (still local only) - Delegation: delegated events show in feed of person delegated from - MacOS: cmd+enter submits posts; full size content enabled - Multiple profiles (set GOSSIP_PROFILE to any profile you want, each kept separately) - Proof-of-work progress logging - Various bug fixes SHA256 sums: 864cbb89c9f0adcdb12f84e43e6559611f64435783137f94fd8ae24c688d4446 gossip_0.7.0_amd64.deb 7553cfa9cc521dabc76917f3e5866ac3a502886aded09f517079b544f09cc71e gossip-0.7.0-Darwin-arm64.dmg 511ce16e8bb9a8335889c100205b304a780ba004af4599980f9ebabfa1300b98 gossip-0.7.0-Darwin-x86_64.dmg 23503cd594609044934c0eb8739d8f8d17345d61bb307f116a7571f195badf68 gossip.0.7.0.msi 702bd583d106ed3d142f7cf92eb86a681fa93a7e46c3a1643773374694242bf2 README.macos.txt

I'm posting these SHA256sums again since I uploaded an Intel MacOS binary. ae29d59d7da493c707a34880a0482b5ef418ac518c0f46a62dce1a3802ee49a1 gossip_0.6.0_amd64.deb f4ebba601a7b476ab99b6e83ab49056874ca7c7312421b662e1c33d616738c87 gossip-0.6.0-Darwin-arm64.dmg 7d796504d0addd270508ea7befbfe262e7e73b4a15e852e81f4fc74a691c3a6a gossip.0.6.0.msi ed3ec26e0996486a68ceb3a954be49dd9150864703925ba4fe26e009f48fb64b gossip-0.6.0-Darwin-x86_64.dmg

Gossip 0.6 has been packaged for MacOS on Intel. I would appreciate it if someone would let me know if it works on said hardware.

GOSSIP 0.6 has been released on github:

GitHub

Release 0.6.0 · mikedilger/gossip

Changes in 0.6 Images and Videos show as placeholders, right-click to open in browser or trigger other actions. Images can now be shown inline. Se...

Packages are provided for Windows, MacOS (arm64) and Debian (x86_64) This time around, all packages have CJK language support by default. If you want a smaller binary, you'll need to compile your own. SHA256sums: ae29d59d7da493c707a34880a0482b5ef418ac518c0f46a62dce1a3802ee49a1 gossip_0.6.0_amd64.deb (Debian) f4ebba601a7b476ab99b6e83ab49056874ca7c7312421b662e1c33d616738c87 gossip-0.6.0-Darwin-arm64.dmg (MacOS) 7d796504d0addd270508ea7befbfe262e7e73b4a15e852e81f4fc74a691c3a6a gossip.0.6.0.msi (Windows) As this is the first MacOS release, please let me know if it works for you or if you think I should package it differently. Thanks to all the people who zapped me so I could buy a mac mini and do this release. Changes in 0.6 Images and Videos show as placeholders, right-click to open in browser or trigger other actions. Images can now be shown inline. See the new settings "Fetch Media" and "Render all media inline automatically". Changes to how quoted and reposted events are rendered. Better note content parsing/formatting/rendering Better compliance to NIP-10 NIP-27 handling of npub, nevent, note, and nprofile Easy ability to copy an nevent from any note and paste it to mention it (with relays so it can be found by the recipient client) Reposting a note Support for rendering (not creating) long-form content (see setting) Seen-on support (which relays was a note seen on) Contact list synchronization safety improvements (still manual, gives more detail) Lots of other little things For those on master, you have video support that was not released in 0.6.0 because it requires fiddly dependencies and is likely to be redone differently in the future. Enjoy!

This is now the official nostr account for the Gossip Client development team. #[0] will confirm this shortly. The following are SHA256 sums of all the files released so far. a03207e4f357dc71e474b7cee6348031e5e3486c319a39f026b867ac50d29915 0.4.0/gossip_0.4.0_amd64.deb 5ee124a9bb377d0048eb32312d6529e6187548d76fce2572aef3c5c0c9653ddc 0.4.0/gossip-0.4.0-debian.zip 5619e84a3e7e8420945b522a5f406d06a52e1642e5c944b236bf674f45e64ce8 0.4.0/gossip-0.4.0-microsoft-windows.zip 30ea3089e1c01341aeab703d41b335c12f3a906b120ee543f7af35f2602ab0d0 0.4.0/gossip.0.4.0.msi 02cd6bd850753a324349bb2918c4b66488126e04c12a7dc1b9ed57a9908e9c40 0.4.0/mikedilger.pgp.txt 1d1f983a25c3edd24f91fc77475b37425d5d0ba8a6dba94a14b2322e1a5b4f6a 0.4.0/SHA256SUMS.txt 4815ce53708600ef609882c4d7356d13296959dcd5f77c33040abb444e111d1c 0.4.0/SHA256SUMS.txt.sig 5874dfb38a734d792fbd3a222bb7e63ad2dda2cd88a067aa2f208e91eb45b626 0.5.0/gossip_0.5.0_amd64.deb 0fae567434dfe12cfbe025e521ab37d2524d04df4a2d27369e6ef00ec9f01445 0.5.0/gossip_0.5.0-cjk_amd64.deb ad1fbbb0883bd9c907695ab3c591a4a17a91288d513570e6e6bcdd9eea46b573 0.5.0/gossip.0.5.0-cjk.msi 67ab4d1eb8f520f752e0dcb3c3e9eeeacce8ffec65d90b157fe08cfe940c635b 0.5.0/gossip.0.5.0.msi a0353350087e9e2ebd5b94e8230a4b584667bc6d76aa8791d4c7b235c108b87f 0.5.1/gossip_0.5.1_amd64.deb 22640bb52d4cb926123397c4025ca7fab64d51b5157efb133ffdad19cba7f06d 0.5.1/gossip.0.5.1-cjk.msi d556276d19b7fcd3f07c4eadd0e712f7f737ff5168591fdeb7a9dd0504874c1c 0.5.1/gossip.0.5.1.msi eb04388d79136606da915b429d63c0b9af961b8c2f194bb2492db64a7e0ae047 0.5.2/gossip_0.5.2_amd64.deb e8d71b3d1849c856729913fe949bdc0bfb40c2f1a034e96a77adb44e233562b6 0.5.2/gossip_0.5.2-cjk_amd64.deb 8a0ab311ccf814bc8e7c00f29fc5ab77f36583659b244fe0bdb2c334ddd103a4 0.5.2/gossip.0.5.2-cjk.msi 35aa28e8a9599805419bfa50579579216a9495f2bbc66383b43a0deb6eea6040 0.5.2/gossip.0.5.2.msi