This Week in Matrix 2019-01-11
2019-01-11 โ This Week in Matrix โ Neil Johnson๐Welcome!
Do not panic, Benpa is away, I repeat, Benpa is away. Nonetheless TWIM lives on!
๐Spec
Lots of spec work this week, and a shout out to anoa for his magical mscbot that provides pokes, nudges and updates on all things spec. Here's whatย mscbot had to say about the past week.
Approved MSCs
[MSC 1497]: Advertising support of experimental features in the CS API [MSC 1339]: Proposal to add a GET method to read account data [MSC 1501]: Room version upgrades
Final Comment Period
MSC 1708: .well-known support for server name resolution MSC 1711: X.509 certificate verification for federation connections
New and In Progress MSCs
[MSC 1794]: Federation v2 Invite API [MSC 1796]: Improved e2e notifications [MSC 1797]: Proposal for more granular profile error codes [MSC 1640]: Replace event IDs with hashes [MSC 1776]: Implementing peeking via /sync [MSC 1777]: peeking over federation [MSC 1779]: Proposal for Open Governance for Matrix.org (v2)
(A few may be missing as we're still tweaking mscbot :)
๐Dendrite
Brendan had this to say:-
The Dendrite audit is over! A bunch of issues have been created on the Dendrite GitHub repository, as well as a project board in order to keep track of everything: https://github.com/matrix-org/dendrite/projects/2 There's a fair amount of issues that have been labeled as โgood first issueโ, so feel free to pick them up and open pull requests if you're looking into hacking on Dendrite! :)
And whilst we have your attention - here's Brendan & Matthew talking through the audit in this week's Matrix Live!
๐Synapse
Neil says:-
both contain critical security updatesย so please update asap for more details, we'll be able to share a bit more about the vuln once admins have had a chance to upgrade.
Meanwhile Hawkowl has been cranking out bug fixes and perf improvements and in particular taking a look at taming the user_ips table.
While Debian packager Andrewsh adds:-
latest synapse (0.34.1.1, Python 3)ย in Debian, fixingย CVE-2019-5885; an update to a previous release fixing this CVEย uploadedย to stretch-backports, using Python 2. Dependencies for a Python 3 uploadย approvedย inย stretch-backports, a Python 3 upload of 0.34.1.1 will be following later this week
๐Riot/iOS
Riot-iOS 0.7.11 has been released, with lots of bug fixes.
We have been working on e2e new screens (like key backup setup) and the re-skinning of the app.
๐Riot/Android
Working to improve notifications style.
Split screen mode will be supported on next release!
Continuous autofocus on the Camera has been enabled.
Also fighting bugs on registration.
๐Bridges
Halfshot has this to say:
Matrix-appservice-purple is being renamed to matrix-bifrรถst, on the basis that we now bridge to things and "burning rainbow bridge" seemed like a good description.
Other things that have happened:ย Performance improvements, as always.ย XMPP -> Matrix typing notificationsย XMPP -> Matrix avatarsย XMPP -> Matrix uploadsย * Matrix -> XMPP uploads (via oob)
and then follows up with this:-
As promised, we've got a discord bridge release out today. v0.4.0-rc1 has landed! See the change notesย https://github.com/Half-Shot/matrix-appservice-discord/releases/tag/v0.4.0-rc1ย . Thank you to Sorunome for doing a huge amount of work on this!
@swedneckย reports that:
linuxgaming.lifeย is now running matrix-appservice-discord v0.4.0-rc1.
๐Matrix.org Foundation
Matthew has a final draft of the Matrix.org Foundation governance document ready:ย https://github.com/matrix-org/matrix-doc/blob/matthew/msc1779/proposals/1779-open-governance.md. Comments onย https://github.com/matrix-org/matrix-doc/pull/1779 would be much appreciated!ย We expect to propose merging it next week, and then incorporating it into the final Articles of the foundation.
๐Riot Web
Loads and loads of work happening on https://riot.im/experimentalย which is now where all new development is happening as we race towards launching the new design.ย Highlights include:
- All new key verification is implemented! (in olm & matrix-js-sdk).ย We're currently hooking up the UX.
- Online key backup is pretty much finished.
- Cross-signing is up next.
- Redesign backlog is progressing (slightly stuck on making the RoomList resizing work nicely, but almost there)
- Finalising the all new registration/login screens
- ...and loads of other stuff too.
๐Meanwhile...
Sending files landed in master branches of libQMatrixClient and Quaternion. Finally you can send your Quaternion screenshots (as any other images, jingles, cat videos etc.) to Matrix using Quaternion ;)
Also, libQMatrixClient is available as a Conan repository, for developers who'd like to use Conan to track dependencies.
Hello to all!ย I am write matrix bot for bridge messages between matrix and social networkย vk.comย (russian analog of facebook).ย https://github.com/progserega/MatrixVkBot
matrix-client.el gained a room-list buffer, which can be sorted by unread status, name, number of members, etc, and has a right-click context menu like the room-list sidebar.
matrix-client.el gained right-click context menus in the room sidebar, allowing to set room priority, notifications, etc.
The matrix-client.el git repository has moved to:ย https://github.com/alphapapa/matrix-client.el
Stanislav N. aka pztrnย reports that:
Hey guys, joined here to post another thing that works in Matrixย https://gitlab.com/pztrn/check_mk_matrix_notificationsย it is a script that sends check_mk notifications to Matrix. Check_mk is a "plugin" for Nagios NMS.
It's not my update but I saw this HomeAssistant addon for matrix (https://github.com/hassio-addons/addon-matrix) and wanted to make sure it got a shoutout on TWIM. [Seeing how nobody else has posted it in here, just on twitter etc.]
Morgan McMillian (thrrgilag)ย reports that:
I published v1.0.1 of the pnut-matrix bridge this week which brings publicย pnut.ioย chat rooms to the matrix network. Features include syncing ofย pnut.ioย names and avatars, matrix users ability to authorize theirย pnut.ioย accounts, and administrative controls for managing linked rooms. Project can be found atย https://gitlab.dreamfall.space/thrrgilag/pnut-matrixย and discussion is atย #pnut-matrix:monkeystew.net
ma1uta'sย MXTootย deserves mention in the blog, and inย https://matrix.org/docs/projects/try-matrix-now.htmlย . People should not be wanting of Twitterย over Decentralized-Federated F(L)OSS feeds in their Matrix room.
in theย komaย project, the desktop clientย continuumย now does a full sync when the user account doesn't seem to have joined any chat rooms, this way, it can recover from some disk IO errors, or more commonly, unclean shutdowns. A ca-certificates issue with Java 11 on Debian stable was found while running a bot on a headless server, more details and the solution is in theย README
Our first specs proposal of 2019 just landed in the form ofย SCS #16, which specifies the data/event structure for trust authorities. This is a big step as TAs play a key role in Informo's trust/reputation system!
In the meantime, we've also openedย SCS #19, which proposes a rework of the specs' introduction with the idea to give newcomers a more accessible and immediate way to figure out what Informo is about, and give them some starting points so they can dive deeper into it if interested.ย It's a rather small one and we'd love people to give it a look so we can aim for the most newcomer-friendly version possible
We've also just openedย SCS #21ย which specifies a way for a source to change the Matrix user it uses to publish articles (e.g. if it was previously using a server managed by non trustworthy people). As with all of our proposals introducing changes in behaviour, it's open for people to share their comments on it for the next 7 days.
Theย first alpha releaseย forย mxisdย v1.3.0 has been released with already major performance improvements. Early testing and reporting about success/failure would be very much appreciated as v1.3.0 will break backward compatibility. We have been running it on our own servers for about a week now and feels really good and stable.
Friedger Mรผffkeย reports that:
I just launched OI Chat, a matrix service dedicated to Blockstack users (https://www.producthunt.com/posts/oi-chat).
It is a home server that does not rely on any passwords but on cryptography and user-owned storage.
OI Chat uses one-time logins to verify the ownership of a username that can only be created by the user if they control the blockstack account.
...and that's all this week, folks!ย Your normal hand-crafted artisanal benpa confectionery will be back next week.