Releases: hyphanet/fred
build01484: 2019-03-21
Freenet 0.7.5 build 1484 is now available. [overview] This release fixes the last blocking problems with the new build based on gradle and JNA. Thanks to thesnark and operhiem1 we have a fix to a way to circumvent the content filter. This could have resulted in handing an insecure file to an external (and potentially vulnerable) program without showing a warning to the user. Please update ASAP to avoid that. See CVE-2019-9673 for details. Also uploads without compression now survive restarts of the node again. This release finally includes the ogg-filter from Spencer Jacksons Google Summer of Code project. It still needs polishing and has some inefficiencies, but you can now listen to a FLAC from Freenet directly from your browser. As a sidenote: Freenet supports listening to mp3 files in the browser since version build 1473 (2016-05-21). You can also use mp3s in a HTML5 audio-tag (FLAC not yet). As main user-visible change: If you use the default theme, you will now see the Winterfacey theme. If you changed it to some other theme, Freenet will continue to use that other theme. The main networking change is to apply the less recently failed branch by toad. This should decrease the number of recently failed errors, but it could have side-effects. For darknet friends, the 1024 character limit of n2n messages is lifted. You can now send messages of up to 128 kiB. And thanks to Redwerk, there is now a "Send confidential message" button on the friends page. Just tick the checkbox of the friends you want to contact to send n2n messages to them. Also thanks to Redwerk, Freemail_wot is also updated to v0.2.7.4 with better detection of contacts missing from WoT. Further changes: - update WoT plugin to build 20. Thanks to xor. - replace handler.outputHandler.queue by handler.send - thanks to patheticcockroach. - peer list: Add spacing between flag and IP address - thanks to Bombe. - increase scaling to 3 again because 1480 nodes otherwise slow down updated nodes. - only FMS and Sone on ChatForums suggestion page to fit the projects longstanding stance. If you disagree, you can create a freesite to promote it. - avoid losing download state on restart - thanks to ChristmasMuch from FMS. - update Sharesite version to 0.4.7 and activate by default. Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2019-03-21 Changes in 1484: This release fixes the last blocking problems with the new build based on gradle and JNA. Thanks to thesnark and operhiem1 we have a fix to a way to circumvent the content filter: on Firefox uploading a file as MIME type text/plain caused Firefox to guess the filetype and present the user with a download-or-open dialog. This could have resulted in handing an insecure file to an external (and potentially vulnerable) program without showing a warning to the user. Please update ASAP to avoid that. See CVE-2019-9673 for details. Also uploads without compression now survive restarts of the node again. Also this release finally includes the ogg-filter from Spencer Jacksons Google Summer of Code project. It still needs polishing and has some inefficiencies, but you can now listen to a FLAC from Freenet directly from your browser. For example via the following key: CHK@tOwwq70fTosZuCnpZP4j1vMkEKiFuRIblmC351CbgpE,w6BTgWSJBDOM1~lWnsE83K2gOv3huEGHzSPWFBN4xFc,AAMC--8/infinite-hands-free-software.flac Ogg Theora is merged, too, but currently garbles most files. If you’d like to fix that, please file a pull-request! As a sidenote: Freenet supports listening to mp3 files in the browser since version build 1473 (2016-05-21). You can also use mp3s in a HTML5 audio-tag. As main user-visible change: If you use the default theme, you will now see the Winterfacey theme. If you changed it to some other theme, Freenet will continue to use that other theme. The main networking change is to apply the less recently failed branch by toad. This should decrease the number of recently failed errors, but it could have side-effects. For darknet friends, the 1024 character limit of n2n messages is lifted. You can now send messages of up to 128 kiB. And thanks to Redwerk, there is now a "Send confidential message" button on the friends page. Just tick the checkbox of the friends you want to contact to send n2n messages to them. Further changes: - update WoT plugin to build 20. Thanks to xor. - replace handler.outputHandler.queue by handler.send - thanks to patheticcockroach - update plugin Freemail_wot to v0.2.7.4 with better detection of contacts missing from WoT - thanks to Redwerk - update Sharesite version to 0.4.7 - peer list: Add spacing between flag and IP address - Thanks to Bombe - increase scaling to 3 again because 1480 nodes otherwise slow down updated nodes. - plugin manager cleanup: more readable code - m3u filter: can stream playlists (running in external players still needs experimentation) - avoid losing download state on restart - thanks to ChristmasMuch from FMS - only FMS and Sone on ChatForums suggestion page to fit the projects longstanding stance. If you disagree, you can create a freesite to promote it. - update included seednodes Thank you for using Freenet! - Arne Babenhauserheide [include shortlogs of any installer or plugin changes] --- Arne Babenhauserheide (18): add m3u filter again README: document how to run tests make links in M3U lists absolute, to make them play in most players within m3u lists allow transparent pass-through of files up to 100MiB avoid try-with-resources to avoid auto-closing. support ogg, oga, ogv and flac in m3us add m3u read advice polish winterfacey theme force activelinks for winterfacey do not enable activelinks for all update NEWS somehow m3u: trim every uri (removes leading and trailing whitespace) m3u: add test for mime type of ogg and flac Revert "Revert "Merge remote-tracking branch 'origin/much-less-recentlyfailed' into next"" secure the HTMLFilter use by the ogg-filter tabify tag FDTracker as Serializable to avoid losing download state on restart tag FDTracker as Serializable to avoid losing download state on restart Arne Babenhauserheide (freenet releases) (24): update Sharesite version to 0.4.7 built from 5fd61f2170a2a637d49e8942338f98260408fd1f increase peer-count scaling back to 3 update NEWS typo update WoT to build 20 Update default bookmark editions update NEWS only suggest FMS and Sone on the ChatForums page - we cannot argue for a decade that Frost is easy to break while promoting it on the community page only suggest FMS and Sone on the ChatForums page - we cannot argue for a decade that Frost is easy to break and spam (and therefore to censor for all but the most dedicated users) while promoting it on the community page update NEWS NEWS NEWS NEWS NEWS move n2n button news to current release Reference CVE in NEWS attribute the news attribute the news Update Freemail_wot plugin to v0.2.7.4 build 29 released from rev e879d7792bb3fbc81f3d2148cf5646f267d41d4d update NEWS Update default bookmark editions Update default bookmark editions Update default bookmark editions Build 1484 Cooo (1): Minor fixes to the Swedish translation. David ‘Bombe’ Roden (37): Remove unused SHA-256 from plugin downloader Move plugin downloading into its own method Rename method argument Move verification of plugin directory into its own method Use real OOP instead of “instanceof.” Move plugin download target file determination into its own method Return list instead of array Clean up removal of cached files Move cache cleaning into its own method Move JAR file verification into its own method Use OOP instead of “instanceof.” Move plugin instantiating into its own method Reformatting Remove unused method, deprecate some methods Remove unused method parameter Remove unused method Rename horribly-named interface Move initialization to declaration, remove comment Don’t use deprecated constant Use interface and initialize at declaration Get rid of unnecessary boolean Fix inconsistent synchronization Use concurrent list for plugin wrappers, adjust synchronization accordingly Remove unused import Stop killing plugins after the first Don’t keep subconfig around after constructor Add braces and fix formatting Rename flag to better show its purpose Fix whitespace Manage information about starting, loaded, and failed plugins differently Remove dead code Use given last startup version Use “started” flag instead of “toStart == null” Use OOP instead of “instanceof.” Remove some duplicate code Make condition easier to understand 🚸 Add spacing between flag and IP address GNU Emacs User (15): FIX: recommending files to friends works again fix misleading indentation implement n2ntms up to 128 kiB via transparent assembly and disassembly l10n: note new n2ntm limit of 128k chars n2ntms: positive long msgid, -1 for invalid. n2n: only show option to send files in advanced mode cleanup whitespace only unqueue n2ns after ack, not after send whitespace cleanup only change strings for languages where I know the number format well enough process review by Bombe and xor fix: used wrong syntax to call another constructor add requiredParts and partIndex to n2ns fix whitespace fix whitespace Matthew Toseland (41): Don't double the message on type warning pages. Get rid of "MIME type". Use "Content Type" or similar. Rewrite one or two related strings. Check whether defaultName actually exists really early on. I saw something wierd from Freereader in my logs... Indent. Similar fixes for SingleBlockInserter to those done for SplitFileInserterSegment: Make sure we always run onEncode before running onInsertSuccess, and run it inline if localRequestOnly is set. Plus, return early from a database exception. Another activation fix. Thanks to an anonymous tester from FMS. Store even if freed, if not removed. Check freed even if wasn't active (and we fixed it). Handle storing buckets that have been freed properly. Log an error about it anyway. Synchronization fix for non-persistent recent requests list. Logging: This should only happen on encode. Library edition 14. Fix ClassCastException Logging Don't show the filter box at all on an unsafe content type warning, since we can't filter and have warned the user already. Which is not true on e.g. the too big error page. Set finished = true on failure in USKInserter. Prevents NPE due to trying to free and null data twice. Fix nested synchronized. Logging Logging: Show what we are still waiting for. Logging Fix setting the key wrong, copy code from segment again. Fix NPE on collision. Doh! Make MySendableRequestSender static and use SBI only when we are sure we can use it. Minor activation fix for compressor descriptor for single blocks. Don't do recursive deactivation of metadata. Document and work around really grotesque db4o issue with collections in SimpleManifestPutter. Document it here too so it gets fixed before deployment. Activate to MAX_VALUE not 100. Comments: Fix re HashSet's Comment: Ideas for a proper fix. Fix bug #3159: Show a different warning if Library is in the process of being loaded than if it is not loaded at all. Ignore XMLLibrarian Allow what we haven't used of our bandwidth limit to reduce the overhead fraction. We can get into a sort of self-inflicted loop... Some FIXMEs A 20% minimum works for output limiting, so lets use it for the rest too. Library v16 Doh Don't show the filter data option if we are telling the user we can't filter the data - either for unknown type or known bad type. If FEC decoding produces a data block that doesn't encode to the key expected, fail the download, it was probably inserted corrupt. Miko (1): Swedish translation from Miko on FMS. Oleh Shklyar (1): add "send confidential message" button to friends page Spencer Jackson (72): Initial Ogg filter Create a bitstream filter object for each bitstream in the ogg Isolate OggPage from the actual act of writing the bitstream Check CRCs in Ogg pages Process the Vorbis identification header Expand Vorbis parser in anticipation of the other header types Store Vorbis packet boundaries Remove comment header for Vorbis files Search for a valid subpage Use magic number from VorbisBitstreamFilter Test the obtaining of ogg bitstream filters Add unit tests on obtaining and validating ogg pages Fix typo Simplify vorbis identification Check that Ogg pages are not out of order Check log level Revert "Simplify vorbis identification" Add text for referenced strings Fix page sequence check Remove old imports Close and flush streams where necessary Rethrow any exception which arises Javadoc Ogg filter Move OggPage to its own file Remove unneeded finally Remove unneeded getter method from OggPage Throw exception when vorbis structure invalid Remove EOFException check, as the parser should break gracefully Rename OggFilterTest, as it contained tests on the OggPage class Add missing GPL header Pass theora bitstreams through the filter Validate Theora identification header and strip comments Read unsigned bytes Fix bitshifting in comment header LEN acquisition Fix whitespace Remove post setup header validation state Test creation of Theora parser Fix bit level construction of 16 bit integers Remove log statments Use long for storing unsigned 32bit integers Correct endianness in vorbis parser Allow boolean variables to be passed by the HTML filter Add HTML5 multimedia tags Prevent autoplay Store split pages until the the page is completed Scan for subpages in two consecutive pages Signify some degree of completion for Ogg filter Remove checks for exception method throws Reorganize OggPage Temp AMEND THIS Revert "Temp AMEND THIS" Log source of EOFExceptions raised during filtration Fix subpage detection Check for subpages which are valid when truncated at page end Remove FLAC from Ogg MIMEType registration Note the dangerousness of FLAC audio Throw exception on Ogg with no valid bitstreams Close streams used for subpage testing Parse packets instead of pages in Ogg filters Extract FLAC packets from native transport format Correct FLAC MimeType entry Add missing file needed for packet extraction Fix packet extraction and processing Fix Flac native packet extraction Filter Flac files Replace undesired FLAC header blocks with PADDING packets Copy states to FlacFilter Logging Remove unneeded code from extracting packets from pages Another missing logMINOR Allow STREAMINFO to be the first and last metadata block Exception on invalid stream Steve Dougherty (1): Set ContentEncoding on text/plain to prevent Firefox MIME type sniffing drak@kaverne (3): enable activelinks by default welcome toadlet activelinks: use style for width and height Fix: scale the activelinks to 36x108 again patheticcockroach (1): Use FCPConnectionHandler.send instead of .outputHandler.queue xor (1): Implement some toString() for DBJobs
testing-build-1484-preB: next ():
- increase scaling to 3 again because 1480 nodes otherwise slow down updated nodes - plugin manager cleanup: more readable code - new ogg theora, vorbis, flac filter: can show ogg-files! - thanks to Spencer Jackson, finally merged it - m3u filter: can stream playlists - make winterfacey theme the default - update WoT plugin to build 20. Thanks to xor. - update Sharesite version to 0.4.7 - avoid losing download state on restart - thanks to ChristmasMuch from FMS - re-apply much less recently failed - thanks to toad - only FMS and Sone on ChatForums suggestion page to fit the projects longstanding stance. If you disagree, you can create a freesite to promote it. - update included seednodes - prevent content sniffing in FF. See CVE-2019-9673 for details. Thanks to thensark and operhiem1 - remove the 1024 limit for node-to-node messages - peer list: Add spacing between flag and IP address - Thanks to Bombe - replace handler.outputHandler.queue by handler.send - thanks to patheticcockroach - add "send confidential message" button to friends page - thanks to Redwerk - update plugin Freemail_wot to v0.2.7.4 with better detection of contacts missing from WoT - thanks to Redwerk 1483: - new default theme: sky static - included experimental winterfacey theme - switch to gradle with witness as build system - run in background mode - switch from jni to jna - Override list request identifier - use fallocate - ipv6 fixes - fix warnings - optimization - Persist "Bookmark Updated" notifications across restarts - minimum bandwidth increased to 10KiB again - undo update of pinned SSL certificates (site no longer exists) 1480: - Ship new Windows Installer and Tray - Update Freemail to v0.2.7.3-r2 1479: - optimized network settings for the new structure since the link length fix : less peers for the same bandwidth should result in higher throughput per connection. This allows for less powerful devices to join (with low bandwidth settings) and should provide better bandwidth utilization for very fast nodes. - Re-enable RSA-based ciphers for SSL-connections to the node - add jfniki index bookmark (use "add default bookmarks" to get it) - l10n: pull translations from transifex - plugins: WebOfTrust build0019, Changelog: https://github.com/freenet/plugin-WebOfTrust/releases/tag/build0019 source available at CHK@gt~foMPFR5ZAhOhSOsFw68f5PBjJuCYpe~ZXPPA1t6g,pk7h34mG5hRsBPhVFWr5UllVbJXU-PS7tC9rbILvoOk,AAMC--8/WebOfTrust-build0019-source.tar.bz2 - plugins: Freemail v0.2.7.3 (new translations) source available at CHK@ZOfWMdsxhS1Lg6QKWK4CJZvVt9RYkkjFnU6-PCizHbg,zfTEQX6DexdUm9-eGyDSP5vKvp76b38SCBS7W9zkoGE,AAMC--8/Freemail-v0.2.7.3-source.tar.bz2 1478 (2017-04-05): - prepare pinned certs for the new Amazon-web-services based site. 1477 (2017-03-09): - fix a potential clickjacking vulnerability in legacy browsers - patch open redirect and header injection vulnerability introduced in 1476 - SSL with RSA certificates on fproxy has been broken in 1475, fix that 1476 (2017-03-02): - FOAF efficiency enhancements for fast nodes - gif filter - harden the SSL configuration of fproxy - logger fix - spare bitmap efficiency optimization - reduce custom code - show semi-persistent update info next to bookmarks - plugin updates: Sharesite 0.4.4, Library v37, Freereader 6 1475 (2016-06-25): - 0006745: Disk crypto: Should type password twice when setting it - 0006344: Change default compatibility mode to COMPAT_1466 - 0006488: using “visit freesite” to visit a freesite with a hash (#) fails instead of opening it and jumping to the anchor. - fix a critical bug: prevent announcement loops - drop support for negtype9 (non-cummulative ack logic) - start to warn user that java7 is EOL - PluginInfoMessage: Fix wrong "does not provide FCP" info about plugins - Stop warning users that java9 isn't recent enough - Don't use FOAF if the HTL isn't high enough - Attempt to update update.sh - l10n improvements - cooldown improvements - load-limiting changes (token buckets) - MessageFilter improvements - relax the CSS parser (see https://github.com/freenet/fred/pull/446) - support for HTML Audio tags - ask/confirm the disk-crypto password in the wizard - make the paste-a-key control usable on the WelcomeToadlet - the default compatibility mode for inserts is now COMPAT_CURRENT - remove the DSA related parameters from noderefs - Fix a major bug that might explain the poor connectivity since 1473 1473 (2016-05-22): - MP3 filter fixes - Reduce test memory usage - Fix opennet announcements not having location set - Fix binary blob download over FCP - Add The Filtered Index to the default bookmark list - Wait for running transfers on RouteNotFound - Mark Freenet traffic with QoS - Fix handling of filenames with non-ASCII spaces 1472 (2016-03-19): - Fix uploads stalling when using MAXIMUM physical security. - Fix lots of "setNativePriority(X) has failed!", which was caused by a serious thread priority problem. This might fix nodes unexpectedly losing peers. - Order alerts within a category by time: if you have lots of messages from darknet peers they will remain nicely sorted. - There is now a caching layer which should significantly reduce I/O load. - Update WebOfTrust from build 15 to build 18. Its changelogs are separate, but the changes reduce CPU load. Incremental score recomputation requires roughly 3 percent of the time of full recomputation, and queuing trust lists to disk lowers thread usage. - Add partial Greek translation. - Update German, Bokmål, Brazilian Portuguese, Simplified Chinese, and Traditional Chinese translations. - Fix Bokmål localization loading. - Remove Gantros Index from the default bookmark list because it stopped updating. - Remove Linkageddon from the default bookmark list because it stopped updating. - New version of UPnP to fix some instability and compatibility problems. Thanks to 007pig we have a new UPnP plugin in development which supports UPnP2, but it is not yet included. - New version of KeyUtils. 1471 (--): - (skipped) 1470 (2015-08-15): - FIX Freemail problems that prevented sending mail - remove a compromised opennet seed node - Freemail gains a new message link on the inbox page, links to senders' WoT profiles, and new translations 1469 (2015-07-19): - FIX two bugs introduced in build 1468. One caused very slow operation and high CPU usage with large files and physical security levels above None (i.e. Freenet-level disk encryption). The other prevented interactive usage (e.g. freesite browsing) while finishing large downloads or starting large uploads. 1468 (2015-07-11): - Replace DB4O - Existing unfinished downloads and uploads will be imported to a new format, which requires restarting them from the beginning. - Space for downloads is now all allocated at the start, so machines very low on disk space may run out, which causes downloads to temporarily fail until more space is available. - CHKs will change due to metadata bugfixes. - Some unofficial plugins will need to be updated because of API changes. Sone already works, as do all official plugins. - The queue format changes should make it extremely rare to lose the entire queue: the impact of corruption will almost always be localized. - Multi-container / site uploads can now be persistent, making it more practical to upload large sites. - Passworded physical security is now much stronger. (Full-disk encryption is still preferable.) - Improve Windows installer - The Windows installer now defaults to starting Freenet on login. - There is a new Windows tray app with some useful features that is included with new installations. - misc - The list of download keys moved from downloads/listFetchKeys.txt to downloads/listKeys.txt. - A list of upload keys is now available at uploads/listKeys.txt - Gantros' index is now in the default bookmarks. It uses the same software as Enzo's index, which is no longer updated. - The obsolete and deprecated XMLLibrary and XMLSpider plugins are no longer officially supported. They will still load for those who have them added, but are no longer shown on the plugin page. - In the interests of releasing this build more quickly, the new version of FlogHelper does not support exporting and importing backups from the web UI. The old backup code did not work with the new Freenet version after removing db4o. People can instead back up "plugins.floghelper.FlogHelper" files in the plugin-data directory. These can be dropped into the directory after unloading FlogHelper to restore a backup. - ThawIndexBrowser works again. Thanks saces! - Fred translations are updated. - Add two seed nodes, one sponsored by meshnet.pl - the Polish radio/meshnet darknet users group, and another run by ArneBab. Thanks! - Update existing seed node references.
testing-build-1484-pre3: next ():
- increase scaling to 3 again because 1480 nodes otherwise slow down updated nodes - plugin manager cleanup: more readable code - new ogg theora, vorbis, flac filter: can show ogg-files! - m3u filter: can stream playlists - make winterfacey theme the default - update WoT to build 20. - update Sharesite version to 0.4.7 - avoid losing download state on restart - re-apply much less recently failed - only FMS and Sone on ChatForums suggestion page to fit the projects longstanding stance. If you disagree, you can create a freesite to promote it. - update included seednodes 1483: - new default theme: sky static - included experimental winterfacey theme - switch to gradle with witness as build system - run in background mode - switch from jni to jna - Override list request identifier - use fallocate - ipv6 fixes - fix warnings - optimization - Persist "Bookmark Updated" notifications across restarts - minimum bandwidth increased to 10KiB again - undo update of pinned SSL certificates (site no longer exists) 1480: - Ship new Windows Installer and Tray - Update Freemail to v0.2.7.3-r2 1479: - optimized network settings for the new structure since the link length fix : less peers for the same bandwidth should result in higher throughput per connection. This allows for less powerful devices to join (with low bandwidth settings) and should provide better bandwidth utilization for very fast nodes. - Re-enable RSA-based ciphers for SSL-connections to the node - add jfniki index bookmark (use "add default bookmarks" to get it) - l10n: pull translations from transifex - plugins: WebOfTrust build0019, Changelog: https://github.com/freenet/plugin-WebOfTrust/releases/tag/build0019 source available at CHK@gt~foMPFR5ZAhOhSOsFw68f5PBjJuCYpe~ZXPPA1t6g,pk7h34mG5hRsBPhVFWr5UllVbJXU-PS7tC9rbILvoOk,AAMC--8/WebOfTrust-build0019-source.tar.bz2 - plugins: Freemail v0.2.7.3 (new translations) source available at CHK@ZOfWMdsxhS1Lg6QKWK4CJZvVt9RYkkjFnU6-PCizHbg,zfTEQX6DexdUm9-eGyDSP5vKvp76b38SCBS7W9zkoGE,AAMC--8/Freemail-v0.2.7.3-source.tar.bz2 1478 (2017-04-05): - prepare pinned certs for the new Amazon-web-services based site. 1477 (2017-03-09): - fix a potential clickjacking vulnerability in legacy browsers - patch open redirect and header injection vulnerability introduced in 1476 - SSL with RSA certificates on fproxy has been broken in 1475, fix that 1476 (2017-03-02): - FOAF efficiency enhancements for fast nodes - gif filter - harden the SSL configuration of fproxy - logger fix - spare bitmap efficiency optimization - reduce custom code - show semi-persistent update info next to bookmarks - plugin updates: Sharesite 0.4.4, Library v37, Freereader 6 1475 (2016-06-25): - 0006745: Disk crypto: Should type password twice when setting it - 0006344: Change default compatibility mode to COMPAT_1466 - 0006488: using “visit freesite” to visit a freesite with a hash (#) fails instead of opening it and jumping to the anchor. - fix a critical bug: prevent announcement loops - drop support for negtype9 (non-cummulative ack logic) - start to warn user that java7 is EOL - PluginInfoMessage: Fix wrong "does not provide FCP" info about plugins - Stop warning users that java9 isn't recent enough - Don't use FOAF if the HTL isn't high enough - Attempt to update update.sh - l10n improvements - cooldown improvements - load-limiting changes (token buckets) - MessageFilter improvements - relax the CSS parser (see https://github.com/freenet/fred/pull/446) - support for HTML Audio tags - ask/confirm the disk-crypto password in the wizard - make the paste-a-key control usable on the WelcomeToadlet - the default compatibility mode for inserts is now COMPAT_CURRENT - remove the DSA related parameters from noderefs - Fix a major bug that might explain the poor connectivity since 1473 1473 (2016-05-22): - MP3 filter fixes - Reduce test memory usage - Fix opennet announcements not having location set - Fix binary blob download over FCP - Add The Filtered Index to the default bookmark list - Wait for running transfers on RouteNotFound - Mark Freenet traffic with QoS - Fix handling of filenames with non-ASCII spaces 1472 (2016-03-19): - Fix uploads stalling when using MAXIMUM physical security. - Fix lots of "setNativePriority(X) has failed!", which was caused by a serious thread priority problem. This might fix nodes unexpectedly losing peers. - Order alerts within a category by time: if you have lots of messages from darknet peers they will remain nicely sorted. - There is now a caching layer which should significantly reduce I/O load. - Update WebOfTrust from build 15 to build 18. Its changelogs are separate, but the changes reduce CPU load. Incremental score recomputation requires roughly 3 percent of the time of full recomputation, and queuing trust lists to disk lowers thread usage. - Add partial Greek translation. - Update German, Bokmål, Brazilian Portuguese, Simplified Chinese, and Traditional Chinese translations. - Fix Bokmål localization loading. - Remove Gantros Index from the default bookmark list because it stopped updating. - Remove Linkageddon from the default bookmark list because it stopped updating. - New version of UPnP to fix some instability and compatibility problems. Thanks to 007pig we have a new UPnP plugin in development which supports UPnP2, but it is not yet included. - New version of KeyUtils. 1471 (--): - (skipped) 1470 (2015-08-15): - FIX Freemail problems that prevented sending mail - remove a compromised opennet seed node - Freemail gains a new message link on the inbox page, links to senders' WoT profiles, and new translations 1469 (2015-07-19): - FIX two bugs introduced in build 1468. One caused very slow operation and high CPU usage with large files and physical security levels above None (i.e. Freenet-level disk encryption). The other prevented interactive usage (e.g. freesite browsing) while finishing large downloads or starting large uploads. 1468 (2015-07-11): - Replace DB4O - Existing unfinished downloads and uploads will be imported to a new format, which requires restarting them from the beginning. - Space for downloads is now all allocated at the start, so machines very low on disk space may run out, which causes downloads to temporarily fail until more space is available. - CHKs will change due to metadata bugfixes. - Some unofficial plugins will need to be updated because of API changes. Sone already works, as do all official plugins. - The queue format changes should make it extremely rare to lose the entire queue: the impact of corruption will almost always be localized. - Multi-container / site uploads can now be persistent, making it more practical to upload large sites. - Passworded physical security is now much stronger. (Full-disk encryption is still preferable.) - Improve Windows installer - The Windows installer now defaults to starting Freenet on login. - There is a new Windows tray app with some useful features that is included with new installations. - misc - The list of download keys moved from downloads/listFetchKeys.txt to downloads/listKeys.txt. - A list of upload keys is now available at uploads/listKeys.txt - Gantros' index is now in the default bookmarks. It uses the same software as Enzo's index, which is no longer updated. - The obsolete and deprecated XMLLibrary and XMLSpider plugins are no longer officially supported. They will still load for those who have them added, but are no longer shown on the plugin page. - In the interests of releasing this build more quickly, the new version of FlogHelper does not support exporting and importing backups from the web UI. The old backup code did not work with the new Freenet version after removing db4o. People can instead back up "plugins.floghelper.FlogHelper" files in the plugin-data directory. These can be dropped into the directory after unloading FlogHelper to restore a backup. - ThawIndexBrowser works again. Thanks saces! - Fred translations are updated. - Add two seed nodes, one sponsored by meshnet.pl - the Polish radio/meshnet darknet users group, and another run by ArneBab. Thanks! - Update existing seed node references.
testing-build-1484-pre2: next ():
- increase scaling to 3 again because 1480 nodes otherwise slow down updated nodes - plugin manager cleanup: more readable code - new ogg theora, vorbis, flac filter: can show ogg-files! - m3u filter: can stream playlists - make winterfacey theme the default - update WoT to build 20. - update Sharesite version to 0.4.7 - avoid losing download state on restart - re-apply much less recently failed 1483: - new default theme: sky static - included experimental winterfacey theme - switch to gradle with witness as build system - run in background mode - switch from jni to jna - Override list request identifier - use fallocate - ipv6 fixes - fix warnings - optimization - Persist "Bookmark Updated" notifications across restarts - minimum bandwidth increased to 10KiB again - undo update of pinned SSL certificates (site no longer exists) 1480: - Ship new Windows Installer and Tray - Update Freemail to v0.2.7.3-r2 1479: - optimized network settings for the new structure since the link length fix : less peers for the same bandwidth should result in higher throughput per connection. This allows for less powerful devices to join (with low bandwidth settings) and should provide better bandwidth utilization for very fast nodes. - Re-enable RSA-based ciphers for SSL-connections to the node - add jfniki index bookmark (use "add default bookmarks" to get it) - l10n: pull translations from transifex - plugins: WebOfTrust build0019, Changelog: https://github.com/freenet/plugin-WebOfTrust/releases/tag/build0019 source available at CHK@gt~foMPFR5ZAhOhSOsFw68f5PBjJuCYpe~ZXPPA1t6g,pk7h34mG5hRsBPhVFWr5UllVbJXU-PS7tC9rbILvoOk,AAMC--8/WebOfTrust-build0019-source.tar.bz2 - plugins: Freemail v0.2.7.3 (new translations) source available at CHK@ZOfWMdsxhS1Lg6QKWK4CJZvVt9RYkkjFnU6-PCizHbg,zfTEQX6DexdUm9-eGyDSP5vKvp76b38SCBS7W9zkoGE,AAMC--8/Freemail-v0.2.7.3-source.tar.bz2 1478 (2017-04-05): - prepare pinned certs for the new Amazon-web-services based site. 1477 (2017-03-09): - fix a potential clickjacking vulnerability in legacy browsers - patch open redirect and header injection vulnerability introduced in 1476 - SSL with RSA certificates on fproxy has been broken in 1475, fix that 1476 (2017-03-02): - FOAF efficiency enhancements for fast nodes - gif filter - harden the SSL configuration of fproxy - logger fix - spare bitmap efficiency optimization - reduce custom code - show semi-persistent update info next to bookmarks - plugin updates: Sharesite 0.4.4, Library v37, Freereader 6 1475 (2016-06-25): - 0006745: Disk crypto: Should type password twice when setting it - 0006344: Change default compatibility mode to COMPAT_1466 - 0006488: using “visit freesite” to visit a freesite with a hash (#) fails instead of opening it and jumping to the anchor. - fix a critical bug: prevent announcement loops - drop support for negtype9 (non-cummulative ack logic) - start to warn user that java7 is EOL - PluginInfoMessage: Fix wrong "does not provide FCP" info about plugins - Stop warning users that java9 isn't recent enough - Don't use FOAF if the HTL isn't high enough - Attempt to update update.sh - l10n improvements - cooldown improvements - load-limiting changes (token buckets) - MessageFilter improvements - relax the CSS parser (see https://github.com/freenet/fred/pull/446) - support for HTML Audio tags - ask/confirm the disk-crypto password in the wizard - make the paste-a-key control usable on the WelcomeToadlet - the default compatibility mode for inserts is now COMPAT_CURRENT - remove the DSA related parameters from noderefs - Fix a major bug that might explain the poor connectivity since 1473 1473 (2016-05-22): - MP3 filter fixes - Reduce test memory usage - Fix opennet announcements not having location set - Fix binary blob download over FCP - Add The Filtered Index to the default bookmark list - Wait for running transfers on RouteNotFound - Mark Freenet traffic with QoS - Fix handling of filenames with non-ASCII spaces 1472 (2016-03-19): - Fix uploads stalling when using MAXIMUM physical security. - Fix lots of "setNativePriority(X) has failed!", which was caused by a serious thread priority problem. This might fix nodes unexpectedly losing peers. - Order alerts within a category by time: if you have lots of messages from darknet peers they will remain nicely sorted. - There is now a caching layer which should significantly reduce I/O load. - Update WebOfTrust from build 15 to build 18. Its changelogs are separate, but the changes reduce CPU load. Incremental score recomputation requires roughly 3 percent of the time of full recomputation, and queuing trust lists to disk lowers thread usage. - Add partial Greek translation. - Update German, Bokmål, Brazilian Portuguese, Simplified Chinese, and Traditional Chinese translations. - Fix Bokmål localization loading. - Remove Gantros Index from the default bookmark list because it stopped updating. - Remove Linkageddon from the default bookmark list because it stopped updating. - New version of UPnP to fix some instability and compatibility problems. Thanks to 007pig we have a new UPnP plugin in development which supports UPnP2, but it is not yet included. - New version of KeyUtils. 1471 (--): - (skipped) 1470 (2015-08-15): - FIX Freemail problems that prevented sending mail - remove a compromised opennet seed node - Freemail gains a new message link on the inbox page, links to senders' WoT profiles, and new translations 1469 (2015-07-19): - FIX two bugs introduced in build 1468. One caused very slow operation and high CPU usage with large files and physical security levels above None (i.e. Freenet-level disk encryption). The other prevented interactive usage (e.g. freesite browsing) while finishing large downloads or starting large uploads. 1468 (2015-07-11): - Replace DB4O - Existing unfinished downloads and uploads will be imported to a new format, which requires restarting them from the beginning. - Space for downloads is now all allocated at the start, so machines very low on disk space may run out, which causes downloads to temporarily fail until more space is available. - CHKs will change due to metadata bugfixes. - Some unofficial plugins will need to be updated because of API changes. Sone already works, as do all official plugins. - The queue format changes should make it extremely rare to lose the entire queue: the impact of corruption will almost always be localized. - Multi-container / site uploads can now be persistent, making it more practical to upload large sites. - Passworded physical security is now much stronger. (Full-disk encryption is still preferable.) - Improve Windows installer - The Windows installer now defaults to starting Freenet on login. - There is a new Windows tray app with some useful features that is included with new installations. - misc - The list of download keys moved from downloads/listFetchKeys.txt to downloads/listKeys.txt. - A list of upload keys is now available at uploads/listKeys.txt - Gantros' index is now in the default bookmarks. It uses the same software as Enzo's index, which is no longer updated. - The obsolete and deprecated XMLLibrary and XMLSpider plugins are no longer officially supported. They will still load for those who have them added, but are no longer shown on the plugin page. - In the interests of releasing this build more quickly, the new version of FlogHelper does not support exporting and importing backups from the web UI. The old backup code did not work with the new Freenet version after removing db4o. People can instead back up "plugins.floghelper.FlogHelper" files in the plugin-data directory. These can be dropped into the directory after unloading FlogHelper to restore a backup. - ThawIndexBrowser works again. Thanks saces! - Fred translations are updated. - Add two seed nodes, one sponsored by meshnet.pl - the Polish radio/meshnet darknet users group, and another run by ArneBab. Thanks! - Update existing seed node references.
testing-build-1484-pre1
This is a TESTING release.
To help testing it, just stop your freenet node, replace freenet.jar, freenet.jar.new and freenet-stable-latest with the freenet.jar file, then start your node again.
Changes:
- increase scaling to 3 again because 1480 nodes otherwise slow down updated nodes
- plugin manager cleanup: more readable code
- new ogg theora, vorbis, flac filter: can show ogg-files!
- m3u filter: can stream playlists
- make winterfacey theme the default
build01483: 2018-11-18
Freenet 0.7.5 build 1483 is now available. [overview] - Use BELOW_NORMAL_PRIORITY_CLASS instead of BACKGROUND_MODE on windows This should fix excessive memory usage reported on Windows. Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2018-11-18 Changes in 1483: - Use BELOW_NORMAL_PRIORITY_CLASS instead of BACKGROUND_MODE on windows This should fix excessive memory usage reported on Windows. - Arne Babenhauserheide --- Arne Babenhauserheide (freenet releases) (2): Update default bookmark editions Build 1483 Florent Daigniere (1): Use BELOW_NORMAL_PRIORITY_CLASS instead of BACKGROUND_MODE on windows
build01482: 2018-11-11
Freenet 0.7.5 build 1482 is now available. [overview] This release addresses increased CPU load in 1481 by reducing the peer-count by 30%. The lower number of peers should reduce the necessary work for routing. Since all nodes reduce their peercount, the bandwidth per peer rises, so the speeds should stay the same. Also 1482 applies the winterfacey theme adaptions by poet. You can test the winterfacey theme by activating it in Configuration -> Web interface. Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2018-11-11 Changes in 1482: This is an emergency fix to address doubled to tripled CPU load in 1481. - reduce opennet peernumber scaling_constant from 4 to 1.61803. Reduced peer-count should reduce the CPU load from routing. Since all reduce their peercount, the bandwidth per peer rises, and bandwidth should stay the same. - reduce log level of removing wrong node or removing twice to minor - apply the winterfacey adaptions by poets - Arne Babenhauserheide [include shortlogs of any installer or plugin changes] --- Arne Babenhauserheide (3): reduce peer count scaling from 4 to 2.5 cut the peer count scaling to 1.61803: 10K has 4 peers update scaling constant in comment, too Arne Babenhauserheide (freenet releases) (3): reduce log level of removing wrong node or removing twice to minor Update default bookmark editions Build 1482 poets@FMS (1): winterfacey adaptions by poets
Freenet 0.7.5 build 1481
Freenet 0.7.5 build 1481 is now available
The Freenet Team is proud to release Freenet build 1481, the first
build to be compiled from gradle! This concludes work during the past
two years to make it easier for new developers to start hacking on
Freenet.
Your Freenet node should update itself from Freenet via the auto-update.
To install a new node, get an installer from
https://freenetproject.org/pages/download.html
This release rekeys the update URIs to ensure they are compliant with
RFC6979. It also splits off java 7 into its own update key for 1482,
so we can use java 8 starting with 1483. The updated keys have been
split into shares using ssss-split and distributed among core
developers to maximize our release management bus factor:
https://en.wikipedia.org/wiki/Bus_factor
We also added the Winterfacey theme and set sky-static as default
theme until Winterfacey got more testing. You can test switch between
themes on Configuration -> Web Interface
Thank you for using Freenet!
And a special thank you to DC* (desyncr) who tracked down an OOM so we
could finally fix it and release after 6 weeks of fruitless search!
- Arne Babenhauserheide, current release manager
About Freenet:
Freenet is free software which lets you anonymously share files, browse
and publish "freesites" (web sites accessible only through Freenet) and
chat on forums, without fear of censorship. Freenet is decentralised to
make it less vulnerable to attack, and if used in "darknet" mode, where
users only connect to their friends, is very difficult to detect.
See https://freenetproject.org/pages/about.html
Developer changelog:
2018-10-16
Changes in 1481:
Switch to gradle. If you block network access of your development box,
you can use ./gradlew --offline jar test (you will then need to get
the dependencies yourself).
Switch from JNI (Java Native Interfaces) to JNA (Java Native
Access). This might allow getting rid of hard-to-build
freenet-ext.jar.
This also means that you need jna-4.2.2.jar and jna-platform-4.2.2.jar
in your freenet folder. The auto-updater takes care of that for you.
If you update manually by copying in new jar-files, you need to adapt
the classpath in wrapper.conf or in run.sh (if you do not use the wrapper).
Added a workaround for JNA bug in multi-user system: move tempdir into
the freenet folder: java.io.tmpdir=./tmp/; Needed until
java-native-access/jna#985 is fixed
upstream.
Changes to update keys: Rekey the update URIs to ensure they are
RFC6979. Split off java 7 into its own update key for 1482, so we can
use java 8 starting with 1483. The updated keys have been split into
shares using ssss-split and distributed among core developers. See
https://github.com/freenet/scripts/blob/master/generate_autoupdate_key
Add Winterfacey theme. Set sky-static as default theme until
Winterfacey got more testing.
Further changes:
- Fix commons-compress bug, might help fix the Gentoo ebuild.
- Execute in background mode (reduced I/O priority) on windows NT6+.
- Override list request identifier
- use fallocate
- ipv6 fixes
- fix warnings
- optimization
- Persist "Bookmark Updated" notifications across restarts
- minimum bandwidth increased to 10KiB again
- undo update of pinned SSL certificates (site no longer exists)
- Add support for GIF89a
- Fix wrapped FCP message
- Add config option to allow caching of CHK and SSK keys
- bookmarks: fix jumping layout (missing activelink)
- reduce thread usage.
- Prepare for Java 8 - 1482 will be the last build to support Java 7.
A heartfelt thank you to all involved!
And a special thank you to DC* (desyncr) who tracked down an OOM so we could finally fix it and release after 6 weeks of fruitless search!
- Arne Babenhauserheide
shortlog:
Arne Babenhauserheide (7):
add task ./gradlew tar, still pretty rough
wrapper.conf: add JNA tmpdir on update if it is not yet set
commit COMPRESS-449 workaround, see https://freenet.mantishub.io/view.php?id=6921, thanks to dennisne
always use BouncyCastle in KeyGenUtils
use a SkipShieldingInputStream as commons compress workaround
use the SkipShieldingInputStream
gradle: apply compatibility mode to all classes, not just to Version.java
Arne Babenhauserheide (freenet releases) (24):
update version to 1480 to be in sync with master
remove unnecessary TODO
remove stray files
remove stray import
Update default bookmark editions
add 1480 section to NEWS
increase minimum bandwith to 10KiB again
adjust wizard and comment to increased min bandwidth
fix typo (found by TheSeeker)
Build 1481
undo SSL certificates switched to AWS
add jna-platform and order
Update default bookmark editions
Update default bookmark editions
Build 1481
Update default bookmark editions
KeyGenUtils: re-use the bouncy castle instance to avoid the memory leak.
Update default bookmark editions
Revert "Fix code for non-DOS systems", because hiding the files makes them write-protected, so the original commit has to go.
Revert "bug6562: mark temporary files as hidden", hidden files are non-writable under windows, see https://bugs.eclipse.org/bugs/show_bug.cgi?id=194216 — thanks to dark_mater on FMS to reporting this.
Revert "Fix code for non-DOS systems", because hiding the files makes them write-protected, so the original commit has to go.
Revert "bug6562: mark temporary files as hidden", hidden files are non-writable under windows, see https://bugs.eclipse.org/bugs/show_bug.cgi?id=194216 — thanks to dark_mater on FMS to reporting this.
re-apply 1480 improvements to localization
only lock the crypto provider in KeyGenUtils to BouncyCastle on Java 7, where missing ECC in SunCE leads to failing tests.
Bert Massop (42):
Rewrite BitArray to use BitSet internally
Use LinkedList instead of our own DoublyLinkedList
Move LimitedEnumeration into its sole using class
Remove unused LimitedRangeIntByteArrayMap
Deprecate SortedIntSet, document its peculiarities and simplify
Remove unused Timer
SessionManager: remove dead sanity check
Improve SparseBitmap efficiency
Integer.hashCode() is not available on Java 7; just use the value
Add default serialVersionUIDs
Fix rawtypes and unchecked warnings
Remove redundant casts
Fix warnings about missing @deprecated
Suppress fallthrough warnings in PNGFilter
Implement hashCode where equals is overridden
Remove unnecessary Math.min()
Fix SRGA breakage due to misinterpretation of array generics
Improve clarity and brevity of SortedIntSet
Add unit test for SortedIntSet
Make the open file descriptor count non-static for unit tests
Remove writeFilter: it is never used and implementations are broken
Implement GIF87a filter
Also remove writeFilter-related advice messages
Add support for GIF89a
Throw user-readable exception on EOFException
Fix missing block termination
Add support for Netscape GIF Loop Extension
Improve GIFFilter documentation
Add GIFFilter error messages to l10n
Update GIFFilter status
Simplify condition
Use IMAGE_SEPARATOR constant appropriately
Actually filter GIF87a instead of just preparing for it
Add unit test for GIFFilter
Get rid of some asserts; clamp the values instead
Add wildcard copy for filter test files
Make SSL work on Java 8+
Extend self-signed certificate life to 10 years
Switch to non-outdated high-security SSL crypto
Improve SSL error messages
Factor out magic values for SSL
nextgens suggested to use 256-bit ECDSA instead
Carlo Alberto Ferraris (4):
Have fred execute in background mode (reduced I/O priority) on windows NT6+ This patch uses JNA (3.2.7) to call the native OS libraries. jna.jar is not included in the patch but can be fetched from http://java.net/projects/jna/downloads
Fix small review issues
Use proper exception
Add comments and license.
D-sha (4):
Add nice links to README.md
Fix donation link in README.md
tidy README.building.md
more tidy README.building.md
DC* (1):
Fix memory leak with BouncyCastleProvider
David ‘Bombe’ Roden (12):
Fix wrapped FCP message
Override list request identifier
Add test for FCP message wrapper
Fix wrapping a null FCP message
Don’t send unwanted list request identifiers
Remove parameter that’s always “true”
Simplify methods that previously used the parameter
Make handleDownload method private
Add config option to allow caching of CHK and SSK keys
Fix code for non-DOS systems
Don’t show HTL 0 on stats page
Remove empty table row
Dean (1):
Update README.md
Florent Daigniere (98):
Initial gradle support
Update the travis build-file, make it use/cache gradle arctefacts
Fix the unit tests not passing
get rid of it since it's not used yet
Ensure that Travis caches properly
fix version-string updating
fork a JVM for every test
give up on PooledFileRandomAccessBufferTest
Just disable the failing test when we know it won't succeed
try bertm's new patch
Replace our NativeThread JNI with JNA
Use posix_fallocate()/fallocate() where possible
doh
untested code factoring out the legacy fallocate
CPUID isn't used anymore
use rfc5014: IPV6_PREFER_SRC_PUBLIC
Don't output to wrapper.log if it's a small resize
set IPV6_PREFER_SRC_PUBLIC regardless of...
testing-build-1481-pre1: - switch to gradle with witness as build system
- run in background mode - switch from jni to jna - Override list request identifier - use fallocate - ipv6 fixes - fix warnings - optimization - Persist "Bookmark Updated" notifications across restarts - minimum bandwidth increased to 10KiB again - undo update of pinned SSL certificates (site no longer exists)
build01480: 2018-01-06
Freenet 0.7.5 build 1480 is now available. [overview] - Ship new Windows Installer and Tray - Update Freemail to v0.2.7.3-r2 Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2018-01-06 Changes in 1480: - Ship new Windows Installer and Tray - Update Freemail version to v0.2.7.3-r2 - Arne Babenhauserheide --- wintray Stephen Oliver (31): Update NuGet packages to newest .NET 4.0 versions Allow VS to update the version listed in designer files Add logging class to facilitate debug logging separate from NLog Add a common base class for browsers Initialize FNLog at launch Add class for finding the best available JRE Determine which wrapper binary to use based on the available JREs Add MissingJRE to list of thrown exceptions in comment Use FNLog in NodeController Use FNLog in BrowserUtil Use FNLog in CommandsMenu Add browser class for Edge Convert InternetExplorer to a Browser subclass Convert Chrome to a Browser subclass Add support for finding 64-bit Opera browser Convert Opera to a Browser subclass Convert Firefox registry search code to use explicit hives & views Add Firefox fallback search paths Convert Firefox to Browser subclass, use registry views and add fallback Add appveyor configuration Always set/delete startup arguments in the 32-bit registry view Set autorun config to match what the installer was already doing Migrate preferences from older assembly versions at launch v1.1.0.0 Remove reference to System.Deployment Add Linux/Windows build instructions to readme v1.1.1.0 Fix inverted null check reported by Coverity Check native registry view for Windows version Fix static analysis warning v1.2.0.0 --- wininstaller-innosetup Arne Babenhauserheide (freenet releases) (1): commit wintray v1.2.0.0 built from commit id 0dae2e490adbbbe849d97458ecf2d5e05c31495d Stephen Oliver (20): Add current 32-bit and 64-bit Java 8 installers Check for and install the correct 32-bit or 64-bit JRE as needed Remove older 32-bit Java installer Prevent setup from being run multiple times in parallel Add comment about the auto run being in the 32-bit registry Update 32/64-bit wrappers from our CI build, tag v3.5.32 Never write to wrapper.conf unless the file doesn't exist Add comment about 64-bit .NET installer writing 32-bit registry keys Update FreenetTray from tag v1.0.1.0-fix64-test1 Deploy FreenetTray config with the binary Deploy 64-bit wrapper files during installation Prevent re-installation, offer to run update.cmd instead Bump installed version to most recent at current date Add/update full set of current fred plugins Update seednodes file from current Update fred to release build01478 Revert "Never write to wrapper.conf unless the file doesn't exist" Add appveyor config Always set autorun registry key, tray app will add/remove it as needed Remove comment about registry key views for the autorun key --- Arne Babenhauserheide (freenet releases) (2): Update default bookmark editions Build 1480