Radically Open Security (ROS) kindly performed a security audit of some parts of Monal. Specifically they audited the usage of our XML query language and the implementations of SASL2, SCRAM and SSDP. The results in a nutshell: no security issues found, read the full report here: Monal IM penetration test report 2024 1.0 .
Some may have predicted it, but now it happened: the chinese government banned Monal from the chinese appstore. Below is the complete email we got from Apple regarding this ban. We got that mail twice, once on Wed, 27 Mar 2024 15:46:18 +0100 and a second time on Thu, 28 Mar 2024 17:01:19 +0100. The macOS version of Monal is still available in the appstore and with homebrew, though. Here is the full mail, a translation of the CAC articles can be found over here for reference....
It came to light that our publications previously linked in a section under About were not that discoverable. Now we moved the whole publications list to its own top level menu entry unter Publications. Enjoy watching the talk recordings and reading the slides and XEPs. And last but not least: Happy new year!
After several month of hard work we just released Monal 6.0. This version comes with new artwork by Ann-Sophie Zwahlen, support for Audio-Calls funded by the EU’s NGI Assure via the NLnet Foundation and many other improvements and bugfixes. The full list of changes can be seen below: NEW: Audio-call support (This feature will not be available to users in China and macOS users!) Other changes: New Logo and new placeholder images by Ann-Sophie Zwahlen New “Add Contact” and “Contact Requests” UI Complete rewrite of OMEMO code Speed up app start Add support for SASL2 (XEP-0388) Implement XEP-0424: Message Retraction Add support for creating invitations (button only displayed if your server supports it, see https://docs....
In this new series, I want to shine some light onto specific parts of Monal’s internals. It’s dedicated to programmers or people curious about how Monal works internally. If you want to give some feedback, feel free to send an email to thilo@monal-im.org Handlers Handlers in Monal are something like serializable callbacks. In iOS the app can get frozen or even killed any time and the push implementation requires the complete app state to frequently transition between the Main App and the Notification Service App Extension (NSE)....