Ricochet 1.0.3
The Tor Project released today a security announcement regarding an anonymity attack carried out on users of hidden services, presumably by the authors of a withdrawn research talk.
I've written an explanation of what this means for users of Ricochet and similar programs, and the steps we'll be taking in the future to mitigate similar problems. This release includes a new version of Tor, which will help reduce the impact of these attacks in the future.
This release also moves configuration to a more flexible and reliable system (existing configuration is migrated automatically), adds a "single window" mode that combines the contact list and chat windows, includes new translations, and more.
Downloads and PGP signatures are also available from https://ricochet.im/releases/1.0.3/
Security
- Updated tor to 0.2.4.23
Features
- Migrated configuration to a more useful and robust system (#21)
- OS X bundles are now signed to remove Gatekeeper warnings
- Added optional 'single window' mode (#19)
- Added options to skip the "Open Browser" security nagging dialog
- The contact list shows the number of unread messages
- Added Danish translation by Mikkel Kroman
- Added Portuguese (Brazil) translation by swperman
Fixes
- Fixed Windows installer on 32bit systems (also in 1.0.2.1)
- Fixed loading old platform-location configuration files (1.0.2 regression)