FreeBook/bitchat
0
Fork 0
forked from permissionlesstech/bitchat
Code Pull requests Activity

Compare commits

merge into: FreeBook:main
Branches Tags
FreeBook:main
FreeBook:automation/georelay-data
FreeBook:feat/app-lock
FreeBook:feat/favorites-consent
FreeBook:fix/system-message-spoofing
FreeBook:feat/identity-changed-warning
FreeBook:feat/ptt-consent
FreeBook:feat/read-receipt-toggle
FreeBook:harden/radio-metadata
FreeBook:codex/fix-nostr-envelope-labeling
FreeBook:feat/wifi-bulk-transport
FreeBook:fix/i18n-full-translations
FreeBook:fix/i18n-defaultvalue-net
FreeBook:fix/es-translations
FreeBook:feat/courier
FreeBook:fix/tor-egress-verification
FreeBook:chore/perf-privacy-polish
FreeBook:feature/request-sync-upgrade
FreeBook:codex/fix-unbounded-rate-limit-vulnerability
FreeBook:codex/fix-cashu-tokens-long-message-vulnerability
FreeBook:codex/fix-unbounded-nostr-tag-logging-vulnerability
FreeBook:codex/propose-fix-for-unbounded-teleport-tag-cache
FreeBook:refactor/noise
FreeBook:update-gh-actions
FreeBook:refactor/nostr
FreeBook:run-package-tests
FreeBook:pr-998-reviewed
FreeBook:update-georelays-20260111T060518Z
FreeBook:fix/deduplication-service-thread-safety
FreeBook:update-georelays-20251130T060505Z
FreeBook:update-georelays-20251207T060452Z
FreeBook:update-georelays-20251214T060516Z
FreeBook:update-georelays-20251221T060509Z
FreeBook:update-georelays-20251228T060519Z
FreeBook:update-georelays-20260104T060523Z
FreeBook:update-tor-0.4.8.19
FreeBook:update-georelays-20251102T060429Z
FreeBook:update-georelays-20251109T060501Z
FreeBook:update-georelays-20251116T060501Z
FreeBook:update-georelays-20251123T060504Z
FreeBook:update-georelays-20251026T060459Z
FreeBook:pr-834-refactored
FreeBook:feature/audio-image-only
FreeBook:feature/ble-binary-transfers
FreeBook:ble-binaries
FreeBook:avoid-recreating-session
FreeBook:feature/ble-binary-transfer
FreeBook:fix/ble-queue-misuse
FreeBook:refactor/fix-top-3-critical-issues
FreeBook:file-transfer
FreeBook:fix/debug-appinfoview-logs
FreeBook:fix/various-ui-fixes
FreeBook:resolve-590
FreeBook:feat/geocache
FreeBook:revert-585-feature/github-action
FreeBook:fix/add-tor-simulator-slice
FreeBook:fix/favorite-issues
FreeBook:pr/583-correct
FreeBook:fix/general-queue
FreeBook:feat/tor-small
FreeBook:perf/optimizations
FreeBook:fix/top3-critical-routing-buffers
FreeBook:feature/pow-geohash-mining-ui
FreeBook:feature/screenshot-privacy-warning
FreeBook:feature/geohash-bookmarks
FreeBook:fix/geohash-ux
FreeBook:refactor/various
FreeBook:fix/minor-ui
FreeBook:fix/relaying
FreeBook:refactor/quick-wins
FreeBook:feature/nostr-schnorr-signing
FreeBook:cleanup/dead-code-sweep
FreeBook:feature/macos-geohash
FreeBook:feat/ble-relay-optimizations
FreeBook:feat/qr-verification
FreeBook:feat/nip17-nip44-geohashdm
FreeBook:fix/notifications
FreeBook:feat/georelay
FreeBook:fix/chat-perf
FreeBook:v1.7.1
FreeBook:v1.7.0
FreeBook:v1.6.0
FreeBook:v1.5.4
FreeBook:v1.5.3
FreeBook:v1.5.2
FreeBook:v1.5.1
FreeBook:v1.5.0
FreeBook:v1.4.4
FreeBook:v1.4.3-actual
FreeBook:v1.4.3
FreeBook:peer-id-10
FreeBook:peer-old
FreeBook:v1.4.2
FreeBook:v1.4.1
FreeBook:v1.4.0
FreeBook:v1.3.4
FreeBook:v1.3.3
FreeBook:v1.3.2
FreeBook:v1.3.1
FreeBook:v1.3.0
FreeBook:v1.2.0
FreeBook:v1.1
...
pull from: FreeBook:pr-998-reviewed
Branches Tags
FreeBook:automation/georelay-data
FreeBook:feat/app-lock
FreeBook:feat/favorites-consent
FreeBook:fix/system-message-spoofing
FreeBook:feat/identity-changed-warning
FreeBook:feat/ptt-consent
FreeBook:feat/read-receipt-toggle
FreeBook:main
FreeBook:harden/radio-metadata
FreeBook:codex/fix-nostr-envelope-labeling
FreeBook:feat/wifi-bulk-transport
FreeBook:fix/i18n-full-translations
FreeBook:fix/i18n-defaultvalue-net
FreeBook:fix/es-translations
FreeBook:feat/courier
FreeBook:fix/tor-egress-verification
FreeBook:chore/perf-privacy-polish
FreeBook:feature/request-sync-upgrade
FreeBook:codex/fix-unbounded-rate-limit-vulnerability
FreeBook:codex/fix-cashu-tokens-long-message-vulnerability
FreeBook:codex/fix-unbounded-nostr-tag-logging-vulnerability
FreeBook:codex/propose-fix-for-unbounded-teleport-tag-cache
FreeBook:refactor/noise
FreeBook:update-gh-actions
FreeBook:refactor/nostr
FreeBook:run-package-tests
FreeBook:pr-998-reviewed
FreeBook:update-georelays-20260111T060518Z
FreeBook:fix/deduplication-service-thread-safety
FreeBook:update-georelays-20251130T060505Z
FreeBook:update-georelays-20251207T060452Z
FreeBook:update-georelays-20251214T060516Z
FreeBook:update-georelays-20251221T060509Z
FreeBook:update-georelays-20251228T060519Z
FreeBook:update-georelays-20260104T060523Z
FreeBook:update-tor-0.4.8.19
FreeBook:update-georelays-20251102T060429Z
FreeBook:update-georelays-20251109T060501Z
FreeBook:update-georelays-20251116T060501Z
FreeBook:update-georelays-20251123T060504Z
FreeBook:update-georelays-20251026T060459Z
FreeBook:pr-834-refactored
FreeBook:feature/audio-image-only
FreeBook:feature/ble-binary-transfers
FreeBook:ble-binaries
FreeBook:avoid-recreating-session
FreeBook:feature/ble-binary-transfer
FreeBook:fix/ble-queue-misuse
FreeBook:refactor/fix-top-3-critical-issues
FreeBook:file-transfer
FreeBook:fix/debug-appinfoview-logs
FreeBook:fix/various-ui-fixes
FreeBook:resolve-590
FreeBook:feat/geocache
FreeBook:revert-585-feature/github-action
FreeBook:fix/add-tor-simulator-slice
FreeBook:fix/favorite-issues
FreeBook:pr/583-correct
FreeBook:fix/general-queue
FreeBook:feat/tor-small
FreeBook:perf/optimizations
FreeBook:fix/top3-critical-routing-buffers
FreeBook:feature/pow-geohash-mining-ui
FreeBook:feature/screenshot-privacy-warning
FreeBook:feature/geohash-bookmarks
FreeBook:fix/geohash-ux
FreeBook:refactor/various
FreeBook:fix/minor-ui
FreeBook:fix/relaying
FreeBook:refactor/quick-wins
FreeBook:feature/nostr-schnorr-signing
FreeBook:cleanup/dead-code-sweep
FreeBook:feature/macos-geohash
FreeBook:feat/ble-relay-optimizations
FreeBook:feat/qr-verification
FreeBook:feat/nip17-nip44-geohashdm
FreeBook:fix/notifications
FreeBook:feat/georelay
FreeBook:fix/chat-perf
permissionlesstech:automation/georelay-data
permissionlesstech:main
permissionlesstech:fix/system-message-spoofing
permissionlesstech:feat/app-lock
permissionlesstech:feat/favorites-consent
permissionlesstech:feat/identity-changed-warning
permissionlesstech:feat/ptt-consent
permissionlesstech:feat/read-receipt-toggle
permissionlesstech:harden/radio-metadata
permissionlesstech:codex/fix-nostr-envelope-labeling
permissionlesstech:feat/wifi-bulk-transport
permissionlesstech:fix/i18n-full-translations
permissionlesstech:fix/i18n-defaultvalue-net
permissionlesstech:fix/es-translations
permissionlesstech:feat/courier
permissionlesstech:fix/tor-egress-verification
permissionlesstech:chore/perf-privacy-polish
permissionlesstech:feature/request-sync-upgrade
permissionlesstech:codex/fix-unbounded-rate-limit-vulnerability
permissionlesstech:codex/fix-cashu-tokens-long-message-vulnerability
permissionlesstech:codex/fix-unbounded-nostr-tag-logging-vulnerability
permissionlesstech:codex/propose-fix-for-unbounded-teleport-tag-cache
permissionlesstech:refactor/noise
permissionlesstech:update-gh-actions
permissionlesstech:refactor/nostr
permissionlesstech:run-package-tests
permissionlesstech:pr-998-reviewed
permissionlesstech:update-georelays-20260111T060518Z
permissionlesstech:fix/deduplication-service-thread-safety
permissionlesstech:update-georelays-20251130T060505Z
permissionlesstech:update-georelays-20251207T060452Z
permissionlesstech:update-georelays-20251214T060516Z
permissionlesstech:update-georelays-20251221T060509Z
permissionlesstech:update-georelays-20251228T060519Z
permissionlesstech:update-georelays-20260104T060523Z
permissionlesstech:update-tor-0.4.8.19
permissionlesstech:update-georelays-20251102T060429Z
permissionlesstech:update-georelays-20251109T060501Z
permissionlesstech:update-georelays-20251116T060501Z
permissionlesstech:update-georelays-20251123T060504Z
permissionlesstech:update-georelays-20251026T060459Z
permissionlesstech:pr-834-refactored
permissionlesstech:feature/audio-image-only
permissionlesstech:feature/ble-binary-transfers
permissionlesstech:ble-binaries
permissionlesstech:avoid-recreating-session
permissionlesstech:feature/ble-binary-transfer
permissionlesstech:fix/ble-queue-misuse
permissionlesstech:refactor/fix-top-3-critical-issues
permissionlesstech:file-transfer
permissionlesstech:fix/debug-appinfoview-logs
permissionlesstech:fix/various-ui-fixes
permissionlesstech:resolve-590
permissionlesstech:feat/geocache
permissionlesstech:revert-585-feature/github-action
permissionlesstech:fix/add-tor-simulator-slice
permissionlesstech:fix/favorite-issues
permissionlesstech:pr/583-correct
permissionlesstech:fix/general-queue
permissionlesstech:feat/tor-small
permissionlesstech:perf/optimizations
permissionlesstech:fix/top3-critical-routing-buffers
permissionlesstech:feature/pow-geohash-mining-ui
permissionlesstech:feature/screenshot-privacy-warning
permissionlesstech:feature/geohash-bookmarks
permissionlesstech:fix/geohash-ux
permissionlesstech:refactor/various
permissionlesstech:fix/minor-ui
permissionlesstech:fix/relaying
permissionlesstech:refactor/quick-wins
permissionlesstech:feature/nostr-schnorr-signing
permissionlesstech:cleanup/dead-code-sweep
permissionlesstech:feature/macos-geohash
permissionlesstech:feat/ble-relay-optimizations
permissionlesstech:feat/qr-verification
permissionlesstech:feat/nip17-nip44-geohashdm
permissionlesstech:fix/notifications
permissionlesstech:feat/georelay
permissionlesstech:fix/chat-perf
FreeBook:v1.7.1
FreeBook:v1.7.0
FreeBook:v1.6.0
FreeBook:v1.5.4
FreeBook:v1.5.3
FreeBook:v1.5.2
FreeBook:v1.5.1
FreeBook:v1.5.0
FreeBook:v1.4.4
FreeBook:v1.4.3-actual
FreeBook:v1.4.3
FreeBook:peer-id-10
FreeBook:peer-old
FreeBook:v1.4.2
FreeBook:v1.4.1
FreeBook:v1.4.0
FreeBook:v1.3.4
FreeBook:v1.3.3
FreeBook:v1.3.2
FreeBook:v1.3.1
FreeBook:v1.3.0
FreeBook:v1.2.0
FreeBook:v1.1
permissionlesstech:peer-id-10
permissionlesstech:peer-old
permissionlesstech:v1.1
permissionlesstech:v1.2.0
permissionlesstech:v1.3.0
permissionlesstech:v1.3.1
permissionlesstech:v1.3.2
permissionlesstech:v1.3.3
permissionlesstech:v1.3.4
permissionlesstech:v1.4.0
permissionlesstech:v1.4.1
permissionlesstech:v1.4.2
permissionlesstech:v1.4.3
permissionlesstech:v1.4.3-actual
permissionlesstech:v1.4.4
permissionlesstech:v1.5.0
permissionlesstech:v1.5.1
permissionlesstech:v1.5.2
permissionlesstech:v1.5.3
permissionlesstech:v1.5.4
permissionlesstech:v1.6.0
permissionlesstech:v1.7.0
permissionlesstech:v1.7.1
Sign in to create a new pull request.

4 commits
main ... pr-998-rev

Author SHA1 Message Date
jack
1e142dcda8 fix: Remove unused variable and bump version to 1.5.1 
- Remove unused messageType variable (compiler warning fix)
- Bump marketing version to 1.5.1

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-28 10:30:38 -10:00
jack
ef4bdb3856
 		Merge branch 'main' into main 2026-01-28 07:55:00 -10:00
Ovi
bbe1793506 fix: toctou in boundPeerID identified by codex 2026-01-28 10:52:02 +00:00
Ovi
af7a664685 Fix iOS BLE mesh authentication bypass chain in BLEService 
- Bind sender IDs to BLE connection UUIDs for peripherals and centrals to prevent spoofing
- Enforce explicit RSR request/response validation and remove legacy TTL==0 RSR path
- Remove TTL==0 unconditional acceptance for messages and file transfers
- Ensure gossip sync caching only occurs after a packet is accepted
- Preserve self‑sync TTL==0 dedup exception without weakening authentication
 2026-01-27 15:14:21 +00:00
2 changed files with 72 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files