Daniel Gultsch

Is there any #ActivityPub / #Mastodon URI scheme used in the wild that would allow me to open an ActivityPub account directly in my Android app?

I've seen 'acct' and 'web+ap' mentioned but none seem to be implemented.

The goal is that given a text of "Here is my Mastodon profile acct:daniel@gultsch.social" #Conversations_im can link that directly into #Tusky. (Just like mailto and xmpp URIs open my E-Mail or IM app respectively)

Have @apps or @Tusky considered that? If not why not?

It’s incredibly sad that we’ve lost the open, federated team chat space to #Matrix—where the only viable server isn’t open source, it’s debatable whether the underlying standard is truly open, and the most charitable thing I’ve heard about the UX is that it’s 'OK.'

#XMPP #Jabber

The same security issue is likely to be found in some of the crazier forks of Conversations like c0nnect. As mentioned earlier¹ I’ve reached out to the developers a month ago and they didn’t care.

¹: https://gultsch.social/@daniel/113521011923491030

#Conversations_im and #BlabberIm traditionally had compatible backup formats. However the backup format has changed in the two years since Blabber has been abandoned. To migrate to Conversations and keep your history do the following:

· Create Backup on Blabber
· Install version 2.12.7 of Conversations from F-Droid and restore backup. Do not activate the account!
· Upgrade to latest Conversations.
· Optionally: Create another backup and migrate to the Play Store version.

⚠️ 🚨 It’s time to stop using Blabber.im 🚨⚠️

The abandoned fork of #Conversations_im has a critical security issue: attackers can bypass STARTTLS negotiation, resulting in an unencrypted connection to a fake server. This vulnerability is similar to the STARTLS attack discovered in various email clients¹

✅ Fixed in Conversations 2.13.1 (Feb 2024)

📢 Please migrate to Conversations immediately! It's free on Google Play until the end of the year and always free on #fdroid

¹: https://archive.fosdem.org/2024/schedule/event/fosdem-2024-2179--protocols-security-of-starttls-in-the-e-mail-context/

Good news and bad news.
#Conversations_im 2.17.0 has support for emoji reactions 🎉
Since @Codeberg appears to be under constant DDoS attacks they have added pretty strict rate limits that the @fdroidorg build server keeps running into. 😞
Another build cycle just failed and it's unclear when 2.17.0 will be available on F-Droid.
Maybe Codeberg and F-Droid can back channel an allow list or something? 🙏

Medien: 1

A bunch of XMPP developers and I (@dino, @Monal, #Conversations_im) will have a booth at the Chemnitzer Linux Tage (March 16th & 17th 2024).

Come talk to us about #XMPP and collect some merch.

https://chemnitzer.linux-tage.de/2024/en/programm/beitrag/262

@clt_news

Medien: 1

Appealing the removal didn’t yield any result. Google just repeated the same statement "the app was removed because it uploads the contact list" without even acknowledging any of the arguments I made in the appeal.

I understand that most of my audience here on Mastodon is more ideology aligned with F-Droid but the app sales on Google Play store have contributed significantly to me working (almost) full time on #Conversations_im.

Without the revenue from Google Play I can’t afford this.

Google has just removed #Conversations_im from the Play Store because they think we are uploading the user’s contact list. We don’t.

Despite the testing I’m currently doing on Android 6 & 7 Conversations 2.14.0 will bump the minimum Android version from 5 to 6. (API 21 to API 23)

However a 2.13.1, which brings improved P2P file transfer, will be released later today (pending PlayStore review).