Whisperfish 1.0.0 (planned)
The milestone on GitLab for this release (th
Many big plans!
Whisperfish 0.6.0 (planned)
The milestone on Gitlab for this release
Features
- Feature parity with, and modernized version of Whisperfish 0.5.
Whisperfish 0.6.0-beta.28
Massive UI performance improvement (works around recomputing session fingerprint basically every time you stare at the screen.)
Whisperfish 0.6.0-beta.27
Fixes for voice note transcription, blurhash performance improvement, registration fixes.
Whisperfish 0.6.0-beta.26
Voice note updates
Changes
- Contact linking to Sailfish contacts (useful for username/ACI contacts)
- Ignore playlists in audio player
- Correction in attachment deletion on deleted messages
- Graceful failure on body range errors
- Recording of voice notes
- Local transcription of (English) voice notes using Speech Note
Whisperfish 0.6.0-beta.25
PNI support, fixes registration
Changes
- Support PNI (except for pre-beta-25 linked devices)
- Nicely display service messages (joined group, changed group, ...)
- Fix an edge case crash in message mark up rendering
- Fix a crash on PNI-only contacts
- Fix audio message playback with a headset connected
- Generate blurhash when sending pictures
- Fix broken shareplugin
Whisperfish 0.6.0-beta.24
Faster
(registration is still broken)
Changes
- Fixes for expiring messages
- Fixes for rendering spoilers containing URLs
- Sending multiple attachments in a single message
- A lot of performance improvements
- Typing messages are back!
- Fix a bug with deleted formatted messages
Whisperfish 0.6.0-beta.23 "FOSDEM release"
Sever cool new features! I tagged this during the Sailfish OS dinner on FOSDEM-Saturday :-)
(registration is still broken!)
Changes
- Implement disappearing messages (a huge effort by direc85 and myself)
- Implement message style rendering (mentions, bold/italics/...)
- Implement receiving message edits
- Preparatory work for phonenumber privacy (PNP/PNI)
- Delete message notifications on remote message deletion
- Some other small clean ups that were long overdue
Whisperfish 0.6.0-beta.22
Several cool fixes and features.
Changes
- Fix a crash when downloading certain attachments
- Update from Rust 1.52 to Rust 1.75 to allow for many many many new cool things!
- Inline voice message player (highly overengineered!)
- Show identified delivery status in debug mode for group messages on per-recipient basis
- Fix a crash when messages are received on deleted group sessions
- Performance improvements on loading sessions and receiving read receipts
- Fix RUSTSEC-2020-0071 RUSTSEC-2021-0139 RUSTSEC-2021-0146 RUSTSEC-2021-0145 RUSTSEC-2021-0127 CVE-2023-42444 and CVE-2023-42447 (although unaffected by any of these)
- Update Emojis to version 15
- Some initial work for receiving stories and distribution lists
- Fix deleting messages with attachments
- Decrypt attachments on a threadpool instead of on the executor (fixes lag/unresponsiveness on receiving attachments)
- Update libsqlite/sqlcipher to 3.41/4.5.0
- Rework logging subsystem for more concise and more useful logs
Whisperfish 0.6.0-beta.21
Several small fixes
Changes
- Embedded QR code scanner for device linking on Sailfish 4 and higher.
- More relaxed parsing of SMS-based confirmation codes
- Don't close keyboard when using send or enter
- Detect and handled deleted contacts in groups
- Some fixes relating to attachment fetching, including a crash
- Update blurhash decoding, should be a lot faster
- More correct message for empty session view
- Disable sending messages in UI for unregistered contacts
- Fix marking of unregistered contacts
- Hide archived conversations in cover page
- Add cargo-deny to catch CVE's in the future
- Add setting to hide recipient phone number in conversation page
- Fix relating to profile fetching
- Correctly handle nullable E164's and other nullable fields
- Vendor OpenSSL: no more separate build for SailfishOS 3!
- Fix reaction UI not updating, among other UI fixes to reactions
Whisperfish 0.6.0-beta.20
Post-quantum end-to-end encryption, registration fix, and much more.
Changes
- Post-quantum (Kyber) key-exchange
- Fix build version number in CI/About page (maybe, I hope)
- Fix the info row lock size in developer mode
- Fix muting conversations
- Fix disappearing messages timer resets
- Store attachment pointers in database, preparation work for attachment download retries.
- New, more fine grained notification privacy options
- Show blur hash while attachments are downloaded
- Emoji-react to messages (hold message, swipe away, then tap the emoji)
- Fix logs on panic
- Implement a captcha test page
- Handle remote message deletions, implement remote message deletion
- Show original attachment file name, if available
- Implement attachment exporting
- Fix unidentified sending mode resets on profile key reception
- Fix registration and linking for new registration protocol
Registration
Signal overhauled their registration procedure. In my eyes, the new API flow has been redesigned to allow for registrations without phone number in the future. Signal has, meanwhile, introduced usernames, which will allow you to hide your phone number from contacts and groups. I hope to get this into Whisperfish soon™ too.
Post-quantum key exchange
Signal recently introduced post-quantum key exchanges for their end-to-end encryption protocol. This is, as far as I know, the first broad and permanent real-world deployment of post-quantum cryptography, and follows the very recent NIST standardization of Kyber. Signal is yet to announce this change officially, but it has been in production for two weeks. I expect Signal to roll out a rekey event for all sessions, and at that time announce the roll-out.
The deployment is a hybrid of X25519 and Kyber. This means that if the new Kyber system is horribly broken next week, your sessions will still be secure in the classical sense.
Practically speaking, the current change means that every new session with a contact will be protected against capture-now-decrypt-later attacks by (currently non-existing) cryptographically-relevant quantum computers, under the condition that Kyber remains as secure as it is thought to be.
I expect Signal to trigger session renewals or rekeying events to additionally protect existing sessions from the “quantum threat”.
Whisperfish 0.6.0-beta.19
Hotfix for the refactoring bug introduced in beta 18
Whisperfish 0.6.0-beta.18
Fixes group updating, since Signal changed their API calls, first steps toward PNI support
Changes
- Database refactoring, phone numbers and UUID are now strong types
- Fixes a hang on unregistered startup
- Fix group update API calls
- Show roles of group members
- Graceful handling of ^C
- Show translation contributors in About.qml, automatically update the About.qml page
- Fix self-recipient bugs
- Reset page stack when closing in daemon mode
- Add PNI column to recipient (currently unused)
- Fetch self-PNI
- Fix archive/pinned UI bugs
- Fix profile image display when clicking notifications for groups
- Fixes related to message notification counter
- Split storage module into separate crate, preparation for more refactoring
- Show the profile picture in the sharing dialog
- Fix RTL support in cover
- Fix detail attachment display for non-image/video attachments
- Fix the "show more" tag placement for long text messages
- Many small fixes
Whisperfish 0.6.0-beta.17
Sealed sending release!
Changes
- Fixes the profile page not loading
- Fix multiple settings page and profile page issues
- Implement automatic identity key reset
- Implement draft messages
- Fix captcha display and submission
- Ignore NullMessages and implement PlaintexContent
- Implement sealed sending
- Cleaner logging thanks to minimized Display implementations for database types
- Log Qt and QML via simplelog
- Keep identity key in memory, instead of reading from storage
- Stop trying to send messages to unregistered users, store registration state in db
- Consider empty sessions as read, fixes incorrect unread message count
- Expose logging settings in Settings page
- Bump emoji.js
Whisperfish 0.6.0-beta.16
Fix an issue during registration, and some QoL improvements
Changes
Whisperfish 0.6.0-beta.15
Overhauls the QML binding system. This should fix all UI inconsistencies, except for a few that are now introduced.
Changes
Whisperfish 0.6.0-beta.14
Bugfix release for most of the bugs we introduced in beta.13, and some fixes for changes upstream.
Changes
- Attempt to handle HTTP 428 by responding with a reCAPTCHA challenge
- Handle device mismatches (fixes sending to contacts that change their linking setup)
- Attempt at fixing a crash at startup related to profile uploading
- Fix a crash when opening an empty session
- emoji.js now supports out-of-date emoji packages as fallback
- Fix typing notification display of names in certain conditions
- Marking as read fix for mismatched sessions
- Cleaner formatting for linked device display
Whisperfish 0.6.0-beta.13
Profile fetching and updating, avatar displaying, sender key and unidentified sender support at receiver side, and much more.
Changes
- Disable defunct "send new message" functionality
- Don't crash when Signal desktop sends a SyncMessage about a story.
- Use move_rows instead of reinserting upon new message reception
- Big refactoring work by Lucien XU
- Send messages via the Websocket instead of the PushService
- Display avatars
- Display Signal profile names, with preference for local contact names in settings
- Implement displaying and sending quotes
- Use Emoji font for displaying reactions when configured as such
- Move (signed) prekeys, identities, sessions into database
- Implement sender keys and unidentified sending at the receiver side for much improved privacy
- Many, many, other tiny and big things.
Whisperfish 0.6.0-beta.12
Hotfix release for the new Signal root certificate
Changes
- Update root CA certificate for Signal production server (4096 bits RSA instead of 2048!)
- Multiple fixes for SailfishOS 3.4
- Fix storage migration corner case
- Fix some registration issues
- Fix cover scrolling behaviour
- Big update of libsignal-protocol version
- Misc layout and input field improvements
- Refactored some storage and Sailfish platform code
Whisperfish 0.6.0-beta.11
Mostly bugfixes for bugs that we introduced in beta.10, but also implements Whisperfish as secondary device. This release is basically completely due to direc85 and Gabriel Margiani; thank you both!
Changes
Whisperfish 0.6.0-beta.10 (code sprint edition!)
Many quality-of-life updates and technical debt fixes, thanks to the code sprint of Matti and Ruben!
Changes
Whisperfish 0.6.0-beta.9
Fixes for stuff in beta.8, mostly.
Changes
- Fix for emoji reaction parsing that could cause a crash
- Fix a crash when manually refreshing a group
- Fix config file location after the Sailjail implementation
- Fix creating debug symbols in CI and offline, run LTO on CI. Debug symbols are now hosted alongside nightl RPMs (and probably also here, let's see how the CD copes)
- Add new config paths to MyBackup paths
Whisperfish 0.6.0-beta.8
A bunch of quality-of-life updates, and SailfishOS 4.4 compatibilty! Direc85 did a lot of work in this release. If you consider donating to me for Whisperfish, please also consider buying direc85 a coffee.
Changes
Whisperfish 0.6.0-beta.7
Edition "omg OpenSSL".
Changes
Whisperfish 0.6.0-beta.6
Edition "invert the event loop". Write-up here: https://github.com/woboq/qmetaobject-rs/issues/102#issuecomment-919798690
Features
Fixes
Whisperfish 0.6.0-beta.5
Fixes
- Reception of messages with attachments, but without accompanying text
- Show contact/payment/deletion/group call update messages as "unimplemented" instead of empty.
Whisperfish 0.6.0-beta.4
Features
- MyBackup compatibility, thanks to Nathan!
- Display group changes and message timer changes in chat.
Fixes
- Fix usage of configured attachment path
- Fix the many empty messages sent by Android and iOS clients for profile key pushes
Translations
- Add Lithuanian, by Gediminas Murauskas
- Updates to Greek, French, Turkish, Dutch, and Vlaams. Thanks to all contributors!
Whisperfish 0.6.0-beta.3
Emergency release for the HTTP-500 "nothing can be send" bug and the BadKeyType bug.
Fixes
Whisperfish 0.6.0-beta.2 (yanked)
Emergency release for the HTTP-500 "nothing can be send" bug.
Features
Fixes
Whisperfish 0.6.0-beta.1
The milestone on Gitlab for this release
Features
Translations
- We have a Weblate account now!
- Portuguese translation, thanks to Yield and Antonio Maretzek!
- Czech translation, thanks to PawelSpoon!
- Turkish translation, thanks to Oğuz Ersen!
- Nowegian translation, thanks to Allan Nordhøy!
- Many, many, many, MANY cleanup operations on Dutch, German, French, and Spanish, thanks to Nathan, Dryo, and J. Lavoie!
Fixes
- More stable reconnection management. Flight mode and network changes should now work as expected.
- Access contacts through the Nemo QML interface instead of raw contacts.db. This interface will probably be more stable than the raw SQLite, and keeps compatibility across 3.x and 4.x.
- A "privileged file" allows us to read contact lists again on SailfishOS 4.0
- More or less fixed video playback
- Fix lingering notifications on session activation, thanks to flypig!
- JPEG rotation is now correct in Whisperfish (but not yet on Android), thanks to Mirian Margiani.
- Image zoom is more intuitive for images that are almost the same size as the screen, thanks to Mirian Margiani.
Whisperfish 0.6.0-alpha.9
Fixes startup on upgraded contact database.
Whisperfish 0.6.0-alpha.8
Features/fixes
Whisperfish 0.6.0-alpha.7
Features
Fixes
- Create the correct attachments download directory, should fix attachments downloading for new installations.
- Some phone numbers (notably with dashes, parantheses or dots) did not show up with names.
- New members in a group show up, group renames come through.
- Group members show up as names, not phone numbers, thanks to Thomas Michel.
- Fixes copying message to clipboard, thanks to Thomas Michel.
- Auto-focus password field, thanks to Markus.
Whisperfish 0.6.0-alpha.6
Features
- The conversation page got a complete overhaul in design. I hope you like it.
Fixes
- Fix a race condition during registration, which may corrupt the settings file.
- Sent messages update the session view
- More names show up correctly in session view (please file an issue if it's still buggy!)
- Session sections
- Sent attachments show up as thumbnails
- Some translation work in the (currently disfunctional) Device List page
Whisperfish 0.6.0-alpha.5
Features
- Sending new messages to a single contact, clean-up of contact selection
- Started French language translation
- French translation finished (thanks Thibaut Vandervelden)
- Spanish translation got a lot of clean-up (thanks carlosgonz)
- Settings page looks a lot nicer
Fixes
- Settings page revamped, looks a lot cleaner
- attachment_dir was not set on settings init.
- Contact DB fix for non-nemo users (new 3.4 installs, alternate users)
- Show build ID in about screen
- Notifications with vibration and sound
Whisperfish 0.6.0-alpha.4
The milestone on Gitlab for this release
Features:
Under the hood:
- Partial support new UUID-based identifiers
- Initial tooling for future database migrations
- Pre-key refreshing
- Attachment failure log (set attachment_log=true in harbour-whisperfish.conf)
Whisperfish 0.6.0-alpha.3
The milestone on Gitlab for this release
- Sending direct and group messages, notably no attachments.
Whisperfish 0.6.0-alpha.2
The milestone on Gitlab for this release
- Receiving messages and their attachments
Whisperfish 0.6.0-alpha.1
The milestone on Gitlab for this release
- GUI performance improvement
Comments
rubdos
Sun, 2021/06/06 - 10:12
Permalink
There's currently an issue with sending messages that's affecting literally every Whisperfish user. https://gitlab.com/whisperfish/whisperfish/-/issues/356
I'm working on it.
rubdos
Mon, 2021/06/07 - 13:40
Permalink
Beta 3 should work again :-)
drakegao
Sat, 2021/05/29 - 09:37
Permalink
Cant pass the phone registration page. Stuck on the sending verification code...
rubdos
Sat, 2021/05/29 - 13:21
Permalink
You probably have registration lock enabled, please check Whisperfish crashes right after filing the CAPTCHA and let me know if that didn't fix it!
behem0thUK90
Tue, 2021/05/18 - 22:16
Permalink
Hey, I have downloaded the app looks great. i can receive messages fine but i am unable to send messages. (they show as you would expect but the recepients dont receive them) any ideas?
rubdos
Wed, 2021/05/19 - 11:42
Permalink
It's a new issue: https://gitlab.com/whisperfish/whisperfish/-/issues/356
We currently believe it's a server-side bug, which has been fixed yesterday, and is being rolled out. I suggest you try sending some messages again today and tomorrow, and let me know if it's still bad!
behem0thUK90
Wed, 2021/05/19 - 12:10
Permalink
ahhh no worries i'll give it another shot. thanks for the update i appreciate it.
zipotron
Tue, 2021/05/18 - 14:56
Permalink
Hello! Installed suscesfully in Xperia 10 II, just I wanted to suggest, I wont ask for the call feature, seems not trivial to implement, but, audio messages I guess is easier to implement and is something really valuable for the users! Anyway, thanks a lot for the app, is amazing. (also share location could be good)
rubdos
Tue, 2021/05/18 - 16:02
Permalink
Ahoy, thanks for the feedback and the kind words!
Location sharing is a new request, added it: https://gitlab.com/whisperfish/whisperfish/-/issues/357, playing voice notes (https://gitlab.com/whisperfish/whisperfish/-/issues/289) and sending them (https://gitlab.com/whisperfish/whisperfish/-/issues/252) was already on the list. And audio and video calling as well https://gitlab.com/groups/whisperfish/-/epics/4 !
If you have a Gitlab.com account, please use the upvote button :-)
Rene666
Wed, 2021/05/12 - 16:26
Permalink
Hello, the app works with Xperia 10 II. I tried to install the file, unfortunately it doesn't work.
rubdos
Wed, 2021/05/12 - 19:24
Permalink
You have installed the aarch64 version through OpenRepos, and it doesn't work, is that correct?
If it doesn't start at all, can you run the app via CLI (`harbour-whisperfish --verbose`), and let me know what it outputs? If it starts, then can you explain what goes wrong? I don't have an aarch64 device, so can't really test. I'm upgrading to 4.1 now, to see whether it's a 4.1 issue or an aarch64 issue.
Rene666
Thu, 2021/05/13 - 14:57
Permalink
I have now installed from Storeman, it is running.
rubdos
Thu, 2021/05/13 - 15:14
Permalink
Good to read that. Enjoy Whisperfish and SIgnal! :-)
zipotron
Tue, 2021/04/27 - 13:51
Permalink
Hi, first of all thanks for the effort of porting Signal. I write because I got an error in this version setting the account, is just after setting the phone number and push the button for require the SMS, then appears and error showing and white screen with a text saying something about capcha display error, and is not possible to go forward...
rubdos
Tue, 2021/04/27 - 14:40
Permalink
You need this patch on SailfishOS 4.0: https://openrepos.net/node/11303/
melvin
Mon, 2021/04/26 - 22:35
Permalink
The app "crashes" (shows the inbuilt error page) with the following error in the console after successfully finishing the captcha and the SMS code input:
I've verified that /usr/lib/xulrunner-qt5-60.9.1/libxul.so exists so I thought that GRE_HOME must be wrong (why should a lib be in /usr/bin/ anyway) - changing the environment variable doesn't help though. Symlinking the lib to /usr/bin/libxul.so doesn't fix the error either and prints the error "couldn't load xpcom from libxul.so".
I've never changed any default installations and especially didn't edit/move/remove some random libraries. Is this error even related to the libxul not found error or does the app crash due to the HTTP unexpected response (423) error? Please help me, I'd love to use this app!
Thanks for this awesome app anyways!
Btw: I'm using the Xperia X with SFOS 4.0.1.48 and with your captcha workaround applied.
rubdos
Tue, 2021/04/27 - 00:44
Permalink
You dug too deep, the error is in the 423. https://gitlab.com/rubdos/whisperfish/-/issues/148
You've bounced on a registration lock: your Android or iOS official app is blocking a re-registration as long as you don't provide the pin (and for that, we miss some logic and the UI). Luckily, the workaround is easy!
Workaround
wosrediinanatour
Fri, 2021/04/30 - 00:34
Permalink
How/where can the registration lock be disabled in the official app?
rubdos
Fri, 2021/04/30 - 10:18
Permalink
For Android, this seems to be Setting -> Privacy -> Registration lock,
and for iOS this is seemingly Account -> Signal PIN -> Registration lock.
Good luck!
melvin
Tue, 2021/04/27 - 00:56
Permalink
Okay thanks, I'll try this workaround!
rubdos
Tue, 2021/04/27 - 14:46
Permalink
Just to make sure you understood me well: these are two separate workarounds, you can either way seven days, or you can turn off the lock in Android/iOS.
monkeyisland
Mon, 2021/04/26 - 14:47
Permalink
Great work i am using the app since version 0.5.1 from andrew bruno
rubdos
Tue, 2021/04/27 - 14:47
Permalink
Thanks! Glad to hear that migrating from Andrew's version still works.
pvcn
Mon, 2021/04/26 - 13:52
Permalink
Wow, just updated to 0.6.0-beta1 it's great! Functional and Beautiful, thank you so much for this!
huggymann
Mon, 2021/04/26 - 11:08
Permalink
just updated to 0.6.0-beta1 . Wow, Thank you very much for this great app! :)
rossholmes
Thu, 2021/04/22 - 23:51
Permalink
Just a little wish: "Reply to message" (quoting) function would transit the user experience to a whole different dimension. I assume this had already been explored and requires huge work..
Edit: just had a look at the milestones page and its covered in the beta. Thank you! :)
rubdos
Sun, 2021/04/25 - 16:10
Permalink
Update: I forgot to disable that UI element, so it looks like you send a reply, but it doesn't work yet. It'll get there though, at some point!
rossholmes
Sun, 2021/04/25 - 22:33
Permalink
This beta version is a huge update - thank you!!! Great work, the user experience is really getting there. I am using only SFOS apps so to me it's a massive thing - appreciate it!
rubdos
Mon, 2021/04/26 - 10:16
Permalink
Nice to hear such kind words :-)
rubdos
Fri, 2021/04/23 - 10:15
Permalink
The UI feature is already there, but the backend implementation is not; I will most probably disable it for the beta, and then implement it properly. It's luckily not a huge work anymore :-)
Pages