Skip to content

v1.2.27 — privacy by default, standby copies that match, money limits

Choose a tag to compare

View all tags
@martyinspace martyinspace released this 30 Sep 14:08
v1.2.27
a73c440
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

233 commits since v1.2.26. The highlights for people who run a community server:

Privacy by default

  • Balances and trades are private, local listings are members-only, and polls are anonymous by default (#1286).
  • Community servers keep no one's internet address past 7 days, and their logs never record one (#1289).
  • A direct message is never sent readable: there's no plaintext fallback in either app, and the server refuses one (#1288).
  • Delete account wipes the words, photos and places of the member's posts, leaves only this community, and removes the key only at the last one (#1302, #1303).
  • A hidden group's posts and chat confirm nothing to outsiders (#1333).
  • Web visits are counted without cookies, and nobody is identified (#1332).

Money and safety

  • There are daily money limits per member, with higher limits for an enterprise or project (#1329). What one key can write in a day is bounded (#1312).
  • Federation settlement keys can't name another account's escrow, and caller-chosen ids never name money (#1344).

Standby servers and take-over

  • A standby copies its main server's ledger, listings, deals, standing, settings and in-flight money exactly (standby PRs 0–7).
  • A refused copy never leaves less than there was (#1304).
  • Owners are told when copying stops or goes wrong (#1274).
  • Tombstones are kept 30 days (#1315).
  • The main server serves copies in pages from one snapshot (#1316).

Your community's address

  • A community never forgets a registrar name it held (#1247).
  • A lost name comes back with the community's own key (#1273).
  • Members still using an old address are told where it lives now (#1275).

Server hardening

  • The tunnel runs inside the server, and no server is handed Docker's socket (#1285).
  • deploy.sh never loses data and never hands fleet-wide secrets to servers (#1282, #1305).

Phone app (needs the matching app build)

  • App Lock covers at most two minutes away, can't be skipped by changing the clock, and asks for the screen PIN too (#1290, #1307, #1309, #1311).
  • The 12 words allow no screenshots, the clipboard clears, and the key stays on this device (#1284).
  • Market photos come back for phones that synced before the photo keys changed (#1340).
  • The social sign-in buttons keep their text and logos inside the border (#1338).
  • GitHub is no longer a sign-in option (#1306).

Images: ghcr.io/beanpool-org/beanpool-node:1.2.27, :1.2 and :latest, for amd64 and arm64.

Assets 2
Loading