mad v20240923

https://github.com/txthinking/mad/releases/tag/v20240923

- bugfix
- add mad ca --start: Certificate valid start time, such as: '2024-09-22T13:07:38+08:00'. If empty, it is the current time
- add mad ca --end: Certificate valid end time, such as: '2024-09-22T13:07:38+08:00'. If empty, it is start time add 10 years
- add mad cert --start: Certificate valid start time, such as: '2024-09-22T13:07:38+08:00'. If empty, it is the current time
- add mad cert --end: Certificate valid end time, such as: '2024-09-22T13:07:38+08:00'. If empty, it is start time add 10 years
- Deprecated: mad cert --ca_key
- add mad cert --caKey: ROOT Key file path (default: "ca.key.pem")
- add mad cert --commonName: If empty, the first domain or IP will be used

sshexec v20240925

https://github.com/txthinking/sshexec

- --sudo: run command with sudo, does not apply to download and upload (default: false)
- exit code 1 if something wrong

z v20240927

https://github.com/txthinking/z

- optimize auto-start on boot under certain systems
- bugfix

brook-store v20241012

https://github.com/TxThinkingInc/brook-store/releases/tag/v20241012

## Before upgrade

- stop brook-user-system first
- upgrade sshexec: nami install sshexec
- install brook-store: nami install brook-store

## Run it

joker brook-store

## Changes

- brook-user-system renamed to brook-store, don't worry, they still use the same database $HOME/.brook.db
- Enable sqlite WAL mode, this will enhance write performance and will add two files. After running for a period of time, check: ls $HOME/.brook.db*
- Run task in a new worker thread
- Support Product and product payment link
- Support reCAPTCHA, if you enable public signup, recommend enable reCAPTCHA to prevent malicious registrations from writing to the database. Or disable signup, and create new user account from admin
- Support Site Description, you can use this to describe your service
- UI update
- And other much more updates, see the tips on some admin pages
- bugfix: build.sh

> BTW, if you want to eliminate the 30-minute lockout period for users from expiration(or others) to recovery, you can disable the brook experimental option brook --userAPIInvalidCacheTime 0

### Online

https://cheap.shiliew.com

It has been running for two weeks.

纸【公测版】，一个真正的端到端加密的 IM

- iOS：https://testflight.apple.com/join/nNGnaf7W
- Android：https://public.shiliew.com/Zhi.apk
- Web：https://www.txthinking.com/zhi/web

（注意：Web 版初次需要加载一百多兆，可能需要一两分钟）

纸【公测版2】

* 修复了 Chat 滚动问题，及其他一些小bug
* 升级了一些帮助测试的用户为 Zhi Plus

- iOS：https://testflight.apple.com/join/nNGnaf7W
- Android：https://public.shiliew.com/Zhi.apk
- Web：https://www.txthinking.com/zhi/web

（提示：Web 加载新版本可能需要打开调试工具 - 网络 - 禁用缓存 - 刷新页面）

Beta Chat:

f947e20c-f436-45e5-9189-61c29c27afd4:e7fd0d3f-4bf1-466a-8aa5-54f25a8f96a9

纸【公测版3】

* 支持草稿
* 简化同账号多设备添加 Chat
* Web 支持粘贴图片
* 修复一些 bug

- iOS：https://testflight.apple.com/join/nNGnaf7W
- Android：https://public.shiliew.com/Zhi.apk
- Web：https://www.txthinking.com/zhi/web

（提示：Web 加载新版本可能需要打开调试工具 - 网络 - 禁用缓存 - 刷新页面）

Beta Chat:

f947e20c-f436-45e5-9189-61c29c27afd4:e7fd0d3f-4bf1-466a-8aa5-54f25a8f96a9

纸【公测版4】

* 优化竖向视频全屏播放效果
* 可能解决了初次视频无法播放问题
* 优化滚动跳步问题，改为下拉加载更多
* 修复一些 bug

- iOS：https://testflight.apple.com/join/nNGnaf7W
- Android：https://public.shiliew.com/Zhi.apk
- Web：https://www.txthinking.com/zhi/web

（提示：Web 加载新版本可能需要打开调试工具 - 网络 - 禁用缓存 - 刷新页面）

Beta Chat:

f947e20c-f436-45e5-9189-61c29c27afd4:e7fd0d3f-4bf1-466a-8aa5-54f25a8f96a9

Zhi - A Truely End-to-End Encrypted Instant Messaging App.

https://www.txthinking.com/zhi.html

- What are the differences between Zhi and messaging apps like WhatsApp, Signal, and Telegram?

https://www.txthinking.com/talks/articles/are-whatsapp-signal-telegram-really-end-to-end-encrypted-en.article

- How do I verify the end-to-end encryption of Zhi?

All of Zhi's upstream API can be easily audited. https://www.txthinking.com/talks/articles/zhi-upstream-api-documentation-en.article

- What about metadata?

Zhi uses random UUID to replace metadata, read above link for more details.

- What about Push Notification?

As we know, as an instant messaging app, we need to implement push notifications. On the Apple platform: We must choose Apple APN (Apple Push Notification service). On the Android platform: We almost have no choice but to use Google FCM (Firebase Cloud Messaging). On the Web platform: Currently, we are only developing and doing compatibility testing on Chrome. To implement push notifications, we must use Google GCM (Google Cloud Messaging). Accessing: chrome://gcm-internals/. Because Zhi server cannot decrypt messages, when there is a new message, we can only push a bland "New Message" string to the push service, which then sends it to the user's device. Therefore, neither Apple nor Google can decrypt your messages.

- Are images, videos, and files etc also end-to-end encrypted?

Just like messages, also encrypted with your Chat Key before transmission.

- Is Zhi Meeting also end-to-end encrypted? Will Zhi Meeting expose my IP to other members?

We use standard WebRTC technology to implement Meeting. We know that WebRTC is end-to-end encrypted, STUN and TURN will not break WebRTC's end-to-end encryption. And we enforce the use of TURN, so when you have a Meeting with other members, the other members are not able to know your IP. Because the key negotiation for WebRTC is achieved through signaling interaction. Therefore, it's essential to ensure the security of the signaling being transmitted. Don't worry, all your signaling, just like the messages above, is also encrypted with your Chat Key before transmission.

- Using Apple's IAP, will my information be exposed?

No. We only pass a transaction ID upstream. read above link for more details.

- Can I register an account anonymously?

Certainly. To prevent malicious use of resources, Zhi accepts email registrations by default. Of course, we also support the creation of anonymous accounts.

- How are messages stored locally and on the server?

Messages are stored on the local device. When forwarding the encrypted messages of a Chat, for free users the server will by default save them for 7 days to facilitate the users retrieving messages from the server when they come online from being offline or at other times. Note: The server's cleanup mechanism runs a scheduled cleanup task. If it is detected during the run that there are no Zhi Plus users in the Chat, the encrypted messages from more than 7 days prior within the Chat will be cleared, in order to release the server resources occupied.

- Can others know if they and I are in two Chats at the same time?

Chats are isolated from one another, meaning that even if Huluwa and Snake are both in Chat A and also in Chat B, they cannot know that they are in both chats at the same time.

- Why is the software package so large?

Because we have embedded font files that are about 100+MB in size.

- Can I receive notifications on macOS clients like I can on iOS clients?

Yes. When asked for push permission for the first time, you can click Allow in the upper right corner. Of course, you can also enable it later in System Settings - Notifications - Application Notifications - Zhi - Allow notifications.

ipio v20250202

https://github.com/txthinking/ipio

- because some internal projects rely on the name of ipio, we changed it back to the previous name
- bugfix

z v20250103

https://github.com/txthinking/z

- s/r/d will wait for process to exit
- support openwrt

brook 2025 预发布

- server 支持 script (新，查看 https://brook.app/#server-1)
- openwrt 支持 script (与 GUI 规则相同)
- ipio 支持 --cliToken，即可不使用 email 以非交互式方式使用

https://file.shiliew.com/brook_linux_amd64
https://file.shiliew.com/ipio_linux_amd64
https://file.shiliew.com/openwrt_linux_amd64
https://file.shiliew.com/openwrt_linux_arm64