bitmask_android issueshttps://0xacab.org/leap/bitmask_android/-/issues2022-05-09T11:35:15Zhttps://0xacab.org/leap/bitmask_android/-/issues/9068Don't show Gateway Selection if there's only one location2022-05-09T11:35:15ZcybertaDon't show Gateway Selection if there's only one locationCurrently, if a provider only has one gateway location, it is still possible to open the gateway selection on Android. The user has the choice to select between best location and exact the same location by its name.
I would like to prop...Currently, if a provider only has one gateway location, it is still possible to open the gateway selection on Android. The user has the choice to select between best location and exact the same location by its name.
I would like to propose to just hide the gateway selection UI, if there is no real option so select from. On the main UI, we could disable the click listener that opens the gateway selection UI.
@mcnair @kali @SamWhited
Since we aim to keep UX similar, I would like to know your opinions about the proposal and whether we want this behavior on all platforms.https://0xacab.org/leap/bitmask_android/-/issues/9061Enforce TLS1.3 for API communication2021-12-17T17:26:34ZcybertaEnforce TLS1.3 for API communicationwe should ship our own SecurityProvider, Conscrypt: https://github.com/google/conscrypt
It allows us to enforce TLS1.3 on all devices.
Drawback: we're depending on another SSL lib (BoringSSL). Current OpenSSL implementations also sup...we should ship our own SecurityProvider, Conscrypt: https://github.com/google/conscrypt
It allows us to enforce TLS1.3 on all devices.
Drawback: we're depending on another SSL lib (BoringSSL). Current OpenSSL implementations also support TLS1.3 and we're shipping OpenSSL already, but I haven't figured out how to make use of it in conjunction with OkHTTP, our http client lib.https://0xacab.org/leap/bitmask_android/-/issues/9059Renaming and refactoring some bits in project setup2022-08-10T13:37:20ZcybertaRenaming and refactoring some bits in project setup* replace master branch by main branch
* replace fat flavor and fatweb flavored builds by full and fullweb flavor
* get rid of normal and insecure flavor, it is too much overhead to keep extra code for the insecure flavor (which was ment...* replace master branch by main branch
* replace fat flavor and fatweb flavored builds by full and fullweb flavor
* get rid of normal and insecure flavor, it is too much overhead to keep extra code for the insecure flavor (which was ment for developing against a development API that has no valid CA certificates)https://0xacab.org/leap/bitmask_android/-/issues/9056Streamline build process of openvpn + tor2021-12-17T17:34:13ZcybertaStreamline build process of openvpn + tortor and openvpn partly depend on same libraries like openssl. Both, openvpn and tor are built independently from each other depending on 2 different openssl libs.
Maybe this is a good situation, to finally fix the openvpn build process...tor and openvpn partly depend on same libraries like openssl. Both, openvpn and tor are built independently from each other depending on 2 different openssl libs.
Maybe this is a good situation, to finally fix the openvpn build process, which has always been kind of hackish, by adding and adapting the [Makefiles](https://leap.se/git/ics_openvpn.git/tree/main/src/main/cpp/CMakeLists.txt?h=new_master) in our project instead of using ics-openvpn's gradle tasks to build it.
As a result, we would reduce the app size by some megabytes and have a easier to understand setup.https://0xacab.org/leap/bitmask_android/-/issues/9053Preship provider ipv6 address2021-11-25T14:02:21ZcybertaPreship provider ipv6 addressCurrently the DNS blocking circumvention mechanism just resolves ipv4 addresses for preshipped providers. For ipv6-only networks we need to ship the corresponding ipv6 addresses as well.Currently the DNS blocking circumvention mechanism just resolves ipv4 addresses for preshipped providers. For ipv6-only networks we need to ship the corresponding ipv6 addresses as well.https://0xacab.org/leap/bitmask_android/-/issues/9048Bridge settings are provider indepentend2021-07-23T22:02:08ZkwadronautBridge settings are provider indepentendI added a fresh provider, and on the first connect it tried to use Bridges. I think in the faq we should tell if that is intended behavior (and why). I didn't expect it to first try bridges and not the plain vpn, I expect I'm not the onl...I added a fresh provider, and on the first connect it tried to use Bridges. I think in the faq we should tell if that is intended behavior (and why). I didn't expect it to first try bridges and not the plain vpn, I expect I'm not the only one.
How to reproduce:
- connect to an existing provider, switch bridges on (ie: riseup)
- disconnect
- add a new provider (doesn't matter which one)
- notice that you will still (try to) use a bridge
I actually expected to have the 'default, new install' settings when adding a new provider.https://0xacab.org/leap/bitmask_android/-/issues/9042Double APK output CI2021-05-28T11:08:14ZkwadronautDouble APK output CII downloaded the artifacts from build_release (one zipfile), and it contains 2 identical files, maybe we can just have 1?
```
md5sum currentReleases/Bitmask_arm64-v8a_release.apk app/build/outputs/apk/normalProductionArm64/release/Bitma...I downloaded the artifacts from build_release (one zipfile), and it contains 2 identical files, maybe we can just have 1?
```
md5sum currentReleases/Bitmask_arm64-v8a_release.apk app/build/outputs/apk/normalProductionArm64/release/Bitmask_arm64-v8a_release.apk
4377eb511dab4cdfe4c38af2bd403aea currentReleases/Bitmask_arm64-v8a_release.apk
4377eb511dab4cdfe4c38af2bd403aea app/build/outputs/apk/normalProductionArm64/release/Bitmask_arm64-v8a_release.apk
```https://0xacab.org/leap/bitmask_android/-/issues/9032Language picker2022-08-08T16:34:31ZkwadronautLanguage picker> Have you all reconsidered in app language selection in future versions of Android?
> The in app language switch is important for a lot of languages that don't have widespread mobile OS support. Even though Android supports Burmese fo...> Have you all reconsidered in app language selection in future versions of Android?
> The in app language switch is important for a lot of languages that don't have widespread mobile OS support. Even though Android supports Burmese for example, a lot of people may have phones that don't offer it as an option. So they wont' be able to access any app translations that depend on system language.
I'm wondering if (where) there's some fund that helps us to enable us putting development hours to such a thing.n3k0n3k0https://0xacab.org/leap/bitmask_android/-/issues/9030Add Acra for crash reporting to Debug and Beta releases2021-05-21T10:55:21ZcybertaAdd Acra for crash reporting to Debug and Beta releasesCurrently, the crash reports on google play are stripped down to the bare minimum, see the current RemoteException. It doesn't become clear which component is causing the crash and also not what the user flow was that let to the crash.
...Currently, the crash reports on google play are stripped down to the bare minimum, see the current RemoteException. It doesn't become clear which component is causing the crash and also not what the user flow was that let to the crash.
Acra is a potetially privacy friendly crashreporting system. I propose to use it with email. Each crash will result in a popup asking to send the crash per mail. a mailto: link with all data gets generated and the user can choose the email client of their choice to send a report.
We can additionally add aggregated logs that the user also sees in the log fragment to the report. We should scrub ips and other identifying data automatically before sending the report though.Android 1.1.0https://0xacab.org/leap/bitmask_android/-/issues/9027View Logs from Setup Activity2021-05-21T10:48:26ZcybertaView Logs from Setup ActivityIf the user sets up a new custom provider and the setup procedure fails for some reason the user has no chance to see the logs.
one idea:
We could implement a log fragment directly into the setup activity, hidden by default and a but...If the user sets up a new custom provider and the setup procedure fails for some reason the user has no chance to see the logs.
one idea:
We could implement a log fragment directly into the setup activity, hidden by default and a button below the progress bar to show / hide the log view.
The provider setup error dialog could have a third option show logs which will enlarge the log view in the setup activity. Also finishing the activity on press on 'show logs' should not happen in that case.Android 1.1.0https://0xacab.org/leap/bitmask_android/-/issues/9019Cert renewal with broken IPv62021-02-16T18:07:40ZkwadronautCert renewal with broken IPv6Maybe this is a strategy/documentation issue too?
IPv6 is broken midways between client and api -> 'couldn't fetch a certificate'
IPv4 works, but isn't tried as a fallback.Maybe this is a strategy/documentation issue too?
IPv6 is broken midways between client and api -> 'couldn't fetch a certificate'
IPv4 works, but isn't tried as a fallback.https://0xacab.org/leap/bitmask_android/-/issues/9018[Feature request] Add functionality simular to blokada2021-04-23T23:06:34Zsadkl[Feature request] Add functionality simular to blokadaAdd ability to block adds and trackers because there is no way to use any vpn based add blocker and bitmask at the same time.Add ability to block adds and trackers because there is no way to use any vpn based add blocker and bitmask at the same time.https://0xacab.org/leap/bitmask_android/-/issues/9011Readability Status info in app2021-01-10T16:22:28ZkwadronautReadability Status info in appUnderneath the title is a status line 'Bitmask blocks all outgoing connections' or 'connected with ...' I think it'd be good to:
- make that text more visible (larger, other place in the window?)
- change the color, currently grey means ...Underneath the title is a status line 'Bitmask blocks all outgoing connections' or 'connected with ...' I think it'd be good to:
- make that text more visible (larger, other place in the window?)
- change the color, currently grey means it's off, but blocking everything is colorful as if it's working.https://0xacab.org/leap/bitmask_android/-/issues/9013Error message seems to be misleading or vague / not clear2021-05-15T11:41:30ZnickcalyxError message seems to be misleading or vague / not clearA user reported that they were trying to connect to Riseup VPN via the android client, and they were receiving the message "no parece ser un proveedor Riseup VPN"
I asked them if the date/time was set properly on their phone and it turn...A user reported that they were trying to connect to Riseup VPN via the android client, and they were receiving the message "no parece ser un proveedor Riseup VPN"
I asked them if the date/time was set properly on their phone and it turned out that it wasn't.. and when they set it properly, the error message went away. It might be useful if that error message gave the user some hint as to how to fix the issue since it seems to often be associated with incorrect date/time setting on the phone.
![photo_2020-12-19_14.15.12](/uploads/bd6ca2e7ef5faec533b0e7509c88f83b/photo_2020-12-19_14.15.12.jpeg)https://0xacab.org/leap/bitmask_android/-/issues/9008adapt error handling to auto gateway selection2021-03-23T09:30:54ZKali Kanekoadapt error handling to auto gateway selectionif manual selected gateway fails, what then?
Some options are:
* Try all gateways with same location?
* If all gateways of a location fail: ask to use different transport?
* ask to use autoselect?
* ask to use a different location? (su...if manual selected gateway fails, what then?
Some options are:
* Try all gateways with same location?
* If all gateways of a location fail: ask to use different transport?
* ask to use autoselect?
* ask to use a different location? (suggest based on next best, by distance/congestion)
discuss fallback algo and document, so that desktop convergence can be achieved.https://0xacab.org/leap/bitmask_android/-/issues/9004inform gateway-selector service if we're manually overriding gateway selection2021-01-28T18:03:17ZKali Kanekoinform gateway-selector service if we're manually overriding gateway selectionthe idea is to send a parameter in the query just to inform the service that we're manually overriding the options.
this only be useful after https://0xacab.org/leap/getmyip/-/issues/9 has been implemented - documentation of the api sho...the idea is to send a parameter in the query just to inform the service that we're manually overriding the options.
this only be useful after https://0xacab.org/leap/getmyip/-/issues/9 has been implemented - documentation of the api should be updated accordingly.
it does not matter if the mechanism is implemented in the android client beforehand.
the desktop issue, for coordination: https://0xacab.org/leap/bitmask-vpn/-/issues/373https://0xacab.org/leap/bitmask_android/-/issues/9002Popup add text when it will re-appear2020-10-24T20:51:39ZkwadronautPopup add text when it will re-appearMicah mentioned in #9001 to tell how often the pop-up (hours,days?) will appear:
> […] there was a request to include something that says how often the notifications come.
I think it's better to do this *after* the current release, bec...Micah mentioned in #9001 to tell how often the pop-up (hours,days?) will appear:
> […] there was a request to include something that says how often the notifications come.
I think it's better to do this *after* the current release, because the current updates should get out, not be held up for new translation strings.https://0xacab.org/leap/bitmask_android/-/issues/8998Adapt firewall2021-02-05T17:25:06ZcybertaAdapt firewalldepends on #8997
- [ ] enable/disable ipv6 package rejection based on: in-app ipv6 settings, connection type and root permissions
by default the openvpn flag tcp should let openvpn do the fallback handling for failing ipv6 connections...depends on #8997
- [ ] enable/disable ipv6 package rejection based on: in-app ipv6 settings, connection type and root permissions
by default the openvpn flag tcp should let openvpn do the fallback handling for failing ipv6 connections (in openvpn 2.4+)
we need to figure out if the app can recognize a failing ipv6 connection if openvpn does the fallback handling. We need a notification/callback so that the app can adapt the firewall accordingly.
otherwise we need separate configurations using explicitely tcp4 and tcp6 which would complicate things unnecessarilyhttps://0xacab.org/leap/bitmask_android/-/issues/8995Show download progress if new certificate gets downloaded2024-02-28T13:21:41ZcybertaShow download progress if new certificate gets downloadedThe easiest way would be to show an Alert containing a spinner, that disallows to tap anywhere else until the download was successful (or not).The easiest way would be to show an Alert containing a spinner, that disallows to tap anywhere else until the download was successful (or not).https://0xacab.org/leap/bitmask_android/-/issues/8993Implement search in LogView2020-07-26T10:45:01ZcybertaImplement search in LogViewWould help with debugging setting up new Providers / gateways, if there was a search implemented in the LogView.
relates to #8982Would help with debugging setting up new Providers / gateways, if there was a search implemented in the LogView.
relates to #8982