close
  • Mo chevron_right

    Some small news before the big 0.16 release!

    Timothée Jaussoin · pubsub.movim.eu / Movim · Friday, 1 November, 2019 - 17:57 edit

Just a little article that sum up a few small info around the Movim project.

We are currently working on fixing the last known bugs before the 0.16 release that will contains many new features and improvement for the project. You can already discover them on our updated website!

Lots of new Communities were also added recently on our official XMPP server, especially web comics and news websites. You can easily follow them and get notified in real time of new XKCD comics or articles by The Intercept.

All the info about the 0.16 release will be detailed in an incoming article, stay tuned.

  • Pictures

  • visibility
  • favorite

    1 Like

    danifake123

  • 1 Comments

  • person

    1 July danifake123

    That's really cool.

  • Mo chevron_right

    Fix for two temporary data injection security issues

    Timothée Jaussoin · pubsub.movim.eu / Movim · Tuesday, 22 October, 2019 - 19:24 edit

Two data injection security issues were just fixed on Movim master in the following commit 71fcff40d70abd84f10baa252f86eba64264e841.

Movim was not verifying the origin of two kind of XML messages (called stanza) coming from the XMPP connection. This could allow some attacker to inject, in the current client session, some hazardous data. Those data are not persistent after a session reconnection.

  • The roster items
  • The Bookmarks 2 PEP items

The Roster items security issue was left open for many years and there is no known exploit from the team of it yet. But we strongly recommend you to patch your Movim instance by adding the following line in the lib/moxl/src/Moxl/Xec/Payload/Roster.php file on line 12.

if (current(explode('/', (string)$parent->attributes()->from)) != \App\User::me()->id) return;

The Bookmark 2 PEP item issue is very similar but was only recently introduced in master with the implementation of the Bookmark 2 feature. We simply recommend to pull master and restart you Movim instance to clear the cache and remove any unwanted data.

  • Mo chevron_right

    Movim 0.15.1 in preparation, some fixes and improvements in the meantime…

    Timothée Jaussoin · pubsub.movim.eu / Movim · Friday, 23 August, 2019 - 15:15 edit

Only a few weeks after the 0.15 release, a lot of improvements were made (and bugs fixed!) in #Movim for the upcoming 0.15.1 #release. They are listed, like always, on our CHANGELOG file.

We are also working on a new exciting feature for this release. Some of you already tried it (if you're curious you'll find it already on nl.movim.eu). For the others, here's a little clue:

Got it?

We also fixed some issues in the feedcleaner and atomtopubsub projects to improve and fix some compatibility issues between the RSS/Atom streams we are parsing and the #XMPP network. Some broken links were fixed within the articles (especially for pictures and external links), article tags are now transferred and handled properly within Movim and the articles content are now sanitized directly by feedcleaner.

Tell us what you think and do not hesitate to join us on our official chatroom to discuss about the project!

That's all folks!

  • Mo chevron_right

    Movim 0.15 – Donati

    Timothée Jaussoin · pubsub.movim.eu / Movim · Sunday, 28 July, 2019 - 12:59 · 4 minutes

After months of work, Movim 0.15 is finally out!

This version was planned as a 0.14.2 but was finally retagged as a major release regarding the number of changes, improvements and new features introduced. This #release note will also sum up the changes introduced in the minor 0.14.1 version.

So what's new in Movim?

User features

Local nicknames

In the configuration panel you can now set a local nickname, this allows you to shorten the identifier you are using on your current pod and gives you a nice looking url for your blog (https://nl.movim.eu/?blog/edhelas%40movim.eu/ becomes https://nl.movim.eu/?blog/edhelas).

Chats reactions

In one-to-one chats and chatrooms you can add and remove #reactions to your contacts messages. A first implementation was using the Message Attaching XMPP extension. During the Lyon XMPP Sprint, the feature was refactored to implement the incoming XEP - Message Reactions. During this sprint we also worked with the #Dino and #Poezio developers to make the feature fully compatible with their clients.

Chat reactions

Publication sharing

You can now easily share any article found in Movim inside a conversation by clicking on the send button just bellow the article.

This uses the References XMPP extension.

Publication sharing

Snap!

Do you want to quickly snap a picture and directly send it to a friend in a discussion or in an article? The new #Snap feature allows you to do that from any devices. Switch between your different cameras, shoot and send. It's that easy!

The Android application has been updated as well to integrate this feature properly.

Small improvements

  • You can now slide a one to one discussion to close it quickly, just like the Conversations client allows you to.
  • Search navigation has been improved, there is no page reload anymore to open a new discussion from the Search panel.
  • The Community page was fully redesigned to be snappier and propose contents that might interest you.
  • The UI now handles small disconnections way better . The conversations are not fully reloaded anymore when the connection is brought back.
  • In the configuration you can now define the Chat page as the default one to open when launching Movim, this is quite useful on mobile.

Fixes, fixes, many fixes

Lots of small things were fixed here and there.

  • The chat notifications counter was fully refactored to prevent some counter issues, each message is now independently checked as read (or not) in the database
  • The composing/paused chat state are now handled more properly in Movim. Those states are also displayed during chatrooms discussions. This fixes a 3 years old ticket.
  • Websockets are now reconnected properly if the browser is doing some intensive throttling, this was especially the case on Chrome on mobile devices.

Architecture and technical changes

From ZeroMQ to Websockets

One of the biggest changes technically wise was the replacement of #ZeroMQ sockets with WebSockets. This technology was used internally for the inter-processes communications. In the end this replacement allows us to become independent from the php-zmq library without any noticeable performance impact.

This simplifies even more the deployment of Movim and helps with the packaging of the project.

New base web server directory

For the administrators, please notice that the main file, index.php is not at the root of the project anymore but in the public/ directory (as well as many other files). These small changes allow the Web server to expose only the public files without extra configuration. So please point your root repository to that public subfolder.

This change was about securing the basic setup by default .

SQLite support removed

The #SQLite support, introduced in the version 0.14, has been removed for now. We had lots of issues to maintain consistency and fix our migrations for that specific database.

Some work has been done on the Eloquent library to fix some of those migrations issues upstream but it is too early to have something sufficient to bring back SQLite support in Movim.

You can still fully use Movim with #MySQL and #PostgreSQL.

What's next?

Movim has now reached a stable state, both UX/UI wise as architecturally wise.

There is still a lot of improvements to do, especially regarding the integration between the social network part and the chat part. Plus, we are always interested to hear about new ideas or improvement suggestions!

For the 0.16 version we are planning to improve video-conferencing and bring it properly for the mobile devices. Some work is also planned to improve the Communities navigation.

We need your help

To continue developing and hosting our infrastructure and to support the project we would be really pleased to cover our monthly expenses, it's not much.

We already have a few hundreds users connected daily on our main servers. If each of them could give a few euros per month it would easily allow us to reach that goal.

You can help us by giving monthly on our official Patreon page or by using Paypal.

  • movim/movim

    Movim - Decentralized social platform. Contribute to movim/movim development by creating an account on GitHub.

  • Pictures

  • visibility
  • Mo chevron_right

    Some news about Movim

    Timothée Jaussoin · pubsub.movim.eu / Movim · Tuesday, 11 June, 2019 - 16:29 edit

You may have noticed that there was less updates about Movim the past few weeks. I was indeed a bit busy with other things (jobs, other projects…) but don't worry I'm still working on the upcoming release and maintaining things up.

Our #ejabberd instance (for movim.eu and jappix.com) was updated to ejabberd 19.05 a few days ago (we also found a little issue in the release related to the #Pubsub module, which was kindly fixed upstream by the ejabberd team).

A new "share posts to chat contacts" feature was also introduced recently. This will need a bit of polishing but will be part of the upcoming release.

Posts in the chat, Movim, first XMPP client to do that, it

I am also renewing our call to help the #Movim project on #Patreon, we lost a few bakers and went again bellow the 50€/month that allows us to cover the servers + domains and few other expenses for the project.

So if you want to help us, do not hesitate to join our Patreon as well as participating to our little community by doing translations, bug reports (or better, fixes!).

edhelas

  • Mo chevron_right

    Movim 0.11 - Tuttle

    Timothée Jaussoin · pubsub.movim.eu / Movim · Friday, 31 March, 2017 - 08:00 edit · 6 minutes

Six months after Movim 0.10 Holmes, here is the new winter release of the Movim project.

Small recap: Movim is a project that aims to build an IM and social networking service exclusively on top of the XMPP protocol.

This 0.11 version refined several features and will introduce a couple of big changes, mainly regarding the navigation and the project UI.

Features

New contacts list

The contacts list (or roster) has always been a very complex element inside Movim. It was ported on Angular 1 a couple of versions ago but suffered since then of performances issues (that could block the page loading for several seconds).

This new version brings a complete rewrite of this feature in pure PHP (with a bit of JavaScript). The contacts are now grouped in a simple list. The search has been improved and now allows you to search instantly among your contacts using their name, ID, nickname or group.

Onboarding

At first startup, Movim is now asking for some browser and account preconfiguration regarding notifications and pop-ups (used for videoconferencing) preferences.

test

The sharing feature

As promised, articles sharing has been greatly improved in and around the Movim project. It is now possible to share an article (as in "write an article as an answer to") on your own Blog. This feature is based on the IETF — Atom Threading Extensions (RFC 4685) norm. Again, Movim aims at showing that it's possible to build a social solution relying only on existing standards.

Sharing an external link has also been improved. Movim now understands XMPP URIs.

Communities

Communities, previously named "groups", are the result of a deep redesign of the way articles are displayed navigated through. The reorganization of the content makes the exploration much easier and natural. This new name also lets Communities clearly stand out from group discussions (chatrooms) and groups in the contacts list.

Communities also benefited of a better management system, for users, but also for administrators who can now assign roles in a more precise way.

All in all, that's a lot of changes but don't worry, Movim will still be compatible with old versions as nothing has changed on the XMPP side. ;)

Posts

Two littles features have been added on the articles page to facilitate articles discovery and evaluation. An article is now surrounded by links to the previous and following articles of the same Community or from the same contact and a "Like" button let's you express your contempt to the author of the article. :)

As an author, a new Notifications block on the homepage informs you of comments and likes on your published articles.

Discovery

The interface redesign also brings new features of content discovery.

Movim now provides readers with related articles published on Blogs or in Communities. Suggestions are so far pretty basic but should get better in the upcoming versions.

Chat

The Chat part has not been forgotten. A lot of changes have been done on the interface to ease the navigation on small and big screens (removal of useless spaces) and to fix a few bugs (on Android). A new pack of stickers has been added with a Creative Common BY-SA license.

The file upload and file sharing UI have both been redesigned and now make use of one of the latest XMPP norms, XEP-0385 : Stateless Inline Media Sharing (SIMS). It allows Movim to integrate them better in Chats.

Videoconferencing (beta)

In this version, the videoconferencing feature is coming back in Movim. As usual, nothing but standards here (WebRTC and XMPP Jingle this time). However some bugs still remain. They should all be fixed for the upcoming (0.12) version. This feature is only available for the desktops for now.

Refactoring of the session system

The user sessions management code within Movim was one of the oldest ones in use in the project. It has been heavily redesigned and now brings a new way of handeling cookies and session variables both in memory and in the database.

Around Movim

We now see more and more external contributions on Movim and its linked projects.

Android Client

Thanks to schlusslicht the Android native file selector has been integrated to the application. You can now upload files from your phone.

A little security update regarding certificates management has been added at the same time (non valid certificates are no longer accepted).

The Android application is available on Google Play and F-Droid.

Electron Client (desktop)

The Electron client has been updated. Mike Barnes (bremensaki) has added the support of contextual menus in the interface. Thanks Mike !

New Debian and RPM packages have been made. Movim is now also available on Windows and macOS. All those applications are available on the official website.

Atomtopubsub

Atomtopubsub is the little magic tool that, as its name suggests, parses Atom feeds and injects them on Pubsub nodes. It allows Movim to offer a lot of news feeds among Communities. A big thanks to Link Mauve, who took some time during the 33c3 to port atomtopubsub in Python 3 and to optimize the processing of articles inside the application.

Movim Europe

Movim Europe is a structure that provides support for the Movim project. It has been declared in the Netherlands and currently offers two services.

  • technical support and advices to deploy the platform (and linked services such as XMPP servers or SQL databases) and/or on the technologies involved in the project;
  • the possibility as a company, an association or an individual to fund the development of features that were not initially planned on the roadmap and that are part of a particular need.

The gathered funds will first cover the running costs (domains, hosting, travels...) that were until now payed by the founder, but also to free more time to develop the project and its surroundings (administration, linked projects, conferences...).

Don't hesitate to contact us on the official chatroom.

A few figures

We also have two official servers: one hosted in Amsterdam, with around 4 000 registrations and 50 connected people, and one in Roubaix with 2 800 registered people and around 20 simultaneously connected people.

Everyday, 4 000 messages (simple or from groupchats) are sent or received, and around twenty articles are written by the users of nl.movim.eu.

Statistics that are (voluntarily) sent on api.movim.eu by the deployed instances are showing a total of 8 000 registered users and around 250 simultaneously connected ones along the day. The XMPP server movim.eu reaches 300 connected people during the day.

Some plans are made to open new servers both in Australia and in Russia.

Movim 0.12

A new roadmap is also planned for the 0.12 that should be released this summer. Two main changes are planned:

  • Movim has a heavy memory consumption, it can reach 50 Mio for some users connected on a server. This problem is not due to memory leaks but to architectural decisions that are duplicating for each session some parts of the Movim code in memory. A huge change on this subject is planned, that should significantly reduce the memory footprint during runtime.
  • An implementation of the OMEMO protocol has been strongly demanded by the community. A preliminary research work has been done in January and it seems that this end-to-end encryption protocol could be implemented in Movim. A publication about this feature will most probably be released in the next few months.

We need you!

Don't forget, the Movim project needs you! As a source code contributor, but also as an administrator, packager, translator or even a drawer (if you want to add your own stickers to Movim!).

All contributions are welcome, so don't hesitate to come and discuss them with us on movim@conference.movim.eu. :)

That’s all folks!

Translated from the original French article by nodpounod - Christine HO & daftaupe - Pierre-Alain TORET

  • Movim

    Movim is a kickass distributed social networking platform that protect your privacy an comes with a set of awesome features.

  • Pictures

  • visibility
  • favorite

    8 Like

    Matija Šuklje , Tristan , daftaupe , krille , Timofey Kostenko , U , Roelof Pieter , preptorrent

  • 1 Comments

  • 31 March, 2017 Matija Šuklje

    If anyone wonders, AtomPubSub is available through GitHub and edhelas is its main author.

    Link to code and project: <https://github.com/edhelas/atomtopubsub>