Gitter is a communication product for communities and teams on GitHub. Find out more at gitter.im.

Navigation

Gitter Token Leak Security Issue Notification

Issue Summary A vulnerability in the Gitter desktop application resulted in an inadvertent leak of your Gitter tokens. This affects v2 and v3 of the Gitter desktop app which we officially distribute for Windows and Linux. This only affects macOS if you manually downloaded v2/v3 (we distribute v1.177 on https://gitter.im/apps). Thanks to Dale Higgs for responsibly disclosing this vulnerability to us. Your tokens have already been revoked and rotated. If you…

Gitter XSS Crypto Mining Security Issue Notification

Issue Summary An XSS exploit in our KaTeX parser was used to embed a JavaScript crypto miner in clients via an exploitative message. The exploitative message was spread across 25 rooms and 146 users read those messages. The messages were available for about 1 hour (minutes after being reported) before being cleaned up across the board. User Remediation Steps To check if you are affected, open up the devtools(right-click on the page -> Inspect element)…

Gitter + GitLab = win

Hello everyone, amazing news today, Gitter has been acquired by GitLab. Wow! Before getting into the details, we’d like to thank the 800,000+ people who make up the Gitter community for your enthusiasm and support for everything we’ve done. You’ve inspired our tiny team to keep shipping and making the open source and developer community a better place to connect to one another. Gitter will continue to operate as a standalone network…

Join the Dark Side

Today we are rolling out some changes to our UI. For those that haven't already played with it, you'll notice it's very white. We appreciate that a lot of developers like working in darker environments and so we've introduced a dark theme. In order to enable the new theme go to the Profile menu - click on your display picture in the top right section and toggle Dark Theme. Try it out for yourself. The new…

Say Hello to the new look Gitter

Hi there. Today we're launching an updated look for Gitter. It's cleaner, simpler and makes the popular All conversations view and direct messages more obvious and usable. TLDR: Try it out here. It's only the web and desktop versions that have changed, the mobile application and mobile web bits are still exactly the same. You can switch it off here. To enable it for your desktop version, take a look at this Topic. After reworking the…