Issue Summary A vulnerability in the Gitter desktop application resulted in an inadvertent leak of your Gitter tokens. This affects v2 and v3 of the Gitter desktop app which we officially distribute for Windows and Linux. This only affects macOS if you manually downloaded v2/v3 (we distribute v1.177 on https://gitter.im/apps). Thanks to Dale Higgs for responsibly disclosing this vulnerability [https://about.gitlab.com/disclosure/] to us. Your tokens have already been…
Gitter is a communication product for communities and teams on GitHub. Find out more at gitter.im.
Gitter XSS Crypto Mining Security Issue Notification
Issue Summary An XSS exploit in our KaTeX parser [https://gitlab.com/gitlab-org/gitter/webapp/issues/1859] was used to embed a JavaScript crypto miner in clients via an exploitative message. The exploitative message was spread across 25 rooms and 146 users read those messages. The messages were available for about 1 hour (minutes after being reported [https://gitlab.com/gitlab-org/gitter/webapp/issues/1860]) before being cleaned up across the board. User Remediation Steps To…
Gitter + GitLab = win
Hello everyone, amazing news today, Gitter [https://gitter.im] has been acquired by GitLab [https://gitlab.com]. Wow! Before getting into the details, we’d like to thank the 800,000+ people who make up the Gitter community for your enthusiasm and support for everything we’ve done. You’ve inspired our tiny team to keep shipping and making the open source and developer community a better place to connect to one another. Gitter will continue…
Join the Dark Side
Today we are rolling out some changes to our UI. For those that haven't already played with it, you'll notice it's very white. We appreciate that a lot of developers like working in darker environments and so we've introduced a dark theme. In order to enable the new theme go to the Profile menu - click on your display picture in the top right section and toggle Dark…
Say Hello to the new look Gitter
Hi there. Today we're launching an updated look for Gitter. It's cleaner, simpler and makes the popular All conversations view and direct messages more obvious and usable. TLDR: Try it out here [http://next.gitter.im/enable]. It's only the web and desktop versions that have changed, the mobile application and mobile web bits are still exactly the same. You can switch it off here [http://next.gitter.im/disable]…