Like Ra's Naughty Forum

Yes, just try the default config first

Aight, I unpacked it and launched it with Hidden Server, as-is nothing changed. Gonna try adding people now, and see if it works.
Thanks for the assist.

I've been adding certs nonstop, but many of them are resulting in the following message on the Connection Assistant window:
The DHT is OFF, so Retroshare cannot find your Friends.

Retroshare has tried All Known Addresses, with no success
The DHT is needed if your friends have Dynamic IP Addresses.
Only Advanced Retroshare users should switch off the DHT.

Go to Settings->Server and change config to "Public: DHT and Discovery"



I can't find that setting path anywhere in Retroshare.

Just ignore it and keep adding people. Only 3-4% of peers, who published their certs, are online. So, you need hundreds of peers to use RS reliably.

(03 Oct 2021, 20:48 )Like Ra Wrote: [ -> ]Just ignore it and keep adding people. Only 3-4% of peers, who published their certs, are online. So, you need hundreds of peers to use RS reliably.

Thanks Ra, it's working just fine now. I'm actually happy to see at least a few names I remember online from before.

Regarding the lack of online users, I'd like to get back online with Retroshare but there's some big hurdles involved.
The first is that it was corrupting it's own files and downloads. I was able to restore some from backups a few times, but it finally wrecked itself so badly I'd really have to start again to be sure any more crashes weren't caused by unnoticed profile corruption. I think one of the corruption causing bugs may be fixed - again.

My second big hurdle is security. I was thinking of using the Flatpak version this time in the hope that their bundled components may be more tested and compatible than whatever distro users run. But then I checked their flatpak and noticed they're using an outdated version of Tor which has a vulnerability rated as high as shown here https://nvd.nist.gov/vuln/detail/CVE-2021-38385 There may be more, I've not checked any further.

Depending on where you get Retroshare from you may have a remote exploit vulnerability. It was fixed in August but the releases on github haven't been updated. If you get it from OBS I believe that has the fix. I think the flatpak uses the last stable release from github, so it is vulnerable to that exploit. See here for details on the exploit https://github.com/RetroShare/RetroShare/issues/2453

I'm not trying to knock the developers or their efforts but at the end of the day it just doesn't seem worth it to me to fight against all the bugs and vulnerabilities.

I use the OBS version for Ubuntu, and it has been very stable for me for years.

I wonder why there are so many people posting their certs.

I do have 186 "friends" . On good days 15! online.

The program is named retro_share_ well most of my "friends" seem to miss that.

That's very frustating.
krin

(12 Oct 2021, 01:52 )cjtl Wrote: [ -> ]Regarding the lack of online users, I'd like to get back online with Retroshare but there's some big hurdles involved.
The first is that it was corrupting it's own files and downloads. I was able to restore some from backups a few times, but it finally wrecked itself so badly I'd really have to start again to be sure any more crashes weren't caused by unnoticed profile corruption. I think one of the corruption causing bugs may be fixed - again.

My second big hurdle is security. I was thinking of using the Flatpak version this time in the hope that their bundled components may be more tested and compatible than whatever distro users run. But then I checked their flatpak and noticed they're using an outdated version of Tor which has a vulnerability rated as high as shown here https://nvd.nist.gov/vuln/detail/CVE-2021-38385 There may be more, I've not checked any further.

Depending on where you get Retroshare from you may have a remote exploit vulnerability. It was fixed in August but the releases on github haven't been updated. If you get it from OBS I believe that has the fix. I think the flatpak uses the last stable release from github, so it is vulnerable to that exploit. See here for details on the exploit https://github.com/RetroShare/RetroShare/issues/2453

I'm not trying to knock the developers or their efforts but at the end of the day it just doesn't seem worth it to me to fight against all the bugs and vulnerabilities.

Hi

I use retroshare within https://sandboxie-plus.com/ .

krin

(28 Nov 2021, 10:38 )krinlyc Wrote: [ -> ]I wonder why there are so many people posting their certs.

I do have 186 "friends" . On good days 15! online.

That's why you need to keep adding certs.

I have close to 900 certs (both clearnet and Tor), ~50 Tor only active (27 right now).