So since matrix.org’s development infrastructure got megaowned today i figured I’d put this here:

After Matrix has restored its major services, they noticed that the GPG keys used for signing packages where compromised.

The key IDs are:

AD0592FE47F0DF61 (synapse)
E019645248E8F4A1 (Riot/Web)

Please make sure to no longer use those keys.

Btw, there's an inofficial Matrix channel at #cloudron:matrix.org.

@msbt Lol, I was just going to!

What’s the process of getting this to the App Store?

@msbt Would you bump the version please? v1.0.5 is the latest release.

I'd be interested in an integrations server app for Cloudron, built on dimension.

@girish Currently I'm interested in btrfs.

@msbt Dang, I forgot to push an update of matrix, sorry. After I did, things started working more proper.

Security & Privacy section of room settings still won't open but I’ve pinned that issue down to a specific room, the premade ”discuss” room, so let’s put that blame on Riot.

Thank you for your help and advice. Is matrix/riot coming to the app store some day?

Thanks! There are some bugs with the package however. Users have to login twice to get inside.

Also, the Security & Privacy section won't open at all.

I've carefully compared my riot_config.json with the new one and adjusted accordingly (almost no diff).

@msbt Care to update the Riot package?