We’re planning a meet up in Stockholm on the 30th of March. More details will follow in the coming weeks :)
Etherpad 1.5 – Turkey Slayer Edition
Usually on releases the first thing we do is tell you what’s new and why you should upgrade. If you are looking for this, scroll down.
This release is different. What makes Etherpad such a great project is the number of contributors that can maintain the software. This means that should one maintainer be unable to maintain Etherpad others can step in. So the first thing we want to do on this release is hat tip the contributors between 1.4.1 and 1.5. Now you know who to hire for your next Etherpad project!
Etherpad is mostly a British-German alliance. The majority of our funding comes through US organizations and Primary Technology. We’d like to see more funding arrive through donations and sponsorship. These donations have less strings attached so will keep us more independent and neutral. If you can help, please visit the donation section on Etherpad.org
@webzwo0i, @marcelklehr, @Gared, @simong, @BjarniRunar, @luto, @l-y-n-x, @beaugunderson, @cristo-rabani, @prtksxna, @0ip, TranslateWiki team
And finally Myself: @JohnMcLear
TLDR; What’s new and why should I care?
> Full Etherpad Pad Export and Import
> Bug fixes, tests, UI/UX polishing & updates of dependencies
> Speed improvements to all pages. Page load times improved by ~30%.
> Support for instance Sharding (Scaling Etherpad to multiple servers)
> Better documentation & more language support.
Nice things for users:
> Control 5 now does Strikethrough.
> Better experience at higher DPI screens (use of icons instead of fonts)
> 30% Faster page load
> Full Pad Portability (Export/Import)
While this release is mostly a bugfix & performance release we have updated about 20% of the overall Etherpad code since 1.4.1 so we have given it a major release number.
Our release schedule is heating up as we get more and more commercial support ergo more active development.
Some cool things Etherpad can do that it couldn’t before
> curl HTTP POST files right to your Etherpad Instance
> Export other HTTP block elements (Such as subscript/superscript)
> Talk to your pad
> Switch between pads without reloading the editor
Demo Etherpad
Post to Etherpad with this simple plugin
Simple single command to post a files data to your Etherpad instance:
curl -X POST -d @yourfile.here http://youretherpad/post
This command will return the URL to a pad containing the contents of the file you selected.
To get this functionality:
1. Visit /admin/plugins
2. Install ep_post_data
Enjoy! And merry festive period, may all be red and ball like.
Etherpad 1.5 plugin upgrade
This article is aimed at plugin developers.
When we upgrade Etherpad to 1.5 some(very few) plugins will require minor changes.
Broadcasting to all clients
If your plugin uses socket IO to broadcast a message to each client connected to your Etherpad Instance.
var clients = socketio.sockets.clients();
for(var i = 0; i < clients.length; i++) {
clients[i].json.send({type: "COLLABROOM",
data:{
type: "shoutMessage",
payload:{
message: message
}
}
});
}
Becomes
var clients = socketio.sockets.adapter.nsp.connected;
for(var client in clients) {
clients[client].send({type: "COLLABROOM",
data:{
type: "shoutMessage",
payload:{
message: message
}
}
});
}
Browser type detection
$.browser
is no longer available.
We now expose browser
.
Simply removing $.
should fix this however browser
does behave slightly differently so you should change to browser
and run your front end tests on all devices you need to support.
Etherpad Version 1.4.1 Released – Unpremature
Shut up rambling John. Just tell me what’s New and why should I upgrade/care?
Performance:
* Huge MySQL performance improvements (InnoDB to MyISAM)
Hooks:
* User Leave
* Export File Name
* Preprocessor Hook for DOMLine attributes
Scripts
* Script to reinsert all DB values of a Pad
Configuration:
* Allow for absolute settings paths
API:
* Get Pad ID from read Only Pad ID
Fixes:
* Exception on Plugin Search and fix for plugins not being fetched
* Font on innerdoc body can be arial on paste
* Fix Dropping of messages in handleMessage
* Don’t use Abiword for HTML exports
* Color issues with user Icon
* Timeslider Button
* Session Deletion error
* Allow browser tabs to be cycled when focus is in editor
* Various Editor issues with Easysync potentially entering forever loop on bad changeset
Shut up John, why no update for so long?
Thanks to you guys supporting my other project I have been crazy busy and that means no time for Etherpad, thankfully other project members have lead the way but things haved moved slower than we’d all like. Etherpad is still a project very close to my heart and I’m making plans to commit more time to move things forward in 2015.
Remember people, cloud hosting where you can’t replicate the system locally is going to cost you long term. Did anyone else just notice Google changed Google Drive/Docs interface yet again, can anyone find any of their documents? I tried.. Gave up.. Hillarious. TAKE CONTROL.
Also props to services such as Own Cloud gaining traction, we love you guys, you give control. Keep on being smashing.
Nginx reverse proxy SSL security issue
Until today the example Nginx reverse proxy config for Etherpad allowed for weaker SSL encryption than is acceptable.
You can see if your instance is vulnerable by checking your instances SSL cert
Check your Nginx config to see if this line exists:
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
If so replace with:
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 ECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
Restart Nginx then check your instances SSL cert
We updated the wiki to reflect this change.
Skype and Hangouts alternative
We’re tired of being spied upon and we’re tied of tech companies colluding.
With no sign of an end we think it’s time to take control.
So.. We’re Introducing an Etherpad instance to serve as an alternative to Microsoft Skype and Google Hangouts, we’re using it internally but we’re inviting you to try it out too for your own chats and let us know what you think..
Try out Vetherpad at https://v.etherpad.org/
Naturally no plugins or extensions are required, just a gool ‘ol modern browser..
Wanna host your own? Just install Etherpad and the webrtc plugin, it takes minutes then you will have your own secure, private video chat and document editing facilities.
Found a bug and wanna fix it? Awesome! We gots the bug trackers.
Looking to see what else Etherpad can do? Check out our beta instance..
Etherpad for the masses
Over time Etherpad has grown, it’s become more than we aimed for it to ever be with many large tech and activist organizations deploying their own instances. However, one problem we have is the ability for smaller organizations to easily roll their own Etherpad instance on the web.
Don’t get us wrong, there are some great services such as PrimaryPad that exist and cater for individual markets but we feel we feel that as a community we can provide a richer, more configurable service that contributes more back to our core open source project.
So we’re considering building an easy way to deploy a private Etherpad instance for your organization on Etherpad.com
We don’t know exactly how this Etherpad as a Service will look like, but we will probably take inspiration from WordPress.com
We want everything to be kept open source, not just what we choose to push back to the core project.
We want to provide confidence that activists groups anonymity and data will be kept safe.
We want to create an ecosystem that has some finance involved but we want to keep the uptake for small organizations costs at a minimum. We have a small pool of start-up funds available. We’re not sure yet how we will go about assigning stakeholders for this new venture.
Services we have been offered help with so far..
- Hosting: Rackspace
- SSL Certificates: GlobalSign
- Automated Testing: SauceLabs
- Etherpad Development: Etherpad Foundation (naturally)
- Ticketing and Support: Primary Technology
- Security Auditing: Mozilla
- Translations: Wiki Media Foundation
- Etherpad.com: Google
Services we’re looking for help with, maybe your organization can help?
- Pen testing (Security penetration testing, ensuring our overall service is as safe as possible from attackers)
- Marketing (Press release drafting, branding etc.)
- Management and business strategy (Deciding the best approach for us to ensure we’re providing the best service)
- Billing and Invoice handling (Allowing for simple online payments(including crypto-currencies), creating invoices and chasing them when they are unpaid)
- Sales consultancy (Discussing payment options with potential and existing Etherpad.com users)
- Data analysis(Looking at our collected stats/data and provide Management with decisions to help them improve their overall strategy)
Our big problem is going to be monetization. We have a few options we want to get your feedback on…
Charge per changeset: 1M or so changesets free then 0.001p per changeset after. We think this will confuse too many people and potentially scare people off using the service.
Flat fee per month: 1 month free then pay per month. We feel we can do better than this.
Free to use with micropayments for plugins: Something along the lines of $0.50 for each plugin you enable. We’re keen on this model as it funds new plugin development.
Ad supported: We’re not overly keen on spamming your page with ads, we think it devalues the service.
Pay per user: Monthly Micro payment for each user account you add / uses Etherpad.
A choice of any of the above: This may be the most complex model for us to achieve technically but it might be the best for large and small organizations as they will be able to switch between payment options to secure the best deal for them.
So that’s our general goal, to create an ecosystem around Etherpad development to encourage more developers to take up Etherpad as their full time development job and to empower smaller organizations will the ability to quickly throw their own Etherpad instance up on the Web so they are in control.
Please do let us know your thoughts, we appreciate this isn’t ground breaking stuff but if we can build a stronger ecosystem it should lead to a more rapid release cycle and more innovation around Etherpad.
~<3 Critical SSL security issue
TLDR; Update your OpenSSL to at least 1.0.1e(Ubuntu) and consider re-keying your Etherpad deployment if you use OpenSSL for your SSL certificates.
beta.etherpad.org has been updated.
Say hello to Etherpad 1.4
Today we’re proud to announce Etherpad 1.4. Let’s be honest here, there are no killer features in this release however this release does contain LOTS of bug-fixes and security patches. All of the killer features exist as Plugins, once you upgrade Etherpad we suggest you check out the available plugins because some really great ones exist.
Why should I upgrade?
- Various server and client stability patches
- Various security patches
- Various new hooks and methods (to support the plugins we talked about earlier)
- Internal stats and metrics
- Improved Docs
- Moar
Anything special worth noting?
The introduction of a more modular toolbar means you might want to upgrade your settings.json, adding the new toolbar objects. To do this simply copy the toolbar objects from the settings.json.template, this is optional though and not required.
Why so long?
We have been crazy busy. We have hundreds of organizations that now run Etherpad and our team has mostly been focusing on integrating with their platforms and resolving their issues. Thankfully those companies have allowed us to commit back to the open source project both to core and as plugins, also John got busy with a new startup.
How do I upgrade
Simple.
git pull && /etc/init.d/etherpad restart