Flatsonar

DinoX

by DinoX / Ralf Peter

Modern XMPP chat client

Dangerous permissions Unverified publisher Archived GPL-3.0+ v1.1.8.1
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made DinoX.

GitHub Sponsors Ko-fi Donate
Screenshot 1 of DinoX Screenshot 2 of DinoX Screenshot 3 of DinoX Screenshot 4 of DinoX

About

Dino is a modern open-source chat client for the desktop. It focuses on providing a clean and reliable Jabber/XMPP experience while having your privacy in mind. It supports end-to-end encryption with OMEMO and OpenPGP and allows configuring privacy-related features such as read receipts and typing notifications. Dino fetches history from the server and synchronizes messages with other devices.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • your GPG agent (can sign/decrypt with your keys)
    --socket=gpg-agent
  • session management (logout, suspend)
    --system-talk-name=org.freedesktop.login1
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • access to xdg-run/pipewire-0
    --filesystem=xdg-run/pipewire-0
  • network
    --share=network
  • portal Desktop
    --talk-name=org.freedesktop.portal.Desktop
  • notifications
    --talk-name=org.freedesktop.Notifications
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • screensaver inhibit
    --talk-name=org.freedesktop.ScreenSaver
  • talks to org.freedesktop.GeoClue2
    --talk-name=org.freedesktop.GeoClue2
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.Dino
  • access to xdg-cache/dinox
    --filesystem=xdg-cache/dinox:create
  • access to xdg-run/dinox
    --filesystem=xdg-run/dinox:create
  • sets environment variable GST_PLUGIN_PATH
    --env=GST_PLUGIN_PATH=/app/lib/ffmpeg

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • im.github.rallep71.DinoX claims the domain rallep71.github.im; only its owner can prove that
    publisher:namespace
  • fetches from ftp.de.debian.org over unencrypted http: anyone on the path can swap the bytes (x2)
    source:insecure-url
  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.