Download the Auffi sharer

What's new

0.7.2 (2026-10-23)

• No more time limit over the relay — connections that go through our relay server because of a strict firewall used to end after 10 minutes. That limit is gone.
• Sending a file asks first — a file you send to your helper is only transferred once they click “Accept”. Before, such files never arrived.
• More security — unattended access only starts after a password check the sharer confirmed itself; links open fixed addresses only; suspicious characters are stripped from file names; updated TLS libraries.
• Clearer messages — pairing and feedback errors are shown in plain words; an expired code offers “New code” directly.
• More reliable — “Stop” during a short connection drop no longer leaves a wrong status; cancelled downloads no longer leave half files behind.

0.7.1 (2026-09-02)

• Maintenance release after a full review — the whole code base was gone through from the ground up; this release bundles well over 200 corrections, most of them small. Handling and flow stay the same.
• Files only land after “Accept” — a sent file could be saved in the helper's browser before they had agreed. Anything that arrives before consent is now discarded.
• No more random connect failures — if a network candidate arrived before the actual answer, the browser aborted with “ICE error”. Such candidates now wait until the answer is in.
• No more stuck keys — when the helper switched windows with Alt+Tab, a held key or mouse button stayed pressed on the shared machine. It is released as soon as the window loses focus. Umlauts and Y/Z now arrive correctly from German keyboards too.
• Unattended access starts by itself — after a reboot the sharer stayed “Inactive” until someone clicked. It now signs in at launch when that mode is selected. “Unpair device” also ends a running session immediately, and the access prompt defaults to “Deny”.
• Life goes on after a disconnect — the “Reconnect” button was invisible; a sharer that lost its connection had to restart the app. When the helper leaves, the code stays valid and the dialog closes.
• Security — the dashboard login locks after five failed attempts like the other password prompts; accounts that are never confirmed are deleted after seven days; the comparison pages and the error page show their design again, which the browser had been blocking under the security rules.
• Code guessing really throttled — every connect attempt from a browser now counts against the limit of five attempts per minute and IP address, hits included. Whoever used up that budget guessing doesn't get through for now, not even with the right code.

0.7.0 (2026-08-31)

• The picture adapts to the connection — until now Auffi always sent the same amount of data, whatever the link could carry. On a phone hotspot or a weak DSL upload that meant a permanently torn or freezing picture that never recovered on its own. Auffi now measures what actually arrives and adjusts the quality — down when the link gets tight, and back up as soon as it allows.

0.6.9 (2026-08-31)

• No more black screen on a still picture — if nothing moved on the shared screen, the person helping saw nothing at all. That is the most common situation of all: someone stuck on a dialog. The picture now arrives as soon as the connection is up, and again whenever packets are lost on the way.
• Sharing stops when the other side is gone — if the connection dropped, screen capture used to keep running unnoticed. It now ends, after a short grace period for brief Wi-Fi outages.

0.6.7 (2026-08-29)

• The device id is back in the status line — in unattended mode the app only said "Connected", without the number the helper has to type.
• Unpairing now takes effect server-side — it used to clear only the local pairing, leaving the server-side token alive.
• Connection history for paired devices: duration and connection type now show up in the device log.

0.6.6 (2026-08-28)

• Connects on freshly installed Windows too — on machines whose certificate store was not yet up to date every connection failed with a certificate error, even though the browser on the same machine worked fine.

0.6.5 (2026-08-28)

• Security: a single malformed packet could take the signalling server down and drop every live session with it.
• Revoking access ends the session immediately — deleting a device in the dashboard, or switching unattended mode off, now also cuts a remote-control session that is already running.
• The pause hotkey releases held keys — pausing mid-drag used to leave the mouse button down at the OS level.
• "Stop" stays reachable while waiting for the first frame.

0.6.4 (2026-07-02)

• Unattended access: follow-up connections now work — with paired devices only the first helper could connect; every further one got a black screen. Any subsequent connection now works without a restart.
• More stable reconnects — after a brief Wi-Fi drop the device reconnects quickly instead of after a long delay.
• Smaller touches: the free relay-time notice now also shows on the sharing side, and screen-capture errors are logged instead of lost.

0.6.3 (2026-06-22)

• Much smoother sharing on Windows — on Windows servers (e.g. over Remote Desktop) and PCs without a dedicated graphics card the picture used to lag badly. The video encoder is now tuned for real-time, so the stream stays smooth even on those machines.

0.6.2 (2026-06-22)

• Windows screen capture fixed — on some Windows machines and over Remote Desktop, sharing aborted with “Streaming could not be started”. Auffi now initialises capture correctly and automatically falls back to an alternative method on machines without a GPU, so sharing starts reliably.
• Visible session-code expiry — the 9-digit code now shows how long it stays valid and is cleared cleanly once the session ends.
• Extra hardening — diagnostic logs are now readable only by you locally, IP addresses are stripped before logging, plus smaller stability and usability fixes.

0.6.0 (2026-06-16)

• Viewer country in the confirm dialog — for ad-hoc connections the sharer now shows the country of the requesting person, so you can judge incoming requests more easily.
• Fresh "Calm Fresh" design — the sharer UI was recast to the emerald/mint design (AA contrast in light and dark), plus hardening (no IP-based auto-accept, cleartext-URL guard) and updated dependencies.
• Linux and Windows only for now — no macOS build yet.

0.5.0 (2026-05-29)

• Security & UX review — TURN relay hardened against SSRF, clear German error messages when connecting, no more endless spinner (connect timeout + Cancel button), and the download buttons now run on the home page through auffi.app instead of going straight to GitHub.
• No behaviour change in the sharer itself — the app contains only type fixes and cleanup; Linux and Windows built from the same revision.

0.4.5 (2026-05-21)

• Update notifier in the sharer — on startup the sharer checks the GitHub releases API once; if a newer version is available, a blue banner appears with a “Download now” link to this page.
• Downloads run directly through auffi.app — the backend streams the release assets through instead of redirecting to GitHub. Per-version download stats are kept and are now counted server-side (no more client-side JS needed).
• Windows + Linux at the same time — all 6 builds (3× Linux + setup .exe + MSI + portable .exe) available from day one.

0.4.4 (2026-05-20)

• Windows: cursor flicker fixed — the system cursor visibly flickered as soon as a viewer was connected. The cause was a WGC capture session reopened every frame (~30/s), which kept toggling DWM's cursor compositing. Now there's one persistent capture session per stream lifetime.
• Clean capture stop on Windows and Linux/ X11: after Disconnect, the capture thread kept running until the sharer was fully quit. The stop signal is now reliably detected within ≤500 ms.

0.4.3 (2026-05-20)

• Distinctive “Connect” notch at the top center of the site — a quick jump to the code input, also from the subpages (Impressum, Datenschutz, Download) (#104).

0.4.2 (2026-05-17)

• Security update: three high-severity CVEs in the TLS stack (aws-lc-sys via Tauri/rustls) patched — preventing cert-chain bypass + signature bypass + a CRL logic bug. Recommended for all paired unattended devices. Plus 4 CVEs in rustls-webpki (name constraints, CRL panic).

0.4.1 (2026-05-17)

• Fix for sharer-control lockup: after disconnecting the browser connection, a mouse button that was still being held could stay “pressed” on the sharer side, making the sharer's own clicking unusable until the sharer process was fully quit. Fixed with automatic release-on-drop in the input pipeline (#97).

0.4.0 (2026-05-14)

• Unattended access — pair devices once, then connect any time with a fixed device ID and the mandatory device password. Auto-accept (default, can be turned off per device) only skips the click on the device.
• Wayland-native capture — Plasma 6 and GNOME 47+ work natively via GStreamer/PipeWire, no more XWayland fallback.
• Feedback dialog in the app — submit bugs and requests directly from the sharer (in unattended mode) or the dashboard.
• Account + dashboard — device list, connection log, auto-accept toggle, device pairing via auffi.app/dashboard/.
• Hardening — argon2id for passwords, __Host- session cookies, per-account lockout, HMAC-ephemeral TURN credentials. Full audit: security-review-2026-05.md.

All releases on GitHub →