DisNews 26.02 - WTF!

The first month of 2026 is already behind us. It feels heavier than it should — not because time accelerated, but because decisions did.

Across the world, we're watching a familiar pattern re-emerge: power concentrating, rights being rolled back, and repression being normalized under different flags and justifications. This is not a return to “dark ages” by accident, but the result of deliberate political choices.

In this context, we want to express our solidarity with those who are paying the highest price for resisting such choices.

We stand with the people of Iran who have confronted religious authoritarianism and repression, often at the cost of their freedom or their lives. Words are insufficient, but silence would be worse.

We stand with the people of Greenland resisting land-grabbing projects driven by geopolitical ambition and corporate interests, where territory is treated as an asset and communities as obstacles.

We stand with all those who have lost everything under military invasion and occupation — in Ukraine, following Russia’s invasion, and in Palestine, under Israel’s ongoing assault. Behind every geopolitical narrative, there are lives uprooted, families destroyed, and futures erased.

We stand with those in the United States who have faced imprisonment or deportation in recent months, and with all who oppose a system of enforcement that increasingly relies on fear, detention, and dehumanization as tools of governance.

And while we extend our solidarity to those resisting dispossession and violence, we also want to be clear about where responsibility lies. The oligarchs and billionaires who gathered in Davos last week to lecture the world on “how to live” are not neutral observers. They're active beneficiaries of an economic and political order built on extraction, war, and inequality.

Their prescriptions are not solutions. They are part of the problem.

None of this is inevitable. It's happening because it's being allowed, enabled, and enforced — and therefore, it can also be challenged.

While all that is happening we keep pushing the platform forward and so, we would like to let you know what's new on Disroot.

Finances

After amazing financial support in December which allowed us to reach and even pass the planned budget, we are entering strong to 2026. The 4348 Euro collected in January has suprased all months in 2025 \o/ We are very excited about this and we hope you will keep on suprising us through out the year. We are still working on the budget for this year (yes a bit late we know) but we hope we can raise the bar significantly. Just look at this awesome graph :)

Deployment 83

As every first Sunday of the month, we have rolled out some of the scheduled improvements on the platform. Here is some notable highlights this time around:

Etherpad

Etherpad has been updated to version 2.6.1 and it brings possibility to migrate your session between browsers. If you use multiple browsers or different PCs for Etherpad they are different sessions. This means typing on one PC and then switching to another one in the same pad will result in different authorship colors. With this new feature you can now transfer your session to another browser or PC. To do so:

• open the home page and click on the wheel icon in the top right corner.
• After that click through the first dialog prompting you to copy a code to your clipboard.
• On your second browser open the same dialog and switch to "Receive Session" tab. There you can paste the code you copied before and click on "Receive Session".
• After that your session is transferred, and you can continue editing with the same authorship color as before.

Just be aware that you can't have two active sessions at once in a pad.

Vaultwarden

Vaultwarden, which is our lastest addition to Disroot, has been updated to version 1.35.2. A notable feature introduced to this version is openid single sign-on feature. This will become especially helpful once we switch Disroot to new authentication system as it will allow you to login to Vaultwarden with your Disroot credentials as an option.

Another, nuanced improvement though more on the technical level is immutable releases. Those are releases where the assets and associated Git tag cannot be changed after publication. The use of this type of release increases security by blocking supply chain attacks. Attackers cannot:

• Inject vulnerabilities or malware into current project releases.
• Make changes to assets and tags that may break developer workflows.

We are very suprised with the amount of people who have decided to make use of the service already. Although working smooth and without issues so far, there is still few things we wanted to work on the setup and provide things like, you know, proper internal documentation (yes, this is our new years resolution: "Write docs or die"), so we keep the beta tag for another month.

Forgejo

Great folks at Forgejo have provided us with yet another update. This time around it's a major version, that besides bug fixes and improvements, brings some new features too:

• Search filters - Similar to fitlers in Github, you can now add filters to your issue/PR search such as is:open, is:closed
• New web editor - Sometimes it's useful to make a quick edit to a single file via web interface. Previous editor: Monaco has been replaced with simplier one called CodeMirror.
• Validation of ssh keys - This improves security where Forgejo upon restart validated authorized keys and will terminate if unexpected keys are found.

Some of you have asked us recently about Actions for Forgejo. At this moment we need to assess resources required to provide runners. This is something that needs a bit more thought to it. Our resources are limited and we need to find a good way to provide them for interesting projects without discriminating others. That said, we will be opening up actions for all those that bring their runners with them in February.

Did you know about Lufi and PrivateBin?

Disroot is mostly known for its email service. However, many people who use it on a daily basis are not aware of the other services we provide. In this section, we would like to introduce some features you may find useful but might not even know exist.

In each newsletter, we will highlight a different aspect of our platform. This month, we start with Lufi and PrivateBin.

At some point, everyone needs to share a file or a piece of text with someone — quickly, simply, without signing up, logging in, or forcing the recipient to do the same. Some of you may have used services like WeTransfer for that purpose. Lufi and PrivateBin offer a similar experience, and more.

These two lightweight services allow you to upload files (Lufi) or share text (PrivateBin) in a straightforward way. Unlike mainstream corporate alternatives, both services are fully end-to-end encrypted. This means that no one — not even system administrators — can access the content, unless they possess the full sharing link. Even in the event of a data breach, your data remains protected.

Both Lufi and PrivateBin feature intuitive interfaces.

You simply upload a file or paste your text, choose how long it should remain available on the server, and optionally protect it with a password. Once the upload is complete, you receive a link that you can share with others. Please make sure not to lose this link, as it is the only way to access the content. No account is required — neither for uploading nor for downloading.

Your files are not scanned, shared with advertisers, used for profiling, or fed into AI training systems.

One feature we are particularly fond of is “burn after reading”, which ensures that the file or text is permanently deleted from the server as soon as the link is opened.

So next time you need to send something to someone quick and secure, check lufi and PrivateBin. Bookmark it and enjoy!

See you next month! Take care of yourself and people around you.