OpenRiot v7.9.57 — The Machine Knows Where It Is

“The VPN connected. The icon turned green. You were encrypted. You were anonymous. But to where? Mullvad has servers in Seattle and Stockholm and Singapore. The machine knew which one it was using — it had the IP, it had the config, it had the DNS. It just never told you. You had to go to mullvad.net to find out. We fixed that. Now the notification tells you. While we were in there, we updated gurk from 0.9.3 to 0.10.1 — twenty-one commits, including a security fix for a segfault on exit and emoji autocomplete. The Turing Police would call it ‘a notification enhancement and a dependency update.’ We call it the machine finally telling you where it’s pointing the encrypted tunnel.” — The OpenRiot Crew, v7.9.57

Release Overview

Two changes. The WireGuard notification now shows which Mullvad server you’re connected to. gurk jumps from 0.9.3 to 0.10.1 with a security fix and new features.

Total changes: 2 features, 21 gurk commits.

🔒 WireGuard: Server Name in Notifications

The WireGuard notifications used to say “WireGuard VPN is Enabled” — useful but vague. Now they show the Mullvad server name, extracted from the endpoint IP in wg0.conf via reverse DNS.

When you toggle WireGuard on, you get:

Connected to us-sea-wg-403

When you toggle it off:

Disconnected from us-sea-wg-403

The polybar click notification also shows the server:

WireGuard VPN is Enabled
us-sea-wg-403
Disable in Settings Menu
Or Super+Shift+G

The server name is resolved from the Endpoint line in wg0.conf. Reverse DNS on the endpoint IP returns the full Mullvad hostname (e.g., us-sea-wg-403.relays.mullvad.net), which is stripped to the short server ID. If DNS fails, it falls back to showing the raw IP.

No API calls. No external dependencies. Just host and a string split.

💬 gurk: 0.9.3 → 0.10.1

Twenty-one commits. The highlights:

Security:

Fix potential segfault on exit (#567)

Fixes:

App not starting with terminal error (#555)
Selected channel not bubbled up (#561)
Parse binary fields in Quote (#553)
Date line off by 1 message (#552)
Typing indicators expire after 10 seconds (#538)
Don’t clear unread messages when navigating (#534)

Performance:

Windowed message storage API (#554)

Features:

Tab to autocomplete emoji (#558)
Replace text with emoji while typing (#549)
XDG, env var, CLI support for config/data paths (#523)

The build script now pins to v0.10.1 by default. The notify-rust patch (SIGSEGV on OpenBSD) applies cleanly with a 162-line offset.

🧾 Files Changed

File	Change
`source/wireguard/wireguard.go`	`GetServerName()` extracts endpoint
	IP from wg0.conf, reverse-DNS resolves
	it, returns short server ID. `Start()`
	and `Stop()` show server in notification.
`source/commands/commands.go`	`--wireguard-notify` includes server
	name in polybar click notification.
`scripts/gurk.sh`	Pinned to v0.10.1 by default.
`scripts/gurk-patch.diff`	Regenerated with correct line numbers
	for v0.10.1.
`config/bin/gurk`	Updated binary (v0.10.1).

🗣️ Final Words

“The VPN was a black box. You turned it on and trusted it. The machine knew where it was going — it just never told you. Now it does. One reverse DNS lookup. One line of text. The tunnel is no longer anonymous to its owner. The Turing Police would call it ‘user-facing endpoint transparency.’ We call it the machine finally telling you which server it’s talking to. Also, gurk has emoji autocomplete now. The Turing Police have no comment on that.” — The OpenRiot Crew, v7.9.57