BLACKSEC PLATFORM UPDATE LOG 2026 New Features • Security Patches • Forum Improvements • Roadmap 2026-2027
ADMIN UPDATE:This thread tracks all updates, changes, and planned improvements to the BlackSec platform. Check here before asking "when will X feature be added?" — the answer is probably here.
We push updates every 2-4 weeks depending on what needs fixing. Major version bumps happen when we add significant features or overhaul existing systems.
RECENT UPDATES
New Features:- Dark mode v2 — Completely redesigned dark theme with better contrast, less eye strain, and customizable accent colors
- Thread tagging system — Authors can now tag threads with up to 5 tags for better search/filtering
- PGP key integration — Users can now store a PGP public key on their profile for encrypted PMs
- Quick reply — Press Ctrl+Enter to submit replies without clicking the button
- Attachment improvements — 10MB max per file, preview inline for images
Bug Fixes:- Fixed: Notification dropdown not showing on mobile devices
- Fixed: BBCode tables rendering incorrectly in some browsers
- Fixed: User search returning incomplete results
- Fixed: Session timeout not extending on activity
- Fixed: Email notifications going to spam folders
Security Patches:- Patched XSS vector in URL previews
- Updated password hashing algorithm to bcrypt (cost factor 12)
- Added rate limiting to login attempts (5 per minute per IP)
- Fixed a potential CSRF vulnerability in profile settings
- Updated 2FA library to latest version
New Features:- New
BBCode tag — Hide content behind a click-to-reveal block
[*]Thread bookmarking — Save threads to read later (up to 100 bookmarks)
[*]Improved search index — Now searches thread content in addition to titles
[*]Reputation system v1 — Upvote/downvote on posts (not visible to others yet, testing phase)
[*]Email verification optional — Users can skip verification but lose PM privileges until verified
Bug Fixes:- Fixed: Image attachments not displaying in gallery view
- Fixed: BBcode
Code:
blocks not copying correctly on mobile [*]Fixed: User online status showing incorrectly [*]Fixed: Password reset emails not sending in some cases [*]Fixed: Forum statistics not updating for 24 hours [/LIST] [SIZE=4][COLOR=#ffd700][B]🛡️ Security:[/B][/COLOR][/SIZE] [LIST] [*]Updated Let's Encrypt SSL certificates [*]Added Content-Security-Policy headers [*]Hardened session management [*]Removed PHP version from headers (information disclosure fix) [/LIST] [/SPOILER] [SPOILER="v2.4.1 — June 30, 2026"] [SIZE=4][COLOR=#00ff00][B]🆕 New Features:[/B][/COLOR][/SIZE] [LIST] [*]Marketplace escrow system — Automated escrow for high-value transactions [*]Vendor application portal — Dedicated page for vendor applications [*]Dispute resolution center — New section for handling transaction disputes [*]Escrow fee: 2% of transaction value (paid by seller) [*]Multi-currency wallet integration (BTC + XMR) [/LIST] [SIZE=4][COLOR=#ff4444][B]🔧 Bug Fixes:[/B][/COLOR][/SIZE] [LIST] [*]Fixed: PM notification badge not clearing after reading [*]Fixed: Thread pagination breaking on page 50+ [*]Fixed: Unicode characters in usernames causing profile errors [*]Fixed: Mobile menu not closing on navigation [*]Fixed: Date format inconsistencies across timezones [/LIST] [SIZE=4][COLOR=#ffd700][B]🛡️ Security:[/B][/COLOR][/SIZE] [LIST] [*]Patched potential SQL injection in search function [*]Added additional input sanitization for all user-submitted content [*]Updated PHP version to 8.2.12 [*]Hardened MariaDB configuration [/LIST] [/SPOILER] [HR][/HR] [COLOR=#ff6b6b][SIZE=5][B]CURRENT FEATURES OVERVIEW[/B][/SIZE][/COLOR] [SIZE=4][B]Forum Features:[/B][/SIZE] [TABLE] [TR] [TD][B]Feature[/B][/TD] [TD][B]Status[/B][/TD] [TD][B]Notes[/B][/TD] [/TR] [TR] [TD]Dark mode[/TD] [TD]✓ Active[/TD] [TD]Version 2 with customizable accent colors[/TD] [/TR] [TR] [TD]Responsive design[/TD] [TD]✓ Active[/TD] [TD]Desktop + mobile optimized[/TD] [/TR] [TR] [TD]BBCode editor[/TD] [TD]✓ Active[/TD] [TD]Full toolbar + raw editing[/TD] [/TR] [TR] [TD]Thread tagging[/TD] [TD]✓ Active[/TD] [TD]Up to 5 tags per thread[/TD] [/TR] [TR] [TD]Bookmarks[/TD] [TD]✓ Active[/TD] [TD]Unlimited bookmarks[/TD] [/TR] [TR] [TD]Reputation system[/TD] [TD]⚠ Beta[/TD] [TD]Testing phase, feedback needed[/TD] [/TR] [TR] [TD]PGP integration[/TD] [TD]✓ Active[/TD] [TD]Key stored in profile[/TD] [/TR] [TR] [TD]Attachment upload[/TD] [TD]✓ Active[/TD] [TD]10MB max, inline preview[/TD] [/TR] [/TABLE] [SIZE=4][B]Marketplace Features:[/B][/SIZE] [TABLE] [TR] [TD][B]Feature[/B][/TD] [TD][B]Status[/B][/TD] [TD][B]Notes[/B][/TD] [/TR] [TR] [TD]Buyer protection[/TD] [TD]✓ Active[/TD] [TD]Escrow for orders over $200[/TD] [/TR] [TR] [TD]Vendor verification[/TD] [TD]✓ Active[/TD] [TD]Application-based[/TD] [/TR] [TR] [TD]Dispute center[/TD] [TD]✓ Active[/TD] [TD]Staff-mediated resolution[/TD] [/TR] [TR] [TD]Auto-delivery[/TD] [TD]⚠ Beta[/TD] [TD]Digital goods only[/TD] [/TR] [TR] [TD]Multi-currency[/TD] [TD]✓ Active[/TD] [TD]BTC + XMR[/TD] [/TR] [TR] [TD]Vendor rating[/TD] [TD]⚠ Planned[/TD] [TD]Q4 2026[/TD] [/TR] [/TABLE] [HR][/HR] [COLOR=#ff6b6b][SIZE=5][B]PLATFORM SECURITY OVERVIEW[/B][/SIZE][/COLOR] [SIZE=4][B]Infrastructure:[/B][/SIZE] [CODE]Server Location: Offshore (multiple jurisdictions) DDoS Protection: Cloudflare Enterprise + custom WAF SSL/TLS: Let's Encrypt (auto-renewing), TLS 1.3 only Database: MariaDB 10.4.32 with encrypted backups PHP: 8.2.12 with all security patches Backup Schedule: Daily (encrypted, off-site) Monitoring: 24/7 uptime + intrusion detection Log Retention: 30 days (then anonymized) Admin Access: PGP-signed challenge + 2FA
User Data Protection:
- Passwords: bcrypt (cost factor 12) — no plaintext storage ever
- IP addresses: Anonymized in database after 30 days
- Private messages: Encrypted in database (AES-256-GCM)
- Session data: Signed + encrypted + tied to user agent
- Email addresses: Stored as SHA-256 hash for Gravatar, plaintext for notifications (PGP optional)
- Payment data: Not stored on our servers (escrow uses third-party API)
- 2FA: TOTP-based, compatible with any standard authenticator app
ROADMAP 2026-2027
Q3 2026 (July-September):
- Auto-delivery system v1 — Digital product vendors can set up automatic delivery upon payment confirmation
- Improved search — Full-text search with filters (by node, by date, by user)
- User reputation scores — Based on post quality, transaction history, account age
- Mobile app (Alpha) — Wrapper version for iOS/Android, push notifications
- API endpoints v1 — For automated vendor tools and integrations
Q4 2026 (October-December):
- Marketplace v2 — Full e-commerce integration with cart, checkout, auto-delivery
- Cryptocurrency payment gateway — Direct BTC/XMR payments without third-party
- User blogs — Members can create blog posts (separate from forum threads)
- Advanced analytics for vendors — Sales data, conversion rates, customer insights
- Escrow v2 — Multi-signature Bitcoin escrow (no third-party trust needed)
Q1 2027 (January-March):
- Integrated encrypted messenger — On-platform, E2E encrypted, auto-deleting messages
- Reputation-based marketplace sorting — Trusted vendors appear higher in search
- Role-based permissions overhaul — More granular user group permissions
- API documentation — Public documentation for developers
- Forum performance optimization — Page load time target: under 500ms
Q2 2027 (April-June):
- Mobile app (Beta) — Native apps for iOS and Android
- Real-time notifications — WebSocket-based instant notifications
- Multi-language support — Russian, Spanish, French, Arabic, Chinese
- Darknet .onion mirror — Tor hidden service for anonymous access
- Community voting on features — Users vote on what gets built next
KNOWN ISSUES (BEING WORKED ON)
- Search index needs rebuilding — some older threads not appearing in results
- Mobile push notifications not working on iOS
- Image upload sometimes fails for large files (>5MB)
- Forum statistics page loads slowly with large datasets
- Some users reporting 502 errors during peak hours (being addressed with server upgrade)
- BBCode table columns not aligning in mobile view
- Email delivery to ProtonMail sometimes delayed by 30+ minutes
HOW TO REPORT BUGS
- Check the "Bugs & Suggestions" section to see if it's already been reported
- If not, create a new thread with: device, browser, steps to reproduce, screenshot if applicable
- Tag with [BUG] prefix
- Wait for staff response (typically within 24 hours)
- Critical security vulnerabilities: PM an admin or email blacksec@protonmail.com with PGP
Responsible Disclosure: If you find a security vulnerability, report it privately. Public disclosure of unpatched vulnerabilities will result in a ban.
FEATURE REQUESTS
We welcome feature suggestions. The most requested features get prioritized. To submit a request:
- Post in "Bugs & Suggestions" with [FEATURE] prefix
- Explain what you want, why it's useful, and how it should work
- Upvote existing feature requests rather than creating duplicates
- Staff will tag with [PLANNED], [UNDER REVIEW], or [DECLINED] status
Currently Most Requested Features:
- Dark mode accent color customization (DONE in v2.4.3)
- Encrypted private messages (planned Q1 2027)
- Tor/.onion mirror (planned Q2 2027)
- Mobile app (alpha Q3 2026, beta Q2 2027)
- Reputation system (beta, planned full release Q3 2026)
- Thread subscriptions with instant notifications
- Advanced user search (by registration date, last active, post count)
- BTC transactions via Lightning Network
- Integration with external escrow services
- User-created sub-forums
STAY TUNED FOR MORE UPDATES
This thread is updated with every platform release.
Subscribe to be notified of changes. Questions? Post in Bugs & Suggestions.