Friday, November 30, 2018
commteam@muc.xmpp.org
November
Mon Tue Wed Thu Fri Sat Sun
      1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
             
Submissions for the newsletter: https://wiki.xmpp.org/web/News_and_Articles_for_the_next_XMPP_Newsletter

[00:16:31] *** Neustradamus shows as "away"
[00:16:33] *** Neustradamus has left the room
[00:21:35] *** Link Mauve has left the room
[00:26:54] *** Link Mauve has joined the room
[01:08:03] *** arnaudj has left the room
[01:10:04] *** Neustradamus has left the room
[01:15:25] *** arnaudj has joined the room
[01:30:27] *** Neustradamus has joined the room
[01:57:10] *** jc has left the room
[02:03:10] *** vanitasvitae has left the room
[02:03:11] *** vanitasvitae has joined the room
[07:32:53] *** vanitasvitae has left the room
[07:32:55] *** vanitasvitae has joined the room
[07:38:47] *** arnaudj has left the room
[07:38:51] *** arnaudj has joined the room
[07:45:31] *** jc has joined the room
[08:16:48] *** vanitasvitae has left the room
[08:16:52] *** vanitasvitae has joined the room
[08:20:51] *** vanitasvitae has left the room
[08:20:53] *** vanitasvitae has joined the room
[08:38:24] *** vanitasvitae has left the room
[08:38:31] *** vanitasvitae has joined the room
[08:39:56] *** vanitasvitae has left the room
[08:39:59] *** vanitasvitae has joined the room
[08:55:02] *** arnaudj has left the room
[09:00:28] *** arnaudj has joined the room
[09:14:47] *** ArnaudJ has joined the room
[09:14:57] *** ArnaudJ shows as "xa" and his status message is " (Non disponible car inactif depuis plus de 15 min)"
[09:15:01] *** ArnaudJ shows as "online"
[09:33:46] *** 404.city has joined the room
[09:39:13] *** vanitasvitae has left the room
[09:39:16] *** vanitasvitae has joined the room
[09:43:02] *** 404.city has left the room
[09:45:12] *** vanitasvitae has left the room
[09:45:15] *** vanitasvitae has joined the room
[09:57:53] *** ArnaudJ shows as "away" and his status message is " (Absent(e) car inactif depuis plus de 5 min)"
[10:07:53] *** ArnaudJ shows as "xa" and his status message is " (Non disponible car inactif depuis plus de 15 min)"
[10:24:22] *** ArnaudJ shows as "online"
[10:29:02] *** ArnaudJ has left the room
[10:29:38] *** arnaudj shows as "online"
[10:32:20] *** winfried has joined the room
[10:36:24] *** vanitasvitae has left the room
[10:36:25] *** vanitasvitae has joined the room
[10:53:20] *** jc shows as "online"
[10:54:42] <jc> arnaudj I'm writing the newsletter currently, will ping you once I'm done, if you'd like to translate
[10:55:26] <arnaudj> hi jc‎ !
[10:55:43] <arnaudj> thank you for pinging me!
[10:55:52] <jc> Sure! 🙂
[10:58:17] <arnaudj> what is the estimated date of publication?
[10:58:50] <jc> Today, this afternoon
[10:58:57] <jc> We always publish on the last Friday of the month
[10:59:06] <jc> "always' being interpreted loosely
[10:59:14] <arnaudj> OK :-)
[10:59:26] <jc> Sorry that you don't get much time
[10:59:35] <jc> Ideally we should write the newsletter throughout the month
[10:59:45] <arnaudj> no problem
[10:59:51] <jc> That would also make it easier for you and require less crunch time at the end of the month
[10:59:59] <jc> but so far I haven't been able to get into the habit of doing it like that
[11:00:08] <jc> By nature I procrastinate until the last minute
[11:02:14] <SouL> What I wanted to add to this newsletter
[11:02:23] <SouL> was to mention the section of translated newsletters
[11:02:34] <SouL> I also wanted to translate some, so we would have more content
[11:02:40] <SouL> apart from French
[11:06:00] <arnaudj> I've added a reminder in my calendar, to put some time aside every last Friday
[11:08:24] <jc> cool
[11:25:48] <jc> Would you guys describe Movim as an XMPP client?
[11:25:56] <jc> Or should it be mentioned under "Other software"? 🙂
[11:26:11] <jc> I'm adding this month's releases
[11:37:54] *** arnaudj shows as "away" and his status message is " (Absent(e) car inactif depuis plus de 5 min)"
[11:39:38] *** arnaudj shows as "online"
[11:39:56] *** vanitasvitae has left the room
[11:40:03] *** vanitasvitae has joined the room
[11:42:43] *** vanitasvitae has left the room
[11:42:44] *** vanitasvitae has joined the room
[11:44:13] <arnaudj> jc‎: I asked edhelas‎
[11:44:36] <jc> tx
[11:45:40] <jc> This has been a good month, lots of stuff happening
[11:48:04] <arnaudj> he said "other" is perhaps the best choice
[11:49:14] <arnaudj> since it's a bit more than a client
[11:51:58] <jc> ok thanks, I thought so
[12:02:44] *** arnaudj shows as "away" and his status message is " (Absent(e) car inactif depuis plus de 5 min)"
[12:12:44] *** arnaudj shows as "xa" and his status message is " (Non disponible car inactif depuis plus de 15 min)"
[12:24:01] <jc> arnaudj, SouL: Here's the latest newsletter https://github.com/xsf/xmpp.org/blob/newsletter-2018-11-30/content/posts/newsletter/2018-11-30.md
[12:24:28] <jc> I would appreciate a proofread. I'll take a break and then read it again myself
[12:25:19] *** MattJ shows as "online"
[12:26:44] <SouL> THe Monal..
[12:26:48] <SouL> Just that capital H
[12:38:47] <MattJ> jc, the link in the Monal part to "empty state screens" appears to have the incorrect URL
[12:39:02] <MattJ> It links to feeds.opkode and prompts for auth
[12:52:17] <jc> Thanks SouL and MattJ. Fixed
[12:52:50] <SouL> Sorry for not better proofread, I'm ina meeting I can't escape :(
[12:53:31] <jc> no problem
[13:04:35] *** arnaudj has left the room
[13:04:38] *** arnaudj shows as "online"
[13:13:59] *** arnaudj shows as "online"
[13:18:59] *** arnaudj shows as "away" and his status message is " (Absent(e) car inactif depuis plus de 5 min)"
[13:19:13] *** arnaudj shows as "online"
[13:29:16] <jc> Guus is worried about this section: https://github.com/xsf/xmpp.org/pull/484/files#diff-45ce3b70f855ee8884f189d7b4742fa6R28
[13:29:49] <jc> That it might look like XMPP is insecure, even though their server might have been hacked in all kinds of ways unrelated to XMPP
[13:30:02] <jc> Any suggestions on how to change the wording?
[13:30:10] <jc> I personally think it's kind of OK the way it is
[13:32:43] <vanitasvitae> jc: are you sure iron chat is a conversations fork?
[13:32:51] <vanitasvitae> It doesn't look like that at all
[13:38:33] <jc> I read it in twitter
[13:46:18] <jc> I can remove that part
[13:48:27] <MattJ> jc, the problem was users not verifying fingerprints, at the end of the day
[13:48:42] <jc> MattJ: Yes, that's mentioned in the paragraph
[13:48:59] <jc> That and the fact that their server (the OS) was somehow compromised
[13:49:00] <MattJ> Every end-to-end encryption method is vulnerable to this (you need to identify the other end somehow)
[13:49:12] <MattJ> No, I don't think that covers it
[13:49:35] <arnaudj> I read the newsletter and did not find any error
[13:49:42] <MattJ> OTR and OMEMO are precisely valuable because they can remain secure in the event of server compromise
[13:49:57] <jc> In theory 🙂
[13:49:58] <vanitasvitae> Wasn't there an essay by a gchq guy recently who proposed to make mitm the new standard way of intercepting comms?
[13:50:09] <jc> But as was shown here... users don't verify so they get compromised
[13:50:12] <MattJ> jc, in practice, if users verify fingerprints
[13:50:31] <jc> I think the fact that the server was compromised is relevant though
[13:50:43] <jc> Because it's a necessary (but not sufficient) first step
[13:50:47] <MattJ> In practice, they don't. And I think this is the point that should be called out in the newsletter, the server compromise is not the weak point
[13:51:01] <jc> Ok but did you read the paragraph? I do mention that they didn't verify
[13:51:07] <MattJ> As far as preventing any perception that XMPP is insecure
[13:51:19] <jc> I can update it further
[13:51:24] <jc> I'm being called for lunch now though 🙂
[13:51:41] <MattJ> Oh, I didn't see that when I read it earlier
[13:56:26] <MattJ> I'll work an an alternative proposal for that paragraph
[13:57:58] <MattJ> Another source online says IronChat was based on Xabber
[13:58:13] <MattJ> iirc the Xabber author confirmed this in xsf@
[14:01:32] *** arnaudj shows as "xa" and his status message is " (Non disponible car inactif depuis plus de 15 min)"
[14:01:34] *** arnaudj shows as "online"
[14:05:07] *** vanitasvitae has left the room
[14:05:12] *** vanitasvitae has joined the room
[14:13:58] *** arnaudj shows as "away" and his status message is " (Absent(e) car inactif depuis plus de 5 min)"
[14:15:29] <pep.> "jc> I think the fact that the server was compromised is relevant though" < I think it's very important to specify that, if this gets in the newsletter. Not verifying fingerprints is one thing and we know users don't care anyway but still want e2ee [blah blah], but if the server wasn't under an $evil party in the first place, they would have had to break TLS. (or use the law)
[14:15:51] <pep.> "jc> I think the fact that the server was compromised is relevant though" < I think it's very important to specify that, if this gets in the newsletter. Not verifying fingerprints is one thing and we know users don't care anyway but still want e2ee [blah blah], but if the server wasn't maintained by an $evil party in the first place, they would have had to break TLS. (or use the law)
[14:16:40] <pep.> As I understand it the police (or gouvernment entity) controlled the server right?
[14:18:03] *** pep. has left the room
[14:18:35] <jc> pep. yes
[14:18:58] *** arnaudj shows as "online"
[14:21:20] *** pep. shows as "online"
[14:34:18] *** arnaudj shows as "xa" and his status message is " (Non disponible car inactif depuis plus de 15 min)"
[14:34:26] *** arnaudj shows as "online"
[14:40:24] *** vanitasvitae has left the room
[14:40:27] *** vanitasvitae has joined the room
[15:09:40] *** MattJ shows as "away"
[15:09:46] *** Guus has left the room
[15:09:46] *** Guus has joined the room
[15:13:23] *** MattJ shows as "online"
[15:21:41] *** vanitasvitae has left the room
[15:21:43] *** vanitasvitae has joined the room
[15:47:14] *** jc has left the room
[16:09:53] *** jc shows as "online"
[16:11:22] *** MattJ shows as "away"
[16:11:46] *** jc has left the room
[16:38:27] *** jc shows as "online"
[16:40:18] *** jc has left the room
[16:49:28] *** arnaudj has left the room
[16:54:51] *** jc shows as "online"
[16:56:42] *** jc has left the room
[16:59:50] *** MattJ shows as "online"
[17:08:00] *** jc shows as "online"
[17:09:50] *** jc has left the room
[17:25:57] *** jc shows as "online"
[17:34:14] *** arnaudj has joined the room
[17:34:51] *** arnaudj has left the room
[17:34:56] *** arnaudj has joined the room
[18:05:31] *** jc has left the room
[18:05:36] *** jc shows as "online"
[18:08:20] *** Neustradamus shows as "away"
[18:09:37] *** Neustradamus has left the room
[18:16:28] *** vanitasvitae shows as "online"
[18:27:58] *** Nÿco has left the room
[18:29:45] *** Nÿco has joined the room
[18:31:09] *** Guus has joined the room
[19:13:45] *** Neustradamus shows as "away"
[19:19:09] *** vanitasvitae has left the room
[19:23:37] *** Neustradamus has left the room
[19:29:46] *** vanitasvitae shows as "online"
[19:46:00] *** MattJ shows as "away"
[20:03:06] *** jc shows as "online"
[20:04:53] *** jc shows as "online"
[20:36:41] *** jc has left the room
[20:37:49] *** jc shows as "online"
[20:39:43] *** jc has left the room
[20:41:24] *** arnaudj has left the room
[20:41:28] *** arnaudj has joined the room
[21:05:12] *** jc shows as "online"
[21:07:05] *** jc has left the room
[21:08:58] *** MattJ shows as "online"
[21:19:38] *** Neustradamus has left the room
[21:31:08] *** vanitasvitae has left the room
[21:33:36] *** Neustradamus has joined the room
[21:58:38] *** jc shows as "online"
[22:00:30] *** jc has left the room
[22:03:00] *** MattJ shows as "away"
[22:15:09] *** jc has left the room
[22:15:14] *** jc has joined the room
[23:50:24] *** vanitasvitae shows as "online"
[23:50:28] *** vanitasvitae has left the room
[23:51:28] *** vanitasvitae shows as "online"
[23:52:42] *** vanitasvitae has left the room