XMPP Service Operators - 2018-09-25


  1. jjrh has left
  2. jjrh has left
  3. jjrh has left
  4. jjrh has left
  5. Maranda has left
  6. Maranda has joined
  7. vanitasvitae has left
  8. fp-tester has joined
  9. Maranda has left
  10. Maranda has joined
  11. Maranda has left
  12. jjrh has left
  13. jjrh has left
  14. kmq has left
  15. jjrh has left
  16. jjrh has left
  17. yon has left
  18. Maranda has joined
  19. jjrh has left
  20. jjrh has left
  21. Echo1 has joined
  22. kmq has left
  23. yon has left
  24. jjrh has left
  25. jjrh has left
  26. peter has left
  27. Maranda has left
  28. Maranda has left
  29. Maranda has left
  30. Maranda has left
  31. jjrh has left
  32. jjrh has left
  33. Maranda has left
  34. Maranda has joined
  35. Maranda has left
  36. Maranda has joined
  37. Maranda has left
  38. Maranda has joined
  39. Maranda has left
  40. Maranda has left
  41. yon has left
  42. yon has joined
  43. Maranda SamWhited, erm lol now it works, I'm not sure what shenanigan was it in Conversations.
  44. Maranda https://muc.metronome.im/pastebin/46ab5670-11ef-458e-922f-5520570142a1
  45. Maranda but it fixed itself
  46. SamWhited Maranda: the lengths you gave were correct for SCRAM-SHA-1, maybe you were loading that instead
  47. Maranda SamWhited, hm nope
  48. Maranda SamWhited, and sha1 is 20 bytes if I understood correctly, sha256 is 32
  49. SamWhited 20 is what you said before, I think
  50. Maranda SamWhited, no I said it mixed a 32 bytes signature with 20 bytes proof
  51. Maranda which is what cause the mega massive mayhem that broke XOR and all the rest hehe
  52. Maranda I was about to pull my hair out haha
  53. SamWhited Oh I see, that's *really* bad if that's happening somehow. I'll go double check, are you sure you didn't modify anything in the Java?
  54. SamWhited In Conversations, I mean
  55. Maranda SamWhited, I'm not sure how it happened but it looks like some bug in Conversations.
  56. Maranda Nope stock playstore Conversations
  57. SamWhited What signature in particular did you observe that length on? The client or server one?
  58. Maranda Client
  59. SamWhited The client signature comes directly from the hmac function, and the buffer is sized exactly so I don't see how that could change. Maybe it printed with some padding or something
  60. Maranda Server started tracing when attempting to run XOR to generate the Client Key out the challenge
  61. Maranda (so XOR'ing Signature and decoded Proof)
  62. SamWhited You'll want to account for malformed data on the server anyways, so probably best to just bail out if the lengths aren't what you're expecting
  63. mike has joined
  64. SamWhited How were you getting the length from conversations, a debugger?
  65. Maranda SamWhited, no I added logging on the server then started testing on a lua interpreter :P
  66. Maranda https://github.com/maranda/metronome/blob/master/util/sasl/scram.lua#L215 ---> and that's solved
  67. Maranda XOR function is safed, so if there's a missing byte it'll break loop and abort.
  68. SamWhited What did your logging look like? I'm trying to rule out some sort of uninitialized buffer printing random garbage or something in lua land
  69. Maranda I just added logging in scram.lua with log() and tostring()
  70. Maranda to get values
  71. Maranda and then wen't looking for data in flat files as well
  72. jjrh has left
  73. SamWhited Ah wait, I'm being dumb and debugging the client signature, but it's the proof that you said was the wrong length for SCRAM-SHA-2
  74. jjrh has left
  75. SamWhited Checking the clientProof now
  76. peter has joined
  77. sol has joined
  78. Echo1 has left
  79. Maranda has left
  80. Maranda has left
  81. SamWhited no, this appears right. The proof is setup to be the same sizes as the clientKey which is the same size as the hmac size, so that should be correct
  82. Maranda has joined
  83. SamWhited I'll write some tests and see if I can't reproduce the issue
  84. yon has left
  85. Echo1 has joined
  86. Maranda SamWhited, I'm not sure if it was because of some messing up while I was tinkering with SASL to get it to work on the server, but that shouldn't have happened anyways
  87. Maranda *I think* in any case
  88. SamWhited If it gave bad output after giving bad input that would still potentially be a serious bug
  89. SamWhited Oooh, I have an idea. I wonder if it somehow mixed up the clientKey cache for the SHA-1 and SHA-256 variants. That would be a bad bug, but could cause this behavior.
  90. SamWhited I don't *think* it would be fatal or affect security though, it would just always cause validation to fail. I suppose technically it could let the server fetch scram info from another account, but that's not really a problem
  91. jjrh has left
  92. SamWhited Aha! That's it; thanks for spotting a bug!
  93. Maranda has left
  94. Maranda has left
  95. Echo1 has left
  96. Maranda has joined
  97. Echo1 has joined
  98. jjrh has left
  99. Maranda SamWhited, np yw
  100. Maranda has left
  101. Maranda has left
  102. jjrh has left
  103. jjrh has left
  104. Odin has left
  105. Odin has joined
  106. Echo1 has left
  107. Maranda has left
  108. Maranda has joined
  109. Echo1 has joined
  110. jjrh has left
  111. Maranda has left
  112. Maranda has left
  113. Maranda has left
  114. Neustradamus has left
  115. Maranda has left
  116. Neustradamus has joined
  117. jjrh has left
  118. SamWhited has left
  119. jjrh has left
  120. kmq has joined
  121. kmq has joined
  122. Maranda has left
  123. Maranda has left
  124. jjrh has left
  125. Maranda has left
  126. jjrh has left
  127. Odin has left
  128. Odin has joined
  129. fp-tester has joined
  130. Odin has left
  131. Odin has joined
  132. probably has left
  133. sol has joined
  134. probably has joined
  135. sol has joined
  136. kmq has joined
  137. probably has left
  138. probably has joined
  139. jjrh has left
  140. jjrh has left
  141. probably has left
  142. probably has joined
  143. kmq has joined
  144. jjrh has left
  145. kmq has left
  146. jjrh has left
  147. probably has left
  148. probably has joined
  149. mike has left
  150. mike has joined
  151. jjrh has left
  152. jjrh has left
  153. jjrh has left
  154. alex has left
  155. jjrh has left
  156. kmq has joined
  157. kmq has joined
  158. jjrh has left
  159. kmq has joined
  160. tyler has left
  161. jjrh has left
  162. jjrh has left
  163. peter has left
  164. kmq has joined
  165. kmq has joined
  166. kmq has joined
  167. jjrh has left
  168. jjrh has left
  169. probably has left
  170. probably has joined
  171. jjrh has left
  172. kmq has left
  173. kmq has left
  174. jjrh has left
  175. ibikk has joined
  176. (-: has joined
  177. pod has joined
  178. Neustradamus has left
  179. jjrh has left
  180. qwertz has joined
  181. Neustradamus has joined
  182. kmq has joined
  183. fp-tester has joined
  184. jjrh has left
  185. jjrh has left
  186. fp-tester has joined
  187. kmq has joined
  188. jjrh has left
  189. jjrh has left
  190. sol has joined
  191. kmq has joined
  192. Marzanna has left
  193. jjrh has left
  194. jjrh has left
  195. jjrh has left
  196. jjrh has left
  197. carlos has joined
  198. jjrh has left
  199. marc0s has left
  200. jjrh has left
  201. mimi89999 has left
  202. kmq has joined
  203. lorddavidiii has joined
  204. jjrh has left
  205. jjrh has left
  206. jjrh has left
  207. jjrh has left
  208. SamWhited has left
  209. jjrh has left
  210. jjrh has left
  211. kmq has left
  212. kmq has left
  213. kmq has left
  214. (-: has left
  215. Licaon_Kter has joined
  216. jjrh has left
  217. (-: has joined
  218. jjrh has left
  219. kmq has joined
  220. jjrh has left
  221. kmq has left
  222. qwertz has left
  223. jjrh has left
  224. jjrh has left
  225. kmq has left
  226. kmq has left
  227. kmq has joined
  228. jjrh has left
  229. jjrh has left
  230. alex has joined
  231. jjrh has left
  232. kmq has left
  233. kmq has left
  234. kmq has left
  235. kmq has left
  236. jjrh has left
  237. jjrh has left
  238. madmalkav has joined
  239. valo has joined
  240. valo has joined
  241. probably has left
  242. probably has joined
  243. jjrh has left
  244. lorddavidiii has left
  245. jjrh has left
  246. lorddavidiii has joined
  247. jjrh has left
  248. kmq has left
  249. jjrh has left
  250. jjrh has left
  251. jjrh has left
  252. jjrh has left
  253. jjrh has left
  254. jjrh has left
  255. jjrh has left
  256. Odin has left
  257. Odin has joined
  258. SouL has joined
  259. holger has left
  260. 404.city has joined
  261. jjrh has left
  262. jjrh has left
  263. Neustradamus has left
  264. Neustradamus has joined
  265. jjrh has left
  266. jjrh has left
  267. jjrh has left
  268. kmq has left
  269. mrDoctorWho has left
  270. jjrh has left
  271. jjrh has left
  272. jjrh has left
  273. holger has joined
  274. kmq has joined
  275. kmq has joined
  276. jjrh has left
  277. kmq has left
  278. jjrh has left
  279. holger has left
  280. holger has joined
  281. jjrh has left
  282. jjrh has left
  283. kmq has joined
  284. jjrh has left
  285. jjrh has left
  286. holger has left
  287. holger has joined
  288. jjrh has left
  289. holger has left
  290. vanitasvitae has left
  291. vanitasvitae has left
  292. jjrh has left
  293. jjrh has left
  294. jjrh has left
  295. kmq has joined
  296. kmq has joined
  297. mrDoctorWho has joined
  298. jjrh has left
  299. jjrh has left
  300. mrDoctorWho has left
  301. jjrh has left
  302. holger has joined
  303. jjrh has left
  304. andrey.utkin has joined
  305. Licaon_Kter has left
  306. Licaon_Kter has joined
  307. jjrh has left
  308. jjrh has left
  309. andrey.utkin has joined
  310. equil has left
  311. jjrh has left
  312. Neustradamus has left
  313. Neustradamus has joined
  314. jjrh has left
  315. jjrh has left
  316. jjrh has left
  317. jjrh has left
  318. seantodd has joined
  319. jjrh has left
  320. jjrh has left
  321. ThibG has left
  322. ThibG has joined
  323. jjrh has left
  324. Licaon_Kter has joined
  325. SouL has left
  326. jjrh has left
  327. jjrh has left
  328. jjrh has left
  329. css has joined
  330. madmalkav has left
  331. madmalkav has joined
  332. jjrh has left
  333. jjrh has left
  334. (-: has left
  335. (-: has joined
  336. jjrh has left
  337. jjrh has left
  338. jjrh has left
  339. jjrh has left
  340. equil has left
  341. equil has left
  342. equil has left
  343. ThibG has joined
  344. pod has left
  345. yon has joined
  346. ThibG has joined
  347. jjrh has left
  348. jjrh has left
  349. jjrh has left
  350. peter has joined
  351. peter has left
  352. jjrh has left
  353. jjrh has left
  354. yon has left
  355. yon has left
  356. jere has joined
  357. jjrh has left
  358. jjrh has left
  359. yon has left
  360. jjrh has left
  361. kmq has left
  362. jjrh has left
  363. seantodd has left
  364. Holger has left
  365. valo has left
  366. valo has joined
  367. jjrh has left
  368. jjrh has left
  369. mrDoctorWho has left
  370. mrDoctorWho has left
  371. jjrh has left
  372. jjrh has left
  373. Martin has left
  374. ThibG has left
  375. ThibG has joined
  376. peter has joined
  377. jjrh has left
  378. peter has left
  379. jjrh has left
  380. jjrh has left
  381. ThibG has left
  382. ThibG has joined
  383. jjrh has left
  384. tyler has joined
  385. tyler has joined
  386. pod has left
  387. tyler has joined
  388. jjrh has left
  389. jjrh has left
  390. SamWhited has left
  391. andrey.utkin has joined
  392. SamWhited has joined
  393. marc0s has left
  394. andrey.utkin has joined
  395. jjrh has left
  396. jjrh has left
  397. jjrh has left
  398. mrDoctorWho has left
  399. css has left
  400. holger has left
  401. Maranda ‎[16:55:25] ‎error: not-acceptable ‎[16:55:26] ‎ ha impostato l'argomento a XMPP Operators Room | http://mail.jabber.org/mailman/listinfo/operators
  402. Maranda o.o
  403. Holger has left
  404. Maranda has joined
  405. alex has left
  406. peter has joined
  407. Maranda has left
  408. kmq has left
  409. andrey.utkin has left
  410. holger has joined
  411. lorddavidiii has left
  412. lorddavidiii has joined
  413. andrey.utkin has joined
  414. andrey.utkin has joined
  415. ThibG has joined
  416. ThibG has joined
  417. andrey.utkin has joined
  418. andrey.utkin has joined
  419. UsL has left
  420. ThibG has left
  421. ThibG has joined
  422. SamWhited has left
  423. seantodd has left
  424. seantodd has left
  425. seantodd has left
  426. holger has left
  427. alex has joined
  428. SamWhited has left
  429. jjrh has left
  430. jjrh has left
  431. valo has left
  432. valo has joined
  433. seantodd has left
  434. Licaon_Kter has joined
  435. SamWhited has left
  436. Echo1 has left
  437. Maranda has left
  438. Echo1 has joined
  439. Maranda has joined
  440. SamWhited has left
  441. Maranda has left
  442. marc0s has left
  443. marc0s has joined
  444. (-: has left
  445. jjrh has left
  446. (-: has joined
  447. jjrh has left
  448. Neustradamus has left
  449. Odin has left
  450. Odin has joined
  451. ThibG has left
  452. ThibG has joined
  453. Licaon_Kter has left
  454. Maranda has joined
  455. kmq has left
  456. Martin has joined
  457. ThibG has left
  458. ThibG has joined
  459. mimi89999 has joined
  460. 404.city has left
  461. pod has left
  462. UsL has joined
  463. ibikk has joined
  464. Licaon_Kter has joined
  465. probably has left
  466. probably has joined
  467. ibikk has left
  468. Licaon_Kter has left
  469. (-: has left
  470. SamWhited has left
  471. pod has left
  472. Licaon_Kter has joined
  473. Licaon_Kter has left
  474. probably has left
  475. probably has joined
  476. Neustradamus has left
  477. Neustradamus has joined
  478. pod has left
  479. pod has joined
  480. Marzanna has left
  481. pod has left
  482. probably has left
  483. probably has joined
  484. probably has left
  485. probably has joined
  486. kmq has left
  487. SouL has left
  488. madmalkav has left
  489. vanitasvitae has left
  490. ThibG has left
  491. ThibG has joined
  492. Martin has left
  493. ThibG has left
  494. ThibG has joined
  495. SamWhited has left
  496. ibikk has joined
  497. Licaon_Kter has joined
  498. kmq has joined
  499. fp-tester has joined
  500. andrey.utkin has joined
  501. lorddavidiii has left
  502. jjrh has left
  503. Odin has left
  504. Odin has joined
  505. 404.city has joined
  506. jjrh has left
  507. 404.city has left
  508. tyler has left
  509. jjrh has left
  510. marc0s has left
  511. jjrh has left
  512. kmq has left
  513. vanitasvitae has left
  514. vanitasvitae has joined
  515. vanitasvitae has left
  516. Maranda has left
  517. Maranda has left
  518. Maranda has left
  519. Maranda has left
  520. vanitasvitae has joined
  521. jjrh has left
  522. valo has joined
  523. andrey.utkin has left
  524. kmq has left
  525. jjrh has left
  526. jjrh has left
  527. SamWhited has left
  528. marc0s has joined
  529. fp-tester has joined
  530. kmq has left
  531. jjrh has left
  532. jjrh has left
  533. peter has left
  534. tyler has left
  535. Licaon_Kter has left
  536. Licaon_Kter has joined
  537. jjrh has left
  538. jjrh has left
  539. peter has joined
  540. Echo1 has left
  541. Maranda has left
  542. Maranda has left
  543. Maranda has joined
  544. Echo1 has joined
  545. peter has left
  546. Maranda has left
  547. Maranda has joined