XSF Communications Team - 2024-10-04

Hi all, any feedback on the newsletter?

https://github.com/xsf/xmpp.org/pull/1439

Hi MattJ, do you have the pdf with client compability you created for the Fosdem the recent years again?

Yeah, I shared it in the past, but I'm sure I can find it again

Just for a quick heads-up: it is not yet time for translation, is it? Because the main PR isn't merged.

> Just for a quick heads-up: it is not yet time for translation, is it? Because the main PR isn't merged. hey, no, I recommend to wait for merging ↺

I will do this now, as I wont have time the next days

> Hey gnemmi, > > you work is really apprecitated and you are doing it perfectly fine! > > Just please dont exhaust yourself over it 👀 Thank you very much for your kind words! I really appreciate it! 🤗 ↺

emus, and a special thanks for caring!. You actually care! And that's something I don't get to see everyday .. if ever ..

gnemmi: you checked the chat for submissions right? ✏

😌 sure I do gnemmi

gnemmi: ?

But don't worry about it. Whatever work I can help with for the XSF and the Newsletter makes me happy! It's life and everyday work that has me exhausted beyond the limit. Making a living over here ain't no joke .. and is not getting any easier no matter how much I stress myself.

gnemmi: I know, but still I dont want to drive stress on anyonr with this

It may seem insane .. but after all is said and done: helping over here is the rewarding part 🤗

> Dear all, > > thanks to gnemmis work I can call for the review phase! > > https://github.com/xsf/xmpp.org/pull/1439 Oh, my, that's too much! Thank you everybody for doing the work you do! I just collect the news and put them together on the pad .. that's it ↺

> It may seem insane .. but after all is said and done: helping over here is the rewarding part 🤗 ❤️ ↺

>> Dear all, >> >> thanks to gnemmis work I can call for the review phase! >> >> https://github.com/xsf/xmpp.org/pull/1439 > Oh, my, that's too much! Thank you everybody for doing the work you do! I just collect the news and put them together on the pad .. that's it Its a real great help! ↺

I have merged the PR, now waiting for publishing

Still: the recognition is highly appreciated 🤗❤️🤗

> gnemmi: you checked the chat for submissions right? I sure did. Most of them where mine .. and as soon as I did everyone of them, I added them to the pad and to a local file on my computer ( keeping a parallel newsletter so to make sure I didn't miss anything ) 🤗 ↺

emus, one thing I notice:

- [nbxmpp 5.0.4](https://dev.gajim.org/gajim/python-nbxmpp/-/releases/5.0.4) comes with a fix for MUC passwords and futher bug fixes.

should that be

- [python-nbxmpp 5.0.4](https://dev.gajim.org/gajim/python-nbxmpp/-/releases/5.0.4) comes with a fix for MUC passwords and futher bug fixes.

?

https://dev.gajim.org/gajim/python-nbxmpp/-/archive/5.0.4/python-nbxmpp-5.0.4.zip

In re XEP's: I triple check the mailing list archives and I don't think I missed any one of them and all the links seem to point to the right URI

gnemmi: you can use either. It's more explicit if you preprend python-

cal0pteryx, thank you! I prefer whatever is right for you! All in all, the link points to the right direction 😊

>> gnemmi: you checked the chat for submissions right? > I sure did. Most of them where mine .. and as soon as I did everyone of them, I added them to the pad and to a local file on my computer ( keeping a parallel newsletter so to make sure I didn't miss anything ) 🤗 ❤️ ↺

> - [python-nbxmpp 5.0.4](https://dev.gajim.org/gajim/python-nbxmpp/-/releases/5.0.4) comes with a fix for MUC passwords and futher bug fixes. feel free to push another PR or just leave it ↺

Aaaaaannnd .. published!

https://xmpp.org/2024/10/the-xmpp-newsletter-september-2024/

Congratulations everyone! 🥳🎉🍾🥂

Meanwhile, I made a back up of September's pad, cleaned it up, and started adding news for November's Newsletter 😁

Two articles so far:

- [Ignite Realtime Community](https://www.igniterealtime.org/news/): [XMPP: The Protocol for Open, Extensible Instant Messaging](https://discourse.igniterealtime.org/t/xmpp-the-protocol-for-open-extensible-instant-messaging/94748). A solid introduction introduction XMPP, goals, core concepts and goals and features. - [ProcessOne: Matrix and XMPP: Thoughts on Improving Messaging Protocols – Part 1](https://www.process-one.net/blog/matrix-and-xmpp-thoughts-on-improving-messaging-protocols-part-1/)

s/introduction XMPP/introduction to XMPP/

"introduction to the XMPP protocol"

there

🎉👍

You guys, I've been meaning to ask you ... do you think this MUC would be a good example for the use of “Hats” (XEP-0317) ?

A few days ago this paper was published https://arxiv.org/pdf/2405.09662 ( related git repo https://github.com/SecPriv/IoTBackends ) it analyzes security on MQTT, COAP and XMPP for IoT

looks like it was a few weeks ago actually, but got it into my radar a few days ago ✏

TheCoffeMaker, oh yeah! I read that one! Pretty good actually .. I didn't know if it was suitable for the Newsletter. It goes without saying that I caught me off guard because its dated September 30- October 2 🫠

TheCoffeMaker, thanks for bringing it in!! 🤗

Fyi, we've got a Papers section https://xmpp.org/about/publications/#scientific-papers-and-other-publications

cal0pteryx, excellent! I didn't know about that!

Thanks for the heads up!

> TheCoffeMaker, thanks for bringing it in!! 🤗 yw ↺

We could just publish it right aways. The paper is from September and it was released under the CC BY 4.0 license

his work is licensed under a Creative Commons Attribution 4.0 International License.: https://creativecommons.org/licenses/by/4.0/legalcode

https://github.com/xsf/xmpp.org/blob/master/data/papers.json

cal0pteryx, you rule 👍

> A few days ago this paper was published https://arxiv.org/pdf/2405.09662 ( related git repo https://github.com/SecPriv/IoTBackends ) it analyzes security on MQTT, COAP and XMPP for IoT What were the results? ↺

Among other issues, we find that 9.44% backends expose information, 30.38% CoAP-speaking backends are vulnerable to denial of service attacks, and 99.84% of MQTT- and XMPP-speaking backends use insecure transport protocols (only 0.16% adopt TLS, of which 70.93% adopt a vulnerable version). 🥲

🥲

idk if I can deal with this facts .. I feel too "vulnerable" now 🥲

the test is done on vulnerable servers (listed on shodan) what is worth is that XMPP is the one that has most secure features and if u run an up to date server well configured u are covered thing that doesn't happen on COAP.. MQTT in the other had, if it is also well configured u can get a secure broker

if I get it right

gnemmi Thank you for your effort and support. Here is the Italian translation of the XMPP monthly newsletter (September): https://notes.nicfab.eu/it/posts/news_xmpp/24/news-xmpp-2024-09/ I am going to start a PR

🎉

> gnemmi Thank you for your effort and support. > Here is the Italian translation of the XMPP monthly newsletter (September): https://notes.nicfab.eu/it/posts/news_xmpp/24/news-xmpp-2024-09/ > I am going to start a PR Thank you for the great work you guys are doing! It's a pleasure for me ( and it honestly makes me happy ) to be able to contribute my work and ( hopefullly ) help the XSF break new frontiers, reach a wider audience and spread the word about all the good that XMPP brings into the table ! 🤗❤️🤗 ↺