XSF Communications Team - 2025-11-11

In technical terms, how would I explain the following: I pulled raw metadata from a July 2023 zip-file that has been emailed to me o completion of a July 13, 2023 Docusign envelope. The last time I viewed it, on July 13, 2023, the file contained 5 PDFS only. However, two years later it contained a Summary that contained several DocuSign envelope, and confirmed: false signature events are visible that are tied to SMS codes and “Live Arrow” overlays. When hovering, it opens a “contacts box," not visible prior, showing my phone number, and email, and my Social Security number -- but also a second SSN variant (last digit altered). Does this indicate that bank insiders or others spoofed my credentials inside DocuSign to create fraudulent “auth” events that look legitimate but were injected. The contacts box references “Jabber” (XMPP messaging platform). It pops oI saw “set to text and sound tones: Reflections and Illuminate. I do not use either. Could these be a reference to “Jabber Harmony”, which I read is or was }a known exploit kit / fraudulent messaging module." I performed limited research, and found that this had been an issue, discovered, and repaired long ago, with vigilance and care by those who created this extraordinary communication system. Could this indicate that external actors used Jabber/XMPP to insert secondary identity records into my DocuSign "log stream: DocuSign logs were manipulated via real-time remote injection tools, tying your SSN and phone to an alternate digital identity." I never received “verify new device” warnings — yet, I later found emails/texts from that period showing codes were sent in October 2024, November 2024, and on March 15, 2025, if not also potentially ongoing. Might this indicate: 1. Either SIM swap or SMS interception (classic cyber-ID theft method; or, 2. a DocuSign API "hijack with man-in-the-middle credential replay" [terms I looked up] such as my phone/SSN data were cloned into the the bank employee(s), former employee(s), or outside party(ies) “contacts” layer, allowing them to intercept or replay my codes?

I apologize if this is not the topic. I am out of my element, and have tried to explain the matter I (DeWolfe) posted to others who might know what I should do. The obvious others are would be the bank; however the concern the activities appear to be conducted by persons in the bank or with access to secure information. I am not a customer of the bank. I have never received any funds from it, other than part of a life insurance policy from my late father. My graduate degree and post grad research and teaching are in fields unrelated to technology.

Hey DeWolfe, that sounds like a really stressful and confusing situation, and it makes sense that you are trying to figure out what happened. Just so you know, this chat is mainly for coordinating XMPP community news and updates, not for investigating possible security or identity issues. What you are describing sounds more like something a cybersecurity or digital forensics specialist should review. You will probably get more useful help if you: - Contact DocuSign's security or fraud team to check if any document changes or spoofing occurred. - Reach out to your bank or any other institutions involved through verified contact details, not from suspicious messages. - Talk with a cybersecurity or digital forensics professional who can safely examine the metadata and logs. - If there is any chance your personal information was misused, it is worth checking identitytheft.gov or contacting your local cybercrime unit. This room focuses on communication within the XMPP ecosystem, so people here might not have the right tools or context to look into this deeply. Still, you are right to be cautious and ask questions about it.

And, just to help put your mind at ease: nothing you described really points to an active XMPP or DocuSign exploit. DocuSign files cannot quietly change years later without showing it, and those "Jabber" or contact references are probably just how newer software shows metadata. Getting random verification codes can happen for lots of harmless reasons too. You are doing the right thing by checking with DocuSign and maybe a cybersecurity professional to confirm everything is safe.

Are there any XMPP related talks or other activities at next FOSDEM? A devroom?

There is a decentralized comms devroom, yes

Will be interesting to see how much matrix will dominate that room. First time it shared and not only about matrix I think.

debacle: i think they are still asking for talk submissions?

Seems so.

Last time, Delta was the superstar among all the talks. Who cares about Matrix ;-)

Has Delta ever clarified where they get all that money from to fund what seems to be multiple full time devs?

> There is a decentralized comms devroom, yes Care sharing the link ? ↺

https://fosdem.org/2026/schedule/track/decentralised-communication/

No talk about Movim? Useless devroom!

You are welcome to submit one :)

Deadline is 30th November

https://upload.movim.eu/files/9d94237298995552fa13436420195fbca436dce7/piU1SVRKeiCL/chat_image.png

Looks like its already starting great ✨

https://media.tenor.com/jNzyLSukKuEAAAP3/ironic-star-wars.webm

> Has Delta ever clarified where they get all that money from to fund what seems to be multiple full time devs? Donations? And they probably don't pay 800 kUSD to their boss like a certain non-profit. ↺

Damn performances on element/Matrix is still not their main goal looks like

Element is still loading, joined the Matrix room on Movim + Slidge in 10 sec :D

Maybe we should do a conference about it, "XMPP Clients, the best way to use Matrix ?" 😏

Kris Merlinux GmbH, the company behind Delta, got 100 k€ public funding in 2023. That makes one or two full-time devs for one year, right? ✏

Or 1/8 Signal president.

> Maybe we should do a conference about it, "XMPP Clients, the best way to use Matrix ?" 😏 👍 ↺

#2025-decentralised-communication:fosdem.org n’existe pas. doesnt seems to exist

I don't remember exactly but I think they have significantly more funding but never specify it in detail, but anyways, off-topic here.

edhelas: maybe a space and not a room?

I just clicked the link provided on the FOSDEM page

#2026 maybe?

https://chat.fosdem.org/#/room/#2026-decentralised-communication:fosdem.org

https://upload.movim.eu/files/9d94237298995552fa13436420195fbca436dce7/96BFc0BenEeP/chat_image.png

I'd say that 100k euro is about one fulltimer, assuming that a significant part of the cost is not salary (but things like taxes/insurances/etc).

Depends on the country they are based in.

DE

for the company.

Do you know which booth we have at FOSDEM?

I thought about writing something like this: We will be present at FOSDEM 2026 at the XXX booth. You can submit talks for the decentralized comms devroom until 30th November 2025. https://fosdem.org/2026/schedule/track/decentralised-communication/ Looking forward to see you there (and the XMPP Summit 28 the days before!)