XMPP Council - 2012-09-05

ding?

pong

was it this week we're skipping, or next?

not like there's much to discuss … that I can recall (-:

I think we're meeting to skip :-)

apparently (-:

Did I misremember?

I thought we were skipping until week after next.

Ah, although that's not in the calendar either.

Yes, I do misremember.

So yes, we're meeting now.

"I'm good next week, I'm not the week after."

I don't think we've got anything to discuss.

(-:

nay do I

Jolly good. Shall we go back to what I thought our plan was anyway? :)

that would be to meet next on 09/19?

19th

works for me

Excellent.

I'm completely lost this week anyway

Yes, me too.

On the other hand, I have FMUC working, so yay.

w00t

(And I have further spec updates to do as a consequence)

has there been any discussion with any of the DMUC* proponents?

just curious

I've been chatting with Fippo a bit.

Not spoken to that Peter chap recently.

Other than telling him FMUC's the way forward.

Wayne Franklin?

I'm hoping Trident, or whatever they are now if they changed name, will be at the summit.

(And that I will be too)

and that we can have an FMUC discussion there with anyone who's interested.

/nod

But this implementation addresses the concerns they had with FMUC that they were trying to resolve with DMUC3.

that should help

"Just" need to update the XEP to match the code.

The protocol remains very very nearly just "Do normal MUC, slap an <fmuc/> element in it and drop duplicate or echo stanzas".

(Or don't drop the echos, if you're in single-master mode)

http://news.ycombinator.com/item?id=4480695

ralphm: http://news.ycombinator.com/item?id=4480695: WhatsApp is using your IMEI number as password | Hacker News

pretty funny

aside from the fact that MD5 is not encryption ...

http://i2.kym-cdn.com/photos/images/original/000/184/961/tumblr_lnvvueuSsj1qcj56b.png

I said funny, no?

http://i1.kym-cdn.com/photos/images/original/000/126/314/3cd8a33a.png

I had a conversation recently with someone who wanted a mobile app to log into XMPP without requiring a username and password to be entered by the user

and also be secure

m&m: which planet do you have your eyes on?

Ceti Alpha IV

MattJ: what did you tell him?

Well the plan was to use phone number for authentication (!)

/sigh

But for fun, I asked what should happen if I changed my SIM

Naturally the answer was nothing - it should still work

....

So phone number was out

Then IMEI/other handset serial came up

so yeah, that kinda leaves the phone's own id

So I asked what should happen if I brought a new phone, put my SIM in there, and downloaded the app again

Naturally the answer was that I should still see all my data :)

MattJ: so you suggested magic?

so … magic (-:

hehe

A week after this conversation they went to someone else, who I gather is using IBR with the phone number as the username, and I-don't-want-to-know as the password

MattJ: I'm sure it uses some hash of the image of the user's face

like the android unlock feature

Heh

kinda sucks if you get a new phone number