jdev - 2023-03-14


  1. wurstsalat has left

  2. sponji has left

  3. moparisthebest has left

  4. moparisthebest has joined

  5. thomaslewis has joined

  6. thomaslewis has left

  7. Mx2 has joined

  8. goldbeardp has joined

  9. PapaTutuWawa has left

  10. Wojtek has left

  11. goldbeardp has left

  12. Maranda[x] has left

  13. xnamed has left

  14. xnamed has joined

  15. larma has left

  16. hearty has left

  17. goldbeardp has joined

  18. hearty has joined

  19. hearty has left

  20. larma has joined

  21. Maranda[x] has joined

  22. goldbeardp has left

  23. hearty has joined

  24. hearty has left

  25. Maranda[x] has left

  26. hearty has joined

  27. hearty has left

  28. jgart has left

  29. kapad has left

  30. goldbeardp has joined

  31. Yagizа has joined

  32. hearty has joined

  33. goldbeardp has left

  34. goldbeardp has joined

  35. Schimon_ has left

  36. masum.nishat21 has left

  37. Maranda[x] has joined

  38. masum.nishat21 has joined

  39. marc0s has left

  40. marc0s has joined

  41. goldbeardp has left

  42. larma has left

  43. masum.nishat21 has left

  44. snow has left

  45. goldbeardp has joined

  46. atomicwatch has joined

  47. atomicwatch has left

  48. atomicwatch has joined

  49. atomicwatch has left

  50. atomicwatch has joined

  51. atomicwatch has left

  52. atomicwatch has joined

  53. atomicwatch has left

  54. atomicwatch has joined

  55. sponji has joined

  56. marc0s has left

  57. marc0s has joined

  58. atomicwatch has left

  59. atomicwatch has joined

  60. atomicwatch has left

  61. sponji has left

  62. sponji has joined

  63. atomicwatch has joined

  64. atomicwatch has left

  65. atomicwatch has joined

  66. atomicwatch has left

  67. Menel has joined

  68. atomicwatch has joined

  69. atomicwatch has left

  70. atomicwatch has joined

  71. atomicwatch has left

  72. atomicwatch has joined

  73. atomicwatch has left

  74. goffi has joined

  75. atomicwatch has joined

  76. atomicwatch has left

  77. atomicwatch has joined

  78. atomicwatch has left

  79. atomicwatch has joined

  80. atomicwatch has left

  81. atomicwatch has joined

  82. atomicwatch has left

  83. atomicwatch has joined

  84. atomicwatch has left

  85. atomicwatch has joined

  86. atomicwatch has left

  87. sponji has left

  88. atomicwatch has joined

  89. atomicwatch has left

  90. sponji has joined

  91. sponji has left

  92. nicoco_ has joined

  93. sponji has joined

  94. atomicwatch has joined

  95. atomicwatch has left

  96. atomicwatch has joined

  97. atomicwatch has left

  98. deimos has left

  99. deimos has joined

  100. atomicwatch has joined

  101. atomicwatch has left

  102. atomicwatch has joined

  103. atomicwatch has left

  104. Beherit has joined

  105. nicoco_ has left

  106. nicoco has left

  107. nicoco_ has joined

  108. nicoco has joined

  109. mirux has joined

  110. sponji has left

  111. goffi has left

  112. goffi has joined

  113. MSavoritias (fae,ve) has joined

  114. wurstsalat has joined

  115. sponji has joined

  116. sponji has left

  117. sponji has joined

  118. Mario Sabatino has joined

  119. sponji has left

  120. sponji has joined

  121. sponji has left

  122. sponji has joined

  123. sponji has left

  124. sponji has joined

  125. sponji has left

  126. Tobi has left

  127. Tobi has joined

  128. Tobi has left

  129. Tobi has joined

  130. sponji has joined

  131. Maranda has joined

  132. Mjolnir Archon has joined

  133. Laura has joined

  134. Tobi_ has joined

  135. goffi has left

  136. goffi has joined

  137. Maranda has left

  138. Mjolnir Archon has left

  139. adx has joined

  140. nicoco_ has left

  141. sponji has left

  142. sponji has joined

  143. sponji has left

  144. Laura has left

  145. goffi has left

  146. goffi has joined

  147. singpolyma has left

  148. sponji has joined

  149. nicoco has left

  150. rubi has left

  151. rubi has joined

  152. Laura has joined

  153. adx has left

  154. homebeach has left

  155. Matrix Traveler (bot) has left

  156. homebeach has joined

  157. Matrix Traveler (bot) has joined

  158. sponji has left

  159. kapad has joined

  160. Alex has joined

  161. kapad has left

  162. kapad has joined

  163. atomicwatch has joined

  164. marc0s has left

  165. marc0s has joined

  166. marc0s has left

  167. marc0s has joined

  168. rubi has left

  169. rubi has joined

  170. sponji has joined

  171. Maranda has joined

  172. Mjolnir Archon has joined

  173. hearty has left

  174. hearty has joined

  175. rubi has left

  176. rubi has joined

  177. pulkomandy has left

  178. marc0s has left

  179. marc0s has joined

  180. pulkomandy has joined

  181. Kev has joined

  182. antranigv has left

  183. Guus has joined

  184. sponji has left

  185. sponji has joined

  186. sponji has left

  187. Vaulor has left

  188. sponji has joined

  189. marc0s has left

  190. marc0s has joined

  191. Vaulor has joined

  192. kapad has left

  193. lennart has left

  194. kapad has joined

  195. marc0s has left

  196. marc0s has joined

  197. deimos has left

  198. Dele Olajide has joined

  199. Dele Olajide has left

  200. Dele Olajide has joined

  201. Dele Olajide has left

  202. Dele Olajide has joined

  203. kapad has left

  204. antranigv has joined

  205. kapad has joined

  206. marc0s has left

  207. marc0s has joined

  208. kapad has left

  209. marc0s has left

  210. marc0s has joined

  211. marc0s has left

  212. marc0s has joined

  213. Alex has left

  214. adx has joined

  215. Alex has joined

  216. Alex has left

  217. Alex has joined

  218. kapad has joined

  219. Alex has left

  220. sponji has left

  221. sponji has joined

  222. sponji has left

  223. Maranda[x] has left

  224. Alex has joined

  225. sponji has joined

  226. sponji has left

  227. nicoco_ has joined

  228. nicoco has joined

  229. nicoco has left

  230. Maranda[x] has joined

  231. nicoco has joined

  232. nicoco has left

  233. nicoco has joined

  234. nicoco has left

  235. nicoco has joined

  236. nicoco has left

  237. Guus has left

  238. nicoco has joined

  239. Guus has joined

  240. nicoco has left

  241. nicoco has joined

  242. nicoco has left

  243. nicoco has joined

  244. nicoco has left

  245. nicoco has joined

  246. nicoco has left

  247. nicoco has joined

  248. nicoco has left

  249. nicoco has joined

  250. nicoco has left

  251. nicoco has joined

  252. nicoco has left

  253. nicoco has joined

  254. nicoco has left

  255. nicoco has joined

  256. nicoco has left

  257. nicoco has joined

  258. nicoco has left

  259. nicoco has joined

  260. nicoco has left

  261. nicoco has joined

  262. nicoco has left

  263. Schimon_ has joined

  264. nicoco has joined

  265. nicoco has left

  266. sponji has joined

  267. nicoco has joined

  268. nicoco has left

  269. nicoco has joined

  270. nicoco has left

  271. nicoco has joined

  272. nicoco has left

  273. nicoco has joined

  274. nicoco has left

  275. nicoco has joined

  276. nicoco has left

  277. nicoco has joined

  278. nicoco has left

  279. nicoco has joined

  280. nicoco has left

  281. goffi has left

  282. goffi has joined

  283. nicoco has joined

  284. nicoco has left

  285. Kev has left

  286. nicoco has joined

  287. Kev has joined

  288. nicoco has left

  289. nicoco has joined

  290. nicoco has left

  291. nicoco has joined

  292. nicoco has left

  293. nicoco has joined

  294. nicoco has left

  295. nicoco has joined

  296. Laura has left

  297. Guus has left

  298. marc0s has left

  299. marc0s has joined

  300. nicoco has left

  301. nicoco has joined

  302. pulkomandy has left

  303. pulkomandy has joined

  304. sponji has left

  305. marc0s has left

  306. marc0s has joined

  307. sponji has joined

  308. sponji has left

  309. nicoco has left

  310. sponji has joined

  311. sponji has left

  312. sponji has joined

  313. sponji has left

  314. nicoco has joined

  315. marc0s has left

  316. marc0s has joined

  317. marc0s has left

  318. marc0s has joined

  319. marc0s has left

  320. marc0s has joined

  321. nicoco has left

  322. marc0s has left

  323. marc0s has joined

  324. nicoco has joined

  325. nicoco has left

  326. Maranda has left

  327. Mjolnir Archon has left

  328. Maranda[x] has left

  329. nicoco has joined

  330. nicoco has left

  331. kapad has left

  332. marc0s has left

  333. marc0s has joined

  334. nicoco has joined

  335. marc0s has left

  336. marc0s has joined

  337. sponji has joined

  338. PapaTutuWawa has joined

  339. nicoco has left

  340. nicoco has joined

  341. nicoco has left

  342. nicoco has joined

  343. nicoco has left

  344. nicoco has joined

  345. Guus has joined

  346. nicoco has left

  347. Guus has left

  348. Guus has joined

  349. nicoco has joined

  350. nicoco has left

  351. nicoco has joined

  352. nicoco has left

  353. nicoco has joined

  354. nicoco has left

  355. nicoco has joined

  356. nicoco has left

  357. nicoco has joined

  358. goffi has left

  359. marc0s has left

  360. marc0s has joined

  361. goffi has joined

  362. qy has left

  363. qy has joined

  364. hearty has left

  365. nicoco has left

  366. hearty has joined

  367. Mx2 has left

  368. nicoco has joined

  369. nicoco has left

  370. nicoco has joined

  371. nicoco has left

  372. lennart has joined

  373. rubi has left

  374. rubi has joined

  375. Ray222 has joined

  376. nicoco has joined

  377. nicoco has left

  378. nicoco has joined

  379. nicoco has left

  380. nicoco has joined

  381. nicoco has left

  382. nicoco has joined

  383. nicoco has left

  384. nicoco has joined

  385. nicoco has left

  386. nicoco has joined

  387. nicoco has left

  388. Ray222 has left

  389. Maranda[x] has joined

  390. Yagizа has left

  391. Yagizа has joined

  392. Ray222 has joined

  393. Yagizа has left

  394. Ray222 has left

  395. sonny has left

  396. Ray222 has joined

  397. sonny has joined

  398. goldbeardp has left

  399. Laura has joined

  400. goldbeardp has joined

  401. singpolyma has joined

  402. sponji has left

  403. nicoco_ has left

  404. nicoco_ has joined

  405. nicoco has joined

  406. Ray222 has left

  407. nicoco has left

  408. nicoco has joined

  409. nicoco has left

  410. nicoco has joined

  411. nicoco has left

  412. nicoco has joined

  413. homebeach has left

  414. Matrix Traveler (bot) has left

  415. homebeach has joined

  416. Matrix Traveler (bot) has joined

  417. nicoco has left

  418. Wojtek has joined

  419. singpolyma has left

  420. nicoco has joined

  421. nicoco has left

  422. thomaslewis has joined

  423. nicoco has joined

  424. nicoco has left

  425. larma has joined

  426. thomaslewis has left

  427. Dele Olajide has left

  428. goldbeardp has left

  429. sponji has joined

  430. nicoco_ has left

  431. goldbeardp has joined

  432. goffi has left

  433. goffi has joined

  434. Dele Olajide has joined

  435. antranigv has left

  436. antranigv has joined

  437. singpolyma has joined

  438. qy has left

  439. qy has joined

  440. larma has left

  441. antranigv has left

  442. Maranda[x] has left

  443. deimos has joined

  444. Alex has left

  445. Alex has joined

  446. Alex has left

  447. Alex has joined

  448. marc0s has left

  449. marc0s has joined

  450. Alex has left

  451. marc0s has left

  452. Alex has joined

  453. marc0s has joined

  454. antranigv has joined

  455. marc0s has left

  456. marc0s has joined

  457. larma has joined

  458. Menel has left

  459. Menel has joined

  460. atomicwatch has left

  461. norayr has left

  462. norayr has joined

  463. goffi has left

  464. Alex has left

  465. Alex has joined

  466. atomicwatch has joined

  467. atomicwatch has left

  468. goffi has joined

  469. Mjolnir Archon has joined

  470. Maranda has joined

  471. atomicwatch has joined

  472. atomicwatch has left

  473. atomicwatch has joined

  474. atomicwatch has left

  475. moparisthebest has left

  476. Wojtek has left

  477. moparisthebest has joined

  478. goffi has left

  479. goffi has joined

  480. goffi has left

  481. goffi has joined

  482. Ray222 has joined

  483. atomicwatch has joined

  484. atomicwatch has left

  485. jgart has joined

  486. nicoco_ has joined

  487. goffi has left

  488. goffi has joined

  489. nicoco_ has left

  490. nicoco_ has joined

  491. Wojtek has joined

  492. Guus has left

  493. goldbeardp has left

  494. atomicwatch has joined

  495. atomicwatch has left

  496. nicoco_ has left

  497. Laura has left

  498. atomicwatch has joined

  499. atomicwatch has left

  500. atomicwatch has joined

  501. atomicwatch has left

  502. atomicwatch has joined

  503. atomicwatch has left

  504. atomicwatch has joined

  505. atomicwatch has left

  506. atomicwatch has joined

  507. atomicwatch has left

  508. atomicwatch has joined

  509. atomicwatch has left

  510. atomicwatch has joined

  511. atomicwatch has left

  512. atomicwatch has joined

  513. atomicwatch has left

  514. atomicwatch has joined

  515. atomicwatch has left

  516. Ray222 has left

  517. atomicwatch has joined

  518. atomicwatch has left

  519. jgart has left

  520. atomicwatch has joined

  521. atomicwatch has left

  522. atomicwatch has joined

  523. atomicwatch has left

  524. marc0s has left

  525. marc0s has joined

  526. atomicwatch has joined

  527. atomicwatch has left

  528. atomicwatch has joined

  529. atomicwatch has left

  530. atomicwatch has joined

  531. atomicwatch has left

  532. larma has left

  533. atomicwatch has joined

  534. atomicwatch has left

  535. larma has joined

  536. atomicwatch has joined

  537. atomicwatch has left

  538. atomicwatch has joined

  539. atomicwatch has left

  540. atomicwatch has joined

  541. atomicwatch has left

  542. snow has joined

  543. atomicwatch has joined

  544. atomicwatch has left

  545. atomicwatch has joined

  546. atomicwatch has left

  547. atomicwatch has joined

  548. atomicwatch has left

  549. atomicwatch has joined

  550. atomicwatch has left

  551. Dele Olajide has left

  552. atomicwatch has joined

  553. atomicwatch has left

  554. Laura has joined

  555. opal has joined

  556. Dele Olajide has joined

  557. atomicwatch has joined

  558. atomicwatch has left

  559. opal

    am i right to think that xep-0116 has been superceded by omemo or are they unrelated

  560. Zash

    Esessions? Yeah that's ancient and obsolete

  561. opal

    for context im reading through existing security-related xeps before reinventing any wheels if i draft my own standards

  562. atomicwatch has joined

  563. Dele Olajide has left

  564. atomicwatch has left

  565. Dele Olajide has joined

  566. opal

    cool thanks lol it looked like that but i couldnt be too sure cus the summary was a bit indecipherable for me

  567. atomicwatch has joined

  568. atomicwatch has left

  569. Zash

    Maybe something for Editor to formally obsolete even

  570. nicola has left

  571. opal

    yeah it may be helpful to have a note for what active standard(s) replace it

  572. opal

    in a nutshell i'm tired of hearing about what everything else has but xmpp doesnt, although "everything else" tends to be less solid of an experience than this, so maybe theres some easy (and not so easy) stuff i can do both on standards and client/server dev side to bridge the gap

  573. opal

    voice/video i think was the last milestone i can think of

  574. opal

    which is a good one, ive used it on my phone to call friends on the road when we were planning to meet up lol

  575. atomicwatch has joined

  576. atomicwatch has left

  577. lennart has left

  578. Zash

    opal, I learned that it's useless to argue with people who make such statements, usually they already made up their mind and will find another reason if contradicted

  579. opal

    im only focusing on the valid shortcomings ive seen of xmpp

  580. opal

    things i'd want too

  581. Zash

    like, with how voice/video and e2ee existed over a decade ago in XMPP

  582. Zash

    maybe not widely implemented, but existed in some form

  583. opal

    was voip ready-to-use a decade ago though? afaict gajim had it for a while but it worked poorly

  584. opal

    succumbed to code rot probably lol

  585. Zash

    I remember testing voice and video with Gajim in like 2010

  586. opal

    yeah i tried much later in gajim and failed to get it working right

  587. Zash

    I could make video calls from my N900 phone over XMPP around that time, all your arguments are invalid!

  588. opal

    lol

  589. marc0s has left

  590. marc0s has joined

  591. Zash

    Of course, nobody cared about video calls, so nobody maintained the code and it decayed

  592. sonny has left

  593. Zash

    Further evidence that those feature based arguments should be ignored

  594. homebeach has left

  595. Matrix Traveler (bot) has left

  596. homebeach has joined

  597. Matrix Traveler (bot) has joined

  598. guus.der.kinderen

    Nimbuzz had a voice transport to/from Skype in ... well before 2010.

  599. opal

    my biggest personal complaint is with how unwieldy omemo is; olm in matrix tries to do something better with cross-key signing but thats ugly too

  600. atomicwatch has joined

  601. atomicwatch has left

  602. opal

    as for the easier side of things: arbitrary message editing / replies / redacts are a common enough ask

  603. opal

    and all that needs is to refer to specific message ids for those commands

  604. Zash

    opal: Both OMEMO and (Meg)OLM are based on Signals protocol. But MLS is the future!

  605. sonny has joined

  606. opal

    https://en.wikipedia.org/wiki/Messaging_Layer_Security i assume, and not major league soccer lol

  607. marc0s has left

  608. marc0s has joined

  609. Vaulor has left

  610. atomicwatch has joined

  611. atomicwatch has left

  612. kapad has joined

  613. marc0s has left

  614. marc0s has joined

  615. Vaulor has joined

  616. Dele Olajide has left

  617. Dele Olajide has joined

  618. atomicwatch has joined

  619. atomicwatch has left

  620. opal has left

  621. opal has joined

  622. Dele Olajide has left

  623. snow has left

  624. guus.der.kinderen

    I'm reviving a server-sided EXI implementation. Basic functionality seems to be working fine. I'd like to test this against a client that's not written by the same authors of the server-sided implementation. Does anyone have a client (or library) that does XEP-0322 ?

  625. atomicwatch has joined

  626. atomicwatch has left

  627. atomicwatch has joined

  628. atomicwatch has left

  629. opal has left

  630. opal has joined

  631. atomicwatch has joined

  632. atomicwatch has left

  633. opal

    oh wow dino 0.4.1 completely ignores my gtk theme cool

  634. opal

    and now i see the reaction popup nvm

  635. opal

    its different from the emote menu

  636. atomicwatch has joined

  637. atomicwatch has left

  638. Mx2 has joined

  639. opal

    and im talking in the wrong channel lol

  640. atomicwatch has joined

  641. atomicwatch has left

  642. antranigv has left

  643. atomicwatch has joined

  644. atomicwatch has left

  645. atomicwatch has joined

  646. atomicwatch has left

  647. opal

    > and im talking in the wrong channel lol i guess replies are a thing though now, lets see how this looks

  648. atomicwatch has joined

  649. atomicwatch has left

  650. atomicwatch has joined

  651. atomicwatch has left

  652. opal has left

  653. Mx2 has left

  654. opal has joined

  655. Zash

    finally, the one feature that was holding XMPP back! oh wait, now it's something else

  656. opal

    i dont need the sass from you, ive successfully brought people onto xmpp who didnt use it before

  657. opal

    save it for someone relevant

  658. mrdoctorwho has left

  659. mrdoctorwho has joined

  660. Zash

    don't mind me, I'm just bitter after some 15+ years of hearing things like that

  661. opal

    i know you are but im bitter after years of hearing "dont do things because they arent worth it"

  662. opal

    so we'll butt heads at this rate

  663. Zash

    I like to do things instead of arguing, so that's what I did

  664. opal

    good philosophy

  665. pep.

    opal, re encryption, maybe join xmpp:e2ee@muc.xmpp.org?join

  666. atomicwatch has joined

  667. atomicwatch has left

  668. opal

    thanks i will

  669. goffi has left

  670. goffi has joined

  671. PapaTutuWawa has left

  672. opal has left

  673. opal has joined

  674. opal has left

  675. atomicwatch has joined

  676. atomicwatch has left

  677. przemek has joined

  678. Vaulor has left

  679. Vaulor has joined

  680. przemek has left

  681. atomicwatch has joined

  682. atomicwatch has left

  683. atomicwatch has joined

  684. atomicwatch has left

  685. atomicwatch has joined

  686. atomicwatch has left

  687. atomicwatch has joined

  688. atomicwatch has left

  689. antranigv has joined

  690. atomicwatch has joined

  691. Laura has left

  692. Mx2 has joined

  693. Laura has joined

  694. techmetx11 has left

  695. techmetx11 has joined

  696. przemek has joined

  697. deimos has left

  698. przemek has left

  699. przemek has joined

  700. deimos has joined

  701. moparisthebest has left

  702. Laura has left

  703. moparisthebest has joined

  704. Mx2 has left

  705. przemek has left

  706. kapad has left

  707. przemek has joined

  708. marc0s has left

  709. marc0s has joined

  710. marc0s has left

  711. marc0s has joined

  712. hearty has left

  713. przemek has left

  714. norayr has left

  715. homebeach has left

  716. Matrix Traveler (bot) has left

  717. homebeach has joined

  718. Matrix Traveler (bot) has joined

  719. PapaTutuWawa has joined

  720. przemek has joined

  721. przemek has left

  722. przemek has joined

  723. jgart has joined

  724. przemek has left

  725. hearty has joined

  726. nicola has joined

  727. stuart.j.mackintosh has left

  728. przemek has joined

  729. przemek has left

  730. przemek has joined

  731. przemek has left

  732. krit has left

  733. goldbeardp has joined

  734. krit has joined

  735. goldbeardp has left

  736. przemek has joined

  737. przemek has left

  738. przemek has joined

  739. przemek has left

  740. guus.der.kinderen

    > I'm reviving a server-sided EXI implementation. Basic functionality seems to be working fine. I'd like to test this against a client that's not written by the same authors of the server-sided implementation. Does anyone have a client (or library) that does XEP-0322 ? We have now blogged about this effort: https://discourse.igniterealtime.org/t/developing-openfire-efficient-xml-interchange-exi-functionality

  741. nicola has left

  742. Mx2 has joined

  743. goffi has left

  744. goffi has joined

  745. norayr has joined

  746. przemek has joined

  747. Peter Waher

    Cool. Great work.

  748. guus.der.kinderen

    Thanks. It's pedigree might trace back to people close to you. :)

  749. guus.der.kinderen

    You mentioned a student - I think this was him.

  750. Peter Waher

    Yes, correct

  751. Peter Waher

    Sent him the link also. An unexpected but happy surprise, I’m sure.

  752. Peter Waher

    As you write, it would be good to do interoperability-testing, also in a federated environment. Need to find a slot for that.

  753. Peter Waher

    I would also like to encourage an experimental UDP/DTLS-binding to the broker. That, in conjunction with EXI, would be very interesting.

  754. Peter Waher

    Perhaps something for summer-of-code?

  755. Peter Waher

    I can assist as mentor, if needed. Also help editing/writing a XEP for such a binding.

  756. Peter Waher

    A server with such a binding would be able to support millions of online devices (depending on actual amount of device-data, of course), even on a modest computer and resource-constrained network. A serious challenger to CoAP and LWM2M.

  757. Wojtek has left

  758. Peter Waher

    Perhaps something for summer-of-code? (Or some master students)

  759. guus.der.kinderen

    I'd welcome that - although I cannot commit to mentoring myself

  760. guus.der.kinderen

    This years GSoC might already be underway though?

  761. mirux has left

  762. mirux has joined

  763. guus.der.kinderen

    Ah, proposals can be submitted until April 4th, it seems. So we might be able to get in, if things work out.

  764. Peter Waher

    Perhaps I read this wrong:

  765. Peter Waher

    https://developers.google.com/open-source/gsoc/timeline

  766. Peter Waher

    https://developers.google.com/open-source/gsoc/timeline

  767. Peter Waher

    "mentoring organizations"

  768. Peter Waher

    Would the XSF be one of those?

  769. guus.der.kinderen

    The XSF got accepted as a mentoring organization this year.

  770. Peter Waher

    ah, ok, I see

  771. moparisthebest

    guus.der.kinderen, Peter Waher: any thoughts about whether EXI might be vulnerable to CRIME-like attacks?

  772. guus.der.kinderen

    https://summerofcode.withgoogle.com/programs/2023/organizations

  773. guus.der.kinderen

    moparisthebest: I have no idea.

  774. moparisthebest

    > I would also like to encourage an experimental UDP/DTLS-binding to the broker. That, in conjunction with EXI, would be very interesting. Peter Waher: what binding? Is it still relevant with QUIC existing?

  775. Peter Waher

    Sufficient with UDP & DLTS directly; more light-weight.

  776. Peter Waher

    Regarding CRIME & EXI: Not sure there are any secret web cookies involved… While a speed session does not list which namespaces & schemas are to be used explicitly, this is for speed only, not meant for hiding which schemas & namespaces are used.

  777. Peter Waher

    EXI is not meant to hide information. The DTLS-layer does that. And while the DTLS-layer uses such cookies & session counters instead of socket connections, they are not included in the EXI-layer (as it is built on/for TCP initally).

  778. moparisthebest

    Peter Waher: what makes you think UDP & DTLS is lighter weight than QUIC ?

  779. Peter Waher

    It might be an interesting side project to study as well…

  780. moparisthebest

    CRIME explicitly leaked data from inside the TLS connection, that was the bug

  781. moparisthebest

    So saying "exi is inside an encrypted stream" means nothing

  782. MSavoritias (fae,ve) has left

  783. Zash

    If you have compression and mix sensitive and attacker controlled data, there might be CRIME-like bugs.

  784. Zash

    deflate/zlib etc kind of compression

  785. Zash

    See https://blog.thijsalkema.de/blog/2014/08/07/https-attacks-and-xmpp-2-crime-and-breach/

  786. Schimon_ has left

  787. moparisthebest

    Well any kind of compression, of which exi is a kind, so implementation details matter, hence my question

  788. goffi has left

  789. goffi has joined

  790. Peter Waher

    EXI differs from other compression methods, in that it retains the semantics of the XML

  791. Peter Waher

    while other typical compression methods work on tokens, not related to the XML syntax

  792. Zash

    Compression based on fixed dictionaries should be relatively fine, and simple things like FunXMPP

  793. Peter Waher

    They are not fixed dictionaries either. Instead a state-machine is built based on schemas the client understands/want to include in a session

  794. Peter Waher

    XML is then normalized

  795. MSavoritias (fae,ve) has joined

  796. Peter Waher

    and encoded, by evaluating the number of possible options available in each step, during serialization

  797. Zash

    I vaguely recall you could use deflate or something with EXI?

  798. Peter Waher

    Not by itself

  799. Peter Waher

    you could add it as a layer

  800. Peter Waher

    for transport

  801. Peter Waher

    but EXI can be seen as normal XML, except it’s serialized using minimum number of bits, as deduced from schema files and normalizing XML and alphabets.

  802. Peter Waher

    So it doesn't take transport-layer input

  803. Peter Waher

    And it does not consider schemas to be secret

  804. sponji has left

  805. sponji has joined

  806. sponji has left

  807. sponji has joined

  808. sponji has left

  809. rubi has left

  810. MSavoritias (fae,ve) has left

  811. rubi has joined

  812. stuart.j.mackintosh has joined

  813. Guus

    Peter Waher: If you're interested in getting under the XSF umbrella for GSOC, then this page is of interest: https://wiki.xmpp.org/web/Google_Summer_of_Code_2023

  814. Guus

    I can facilitate, but cannot commit to mentoring.

  815. przemek has left

  816. kapad has joined

  817. stuart.j.mackintosh has left

  818. marc0s has left

  819. marc0s has joined

  820. sponji has joined

  821. sponji has left

  822. sponji has joined

  823. sponji has left

  824. sponji has joined

  825. stuart.j.mackintosh has joined

  826. goldbeardp has joined

  827. Menel has left

  828. moparisthebest

    > Peter Waher: what makes you think UDP & DTLS is lighter weight than QUIC ? Any thoughts on this one?

  829. sponji has left

  830. Tobi_ has left

  831. sponji has joined

  832. sponji has left

  833. Peter Waher

    The main difference is that resource constrained devices are typically datagram-oriented, not stream-oriented, even though DTLS permits fragmentation and reassembly of larger blocks of data. Protocols for such devices are therefore already based on UDP/DTLS-based protocols. This means that communication libraries and operating systems already support this. (XMPP in a sense is BTW also easily made into a datagram-oriented approach, with its quite small minimum(maximum(stanza-size)), if order of stanzas is ignored, which Google Talk suffered from.) So, available communication libraries typically support UDP & DTLS. Availabe/comparable protocol competitors are based on UDP datagrams and DTLS. QUIC attempts to solve similar problems as UDP & DTLS. QUIC is therefore only comparable to UDP/DTLS, if this standard library support for UDP/DTLS is also removed at the same time, and if no protocols based on these are supported by the device (otherwise QUIC represents an addition to existing code, making the device less light-weight, not to mention more work intensive, having to maintain parallel stacks updated over time). This is the point.

  834. Peter Waher

    Interesting side note: EXI is very resource conserving for devices, as collections of schema files can be converted to compilable C-code automatically, and stanzas are therefore easilly serialized into binary blocks, easilly fitted into single datagrams, and vice versa, a datagram received is easilly decoded in the app, via the same automatically generated code. For the EXI case, a datagram approach is therefore favorable, compared to a streamed approach. One of the problems solved in 0322 is how to separate the stanzas in the stream. Over UDP & DTLS this is not necessary, as datagrams separate them naturally.

  835. Guus has left

  836. Peter Waher

    This might also perhaps be seen as a vulnerability in some cases (see CRIME above), in the sense that observers can observe sizes of datagrams, not readily sizes of stanzas in a stream. For resource-constrained-devices, this is typically readilly available anyway, as it’s easy to learn the sizes of automatically generated repetitive stanzas from machines.

  837. Peter Waher

    Hope this answers the question

  838. sponji has joined

  839. goldbeardp has left

  840. moparisthebest

    So tiny resource constrained devices support multiple protocols at the same time, instead of just XMPP?

  841. Laura has joined

  842. Peter Waher

    Typically, a device RTOS supports multiple IP-based protocols out-of-the-box, yes. As do communication libraries. Unless you choose to build everything from scratch. This also happens. The smallest XMPP-implementation I’ve seen was 12 kB, which was impressive.

  843. moparisthebest

    Also is that still a thing? A sub-$1 esp8266 will do real XMPP over TLS over encrypted WiFi just fine

  844. sponji has left

  845. sponji has joined

  846. sponji has left

  847. sponji has joined

  848. Peter Waher

    WiFi is not considered resource constrained

  849. Peter Waher

    btw

  850. Peter Waher

    Also, you have two ends: By using DTLS you avoid the socket connections that are quickly consumed on the server end, if many devices are connected.

  851. snow has joined

  852. marc0s has left

  853. marc0s has joined

  854. Peter Waher

    resource constrained typically refer to one (or typically more) of: 1. Power consumption 2. Bandwidth 3. Memory

  855. Peter Waher

    (with 4 MB Flash you typically have no problems building a complete communication stack. Resource-constrained devices typically do not have such resources; they are often battery-powered, and must remain on battery for long periods of time. XMPP is not the first choice in such cases, but with UDP, DTLS (with PSK instead of X.509), EXI, it could be.)

  856. Peter Waher

    XMPP have exceptionally many other benefits its competitors do not share.

  857. Peter Waher

    XMPP has exceptionally many other benefits its competitors do not share.

  858. techmetx11

    Peter Waher: it's not just flash, its also RAM

  859. Peter Waher

    Yes

  860. Peter Waher

    (EXI C-code, and datagram processing, is very RAM efficient also, btw.)

  861. Tobi has left

  862. techmetx11

    in some cases, i would assume you have to write the XML parser in assembly

  863. Peter Waher

    yes, of course, or as an efficient C-code state-machine

  864. antranigv has left

  865. Peter Waher

    A resource-constrained device would probably not implement a generic DOM

  866. techmetx11

    yeah

  867. sponji has left

  868. techmetx11

    what is this resource-constraint device, if it doesn't support WiFi, is it meant to be connected via wired ethernet?

  869. Peter Waher

    There are many alternatives

  870. jackhill has left

  871. Peter Waher

    Fore more references, you can check: CoRE, CoAP, LWM2M, 6LOWPAN, IPSO, for example. This would be the main competitor. It’s very successful, but suffers from tight coupling, and is difficult to extend

  872. Peter Waher

    XMPP offers a much wider and richer networking environment

  873. Peter Waher

    (especially if its weaknesses are resolved: verbosity, socket connections, power consumption, etc.)

  874. Peter Waher

    Many (or most) of these are resolved using EXI over UDP/TCP.

  875. moparisthebest

    It seemed like the only reason to prefer udp+DTLS over quic is "maybe library support" ?

  876. techmetx11

    moparisthebest: can quic be implemented in a resourcee-efficient way?

  877. Peter Waher

    It cannot still compete with CoRE & LWM2M, if only byte count and uW is counted. But it provides a completely different set of possibities for interoperability, extensibilty, privacy and security compared to what CoRE-LWM2M can provide.

  878. moparisthebest

    Anyway what I mean is there are plenty of very small, very cheap, very light power usage chips today that can just run regular XMPP

  879. moparisthebest

    I'm not sold that anything needs something lighter than regular XML and quic today

  880. Peter Waher

    yes, it is getting better. But the requirements are also moved further…

  881. moparisthebest

    10 years ago? Sure

  882. nicoco_ has joined

  883. nicoco has joined

  884. moparisthebest

    > moparisthebest: can quic be implemented in a resourcee-efficient way? techmetx11: why not? It's just UDP with some TLS, basically

  885. nicoco has left

  886. mirux has left

  887. goffi has left

  888. u has left

  889. u has joined

  890. atomicwatch has left

  891. sponji has joined

  892. sponji has left

  893. Mario Sabatino has left

  894. atomicwatch has joined

  895. atomicwatch has left

  896. atomicwatch has joined

  897. atomicwatch has left

  898. atomicwatch has joined

  899. atomicwatch has left

  900. atomicwatch has joined

  901. atomicwatch has left

  902. nicoco_ has left

  903. nicoco_ has joined

  904. atomicwatch has joined

  905. atomicwatch has left

  906. nicoco_ has left

  907. atomicwatch has joined

  908. atomicwatch has left

  909. atomicwatch has joined

  910. atomicwatch has left

  911. atomicwatch has joined

  912. atomicwatch has left

  913. atomicwatch has joined

  914. atomicwatch has left

  915. atomicwatch has joined

  916. atomicwatch has left

  917. atomicwatch has joined

  918. atomicwatch has left

  919. atomicwatch has joined

  920. atomicwatch has left

  921. atomicwatch has joined

  922. atomicwatch has left

  923. atomicwatch has joined

  924. atomicwatch has left

  925. Kev has left

  926. atomicwatch has joined

  927. atomicwatch has left

  928. sponji has joined

  929. sponji has left

  930. sponji has joined

  931. sponji has left

  932. sponji has joined

  933. sponji has left

  934. Beherit has left

  935. atomicwatch has joined

  936. atomicwatch has left

  937. sponji has joined

  938. sponji has left

  939. atomicwatch has joined

  940. atomicwatch has left

  941. jackhill has joined

  942. atomicwatch has joined

  943. atomicwatch has left

  944. atomicwatch has joined

  945. atomicwatch has left

  946. atomicwatch has joined

  947. atomicwatch has left

  948. atomicwatch has joined

  949. atomicwatch has left

  950. atomicwatch has joined

  951. atomicwatch has left

  952. atomicwatch has joined

  953. atomicwatch has left

  954. atomicwatch has joined

  955. atomicwatch has left

  956. sponji has joined

  957. sponji has left

  958. sponji has joined

  959. Wojtek has joined

  960. atomicwatch has joined

  961. atomicwatch has left

  962. atomicwatch has joined

  963. Arne has left

  964. atomicwatch has left

  965. atomicwatch has joined

  966. atomicwatch has left

  967. atomicwatch has joined

  968. atomicwatch has left

  969. Arne has joined

  970. atomicwatch has joined

  971. atomicwatch has left

  972. atomicwatch has joined

  973. atomicwatch has left

  974. atomicwatch has joined

  975. atomicwatch has left

  976. atomicwatch has joined

  977. atomicwatch has left

  978. atomicwatch has joined

  979. atomicwatch has left

  980. Wojtek has left

  981. atomicwatch has joined

  982. atomicwatch has left

  983. atomicwatch has joined

  984. atomicwatch has left

  985. atomicwatch has joined

  986. atomicwatch has left

  987. atomicwatch has joined

  988. atomicwatch has left

  989. atomicwatch has joined

  990. atomicwatch has left

  991. atomicwatch has joined

  992. atomicwatch has left

  993. atomicwatch has joined

  994. atomicwatch has left

  995. wurstsalat has left

  996. atomicwatch has joined

  997. atomicwatch has left

  998. sponji has left