XMPP Service Operators - 2021-02-23

Kris: last time I tried it, it worked, but I never got around to implementing authentication, or a plugin on the muc side enforcing the same nick across all rooms on the same server

ah, the original author 😉

I vaguely plan on rewriting it in rust someday

hmm, how about a component interface with Oragono?

there was also PSYC, but I have no idea what the status is of that project these days. I think last I read they were going to be some new part of GNUnet, but the older software was kinda cool in accepting connections from a variety of client types

Establishing a secure connection from otr.chat to lebihan.pl failed. Certificate hash: 4395c62e3313bc33482c0072eba7cf5182ce24768074d43ec9fcbb1cdeb9db4f. Error with certificate 0: self signed certificate.

I'm really enjoying the international away messages :)

Oh? Like what christ

Christopher M0YNG:

Probably all the different presence changes in the log :) I'm not seeing it (Conversations here), but can imagine

Would be nice to be able to internationalize the messages

`xml:lang`

Licaon_Kter: yes, that. I'm just wondering, if a client starts sending such multi-language presence, does all the infra support that and it would "just work", or it's somerhing no-one attempted ✏

We're trying to move away from that kind of thing

Some clients do support stuff like that

But I think in a future protocol update we'd probably restrict things to just a single item with a language tag

MattJ: Hmm. Why though? Too much complexity?

Various issues. The most interesting one are potential security issues

If you send a message to this chat in multiple languages, some clients will show one message and some will show a different one

Ah, right

That could trick humans (e.g. if I know the admin uses language A, and someone I want to insult uses language B, I can ensure they see different versions of the message)

It can also trick software that doesn't follow the rules identically to all other software

Sounds fun! And now Matt wants to break it.

Humans are overrated anyways

Roll on robot uprising

Heheh. I'm certain doing this stuff in message body _is_ trouble. Status though... Yeah, sure, one can insult using status messages, but... idk, feels stretchy :) But another possible issue is the ability to sniff out users' locales through this, combined with a bit of social engineering ✏

Well I'm half trying to deprecate status messages too, so... :)

Although can be easilly mitigated it privacy-consious clients by always displaying, e.g., english

Lol

Noo, have mercy

yes, things like:

> Jonny is xa, " (Nicht verfügbar wegen Untätigkeit seit mehr als 15 Minuten)"

> wladmis is away, " (Автостатус 'Отошел' по причине бездействия более 5 мин)"

etc

nice antifeature

Not here or lost signal, but I'll see your messages when I return! =^.^= (since 5:12 am EST on 2021-02-23)