XMPP Service Operators - 2021-08-26

wtf? https://www.xmpp.jp/vcard

what the

it is in their privacy policy though

yuuuck

Yes and no, publish when you add as contact or smth, but publish on website to be crawled by anyone feels like one intentional step further. Eg. Spammers just need to refresh the page and get IDs...for free

yes

also, vcard is indeed public without presence subscription or somesuch

but you still need to know the JID

Exactly

publishing the vcards along with the JID is... uh

it's a choice which should be the user's

Excellent, now someone just needs to write a bot to ping xmpp.jp users everytime they touch their vcard

"nice pic!" "you look good today!" "congrats on the new name!"?

> hey I see you updated your vcard/name/profile pic because your server publishes these publicly, have a nice day!

:)

"contact $contactAddressOfxmppjp if you don't like that"

Yyyeeeesssss

bonus if using an xmpp.jp JID to do it ... :)

hmm evil, I like it

xmpp might get a bit more popular as the chatcontrol law passed in the EU

doesn't that make XMPP illegal

everything i like to do is illegal, won't affect me much

mew

"everything i like to do is illegal" is the title of a pretty good book btw

Hmmm:

https://xep-0363.xmpp.hackerposse.com:5443/upload/23963ea3bfb238743ef238bd0d65bed8f777298d/9BfD94cYtqLqJEU4fMypqkXHLV6duDIGpcdMgvAx/kZlSMZYWSQ2QeADtlF1YRQ.jpg

rozzin: chatcontrol.eu ✏

Licaon_Kter: I know, actually. It's just...

¯\_(ツ)_/¯

7th link heh

6th on Qwant, meh

‎Licaon_Kter‎: Spammers do not spam xmpp.jp because it is a spam server for buy spam mailings. Feedback contacts were located at xmpp.jp for a long time, and the server ignored any complaints from other servers.

404.city: (╯°□°）╯︵ ┻━┻

I personally did not speak with the admin of xmpp.jp, but there are at least 2 people in this chat who have been refused to block contact back to buy spam.

Also, I seem to remember xmpp.jp itself sends ads to its users. Although, details are hazy in my memory, so it could be regular spam

mjk: their Converse chat page has Google Analytics and Ads scripts loading ✏

Welp, not all federating xmpp servers are equally good for your ~health~ privacy

Tru story :))

Ah, the ad thing I saw here: https://www.xmpp.jp/policy > We may send ads to online users(about once a month). Which seems strangely sparse

But it probably means they harvest conversations for targeting

it doesn't say that

True

which is a better business model, for privacy, google+facebook's, or sending ads to your users once a month to pay the hosting bill?

seems like a valid business model to me, assuming they are open about it like it appears

Yes, it's good they're open about it and don't seem to share data with third parties. Still, once a month seems too few to cover any costs if it's not targeted :shrug:

if I was an advertiser I'm not sure why I'd pay xmpp.jp admin to advertise for me when I can just harvest JIDs from their vcard page and send my own for free

mod_block_strangers?

good point

But yeah. The vcard publication seems relatively new to me

has anyone considered telling them not to do this?

I just did