XMPP Service Operators - 2021-10-07

Was that an open source pun? Lol

wasnt unix proprietary tho? multics too

Yes

I was just making fun of our community (myself included) often preferring whatever we're used to over new solutions.

if it aint broke.... :b

> I was just making fun of our community (myself included) often preferring whatever we're used to over new solutions. Never touch a running system.

That is wisdom. Of course, not everyone is able to recognize when a system is perfect, and overestimates himself, and then goes and changes something he should not touch.

> Never touch a running system. I so envied all those exchange admins with that attitude back in march.

I hate to be the one to spoil the fun, but let's keep this room on topic :)

There are many off-topic chats around

Twitch username filters, useful? https://ghostbin.com/57bCm

I saw those. I thought so too, then realised that once published they decrease in usefulness very quickly :)

But probably still useful, if someone wants to put the effort into translating it to Prosody/ejabberd code.

> There are many off-topic chats around Alright, I actually have something on topic I was thinking about. I recently had trouble on my ejabberd Server with rejected s2s connections, the reason for which being, according to my log, an expired certificate. It was that DST Root CA X3 thing. What I did was generate new certificates using certbot and this option: --preferred-chain "ISRG Root X1" That made the problem go away. Has anybody else here experienced trouble federating, with that kind of error using the old LE-chain?

Yes, it was the problem of the day, during Sep 30-Oct 01

Scroll up...

> There are many off-topic chats around Off- topic people make off-topic chats

Fun fact, the other day I had to follow this https://www.stoutner.com/lets-encrypt-isrg-root-x1-and-privacy-browser/ and import the ISRG cert (and disable DST) on an Android 10 chinese whitelabel tablet. F-Droid.org was working fine, but anything else was not, in Firefox, eg. It could not even connect to get add-ons

Firefox got this problem (to disable DST) on each platform, also on PC

> I saw those. I thought so too, then realised that once published they decrease in usefulness very quickly :) Does a lot of that traffic come from people writing automatic trollbots vs. actual users, or... something? I'm naive on this; without having that background, it sounds to me like https://cwiki.apache.org/confluence/display/spamassassin/PublicRules

rozzin: it's more about trolling and griefing than bots. mattjsuxcocs@404 is made with an intent than random russian carder

Do we know by now what produced the blackout of the social media sites?

Yes

If you mean Facebook

Yes

All of them

https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/ & https://blog.cloudflare.com/october-2021-facebook-outage/ Licaon_Kter posted this...

Fb, twitter, inta,...

One command, backbone compleadly offline. All dns servers of Facebook taking themselves offline because of it. ✏

And then apparently, physical access was controlled by their owh auth systems so people couldn't even badge in to fix it

Well, thank goodness Facebook isn't actually responsible for all social interactions or "social media" on the Internet 😁

And why was twitter down?

Especially with federated platforms like mastodon and diaspora now

Was it?

Yes and instagramm and whatsapp

zp1.net: Probably because Facebook is large enough that them dropping out is a huge hole in the global routing table... that or anything that used Facebook integrations (analytics / sign in with / share on) also would have had problems

I wonder how many people didn't even notice until they heard it from a friend.

instagram is owned by facebook, as well as whatsapp

Was Telegram down too?

No. I can confirm that much.

> I wonder how many people didn't even notice until they heard it from a friend. I only heard it in xmpp mucs.

No telegram was just very slow

Martin: same here.

I heard because all my sysadmin circles were going crazy about it

Saw some tweets from Signal, who themselves where out last week, making fun of WA and Telegram..meh

But xmpp was rocking like hell... Our server got 30 new users in one hour ✏

matrix had a decent influx too it looked like

Got one new contact these days, Apple user though :( ✏

But all my stuff is controlled by LDAP, I don't allow public registrations, so I don't have any local numbers

I wouldn't be surprised if superpopular centralized services like Twitter, Telegram, Signal... effectively got DDoS'd by users rapidly and repeatedly posting about "OMG Facebook is offline".

Yes, why was signal down? Is signal hosted by facebook?

possibly. also probably because they're BGP peers.

> I wouldn't be surprised if superpopular centralized services like Twitter, Telegram, Signal... effectively got DDoS'd by users rapidly and repeatedly posting about "OMG Facebook is offline". Take down all the dirt. 😃

Plus new registrations, maybe.

> Yes, why was signal down? Is signal hosted by facebook? Afaik they are hosted by amazon.

zp1.net: sorry, I didn't mean to imply that Signal went down.

Aaaaa prolly they are all hosted by the nsa :)))

Why do you think I don't use any of the major ones.

I genuinely just have Twitter to complain about FedEx playing hopscotch with my state whenever I have a package with them

Martin: every time some big silo goes down and the other big silos get overloaded by the flood of users looking to talk about it..., I sit here going "man, if only we could get some of that flood..."

Hold on, are my messages actually making it into here?

zp1.net: > But xmpp was rocking like hell... Our server got 30 new users in one hour How do new users discover your server?

tek_dmn: you use twitter to complain about FedEx, yes. 😃

Okay, I was seeing a lot of weird connection errors in the logs

Knowing me, it's mediacom's modem crashing again.

> zp1.net: > How do new users discover your server? I really dont know, prolly one user recommend it to other.

I have a lot of gamers that's all i know.

Some radio-station fans ..

Thy like the short url i suppose

zp1.net: do you have open registration, or some sort of invitation or request system, or...?

rozzin: open registration.

Strange message i got :))) Establishing a secure connection from xmpp.net to zp1.net failed. Certificate hash: (No certificate).

xmpp.net has no certificate?

I'l better drink another beer while you scan my server :)))

Better test your server with https://testssl.sh Its in debian as a package, but you can get it from that website as a scrit too. its much faster to test with, and supports testing of xmpp.