XMPP Service Operators - 2021-12-17

> Rob wrote: > So what's the ratio of Prosody vs. Ejabberd deployments among the operators in this group? ... Neither. Metronome IM. 8)

Isn't that just a fork of Prosody though? It gets confusing with all the forkin' forks out there! 😋

kr1p: that can't be named a fork 12 years later...c'mon...it was back in 2010, now it's just another LUA based server

Haha, fair enough!

I still like to reach admin of jabber.ccc.de. How can I do that?

> contact addresses for jabber.CCC.de are > - abuse-addresses : mailto:jabber@ccc.de > - admin-addresses : mailto:jabber@ccc.de > - security-addresses : mailto:jabber@ccc.de > - support-addresses : mailto:there-is-no-support@ccc.de

thanks you :-)

@version jabber.ccc.de

Licaon_Kter: can't tell if that was intentional, but it's "Lua", not "LUA". It seems like you had a Lua Uppercase Accident ;)

That acronym is so deep.

It's worth doing it intentionally just to trigger the LUA police

lu(n)atic…

MattJ: I like to trigger casenazies I do

Licaon_Kter: so you are making fun of people with OCD and then pull a Godwin?

Sounds bad when you frame it like that...

At least PERL shouldn't trigger anyone around here... right?

But TOR might

second log4j CVE upgraded to CVSS 9.0: https://www.lunasec.io/docs/blog/log4j-zero-day-severity-of-cve-2021-45046-increased/

Shit .... 😭

ernst.on.tour: http://log4jmemes.com/ here u have to have a little fun in this log4j nightmare

unless you're running openfire ;)

So..., aside from the "why would someone have even wanted that feature in the first place", the other thing I really don't get about this is that I'm seeing articles going "well, it's not surprising really, because as everyone knows Java has so much cleverness in it to make every programming task practically automated, which means that this sort of WTF-I-used-a-string-and-now-something-is-downloading-and-running-foreign-code-from-some-random-server thing is basically normal in Java". I mean..., "so full of clever power-tools that it's easy to hurt yourself" was *not* an impression I ever got from Java.... I know it evolves over time..., but I thought it was still more like "something good for keeping dev teams fungible because nobody's allowed to be clever or dangerous, because if you want *that* the only escape hatch is inventing a whole other language that can be compiled down to JVM".

The best one I've read was _"it's a good thing, that Java lib feature actually worked as intended"_ :))