XMPP Service Operators - 2022-05-04

Hmmmmm is this message federating properly?

Amolith: pong?

Nice. My server's been down for multiple days because of issues with LXC and I just finished moving it to a VPS

Amolith: welcome back

Or issues with Erlang. Still not sure which, but from what I can tell, it's out of my control 😛

Amolith: so you've built from source afterall?

Licaon_Kter, nope, I basically just picked my stuff up out of LXC and dropped it on a VPS

Oh

also im planning to host my server on VPS, is there any privacy issues from hoster?

building from source would require migrating from debian 11's version all the way up to current and i'd rather just stick with what i've got now

myjabber1337: they could see all unencrypted data, of course

Amolith: try gentoo, so :)

old server was up-to-date when it was working so i didn't have to mees with downgrading or anything like that either. dump the database, tar some dirs, copy to server, untar, import, mostly done ✏

old server was up-to-date when it was working so i didn't have to mess with downgrading or anything like that either. dump the database, tar some dirs, copy to server, untar, import, mostly done ✏

> Licaon_Kter написал: > myjabber1337: they could see all unencrypted data, of course is there any technique that prevent hypervisor access to data?

In theory yes, that ~snake-oil~ I forgot its name lol

i mean, of course if i use e2e encrypt hoster will suck, but he will see that im hosting XMPP server

Yes, rosters, bookmarks, all sorts of stuff. As expected.

As always, you have to trust (to a degree) or go somewhere else.

is there any solution that will encrypt volumes in way that mean if hypervisor always logging and debuting VM and still hadn't access to my data?

They sell that promise...yes...but, can they really not read?

i heard about homomorphing encryption that making possible to calculate encrypted data on third party machines, is there any similar solution to execute applications on third party server without his knowledge about this?

myjabber1337: I'm pretty sure homomorphic encryption isn't advanced enough yet for such complex applications as xmpp servers

the best you could do is host the server locally, while tunneling connections through the vps

the vps would still see the remote endpoint addresses, that's how IP works

so the metadata of who connects to you and vice versa is probably unhideable in clearnet, as well as the fact that the connections are xmpp

for the latter, you could obfuscate port numbers using SRV and never connect to other servers using obvious xmpp port numbers, but that cripples federation

in conclusion, just run an onion service and forget about the vps 🙃 ✏