XMPP Service Operators - 2022-11-03

How do I get my own ASN and ipv6 prefix?

Get $$$ first?

I was rading this https://chown.me/blog/getting-my-own-asn

and it talks about finding a local internet registry

Is that only a european thing?

if you write correct code, misbehavior is a compiler bug

nuegia.net: https://august.tw/ it is, but the bar to be European is very low

August is an LIR who clears the bar

I've had a question about the client, but the muc and the main website give me cert errors... *muc.poez.io*: S2S error from snikket.de to muc.poez.io. Error with certificate 0: certificate has expired.

Link Mauve, poke ↑

Reported to louiz’.

PSA: expat again? CVE-2022-43680

I don't think we use external entities in XMPP, but of course it is always a good idea to keep network facing code up to date

y'all use a security focused memory allocator on your servers?

they can mitigate issues like that (use-after-frees) in some cases

Sapotaceae: like jemalloc and Google stuff?

jemalloc isn't really security focused more like scudo, snmalloc, and hardened_malloc

I've name dropped the one that I heard of. nvm me :))

I have a drop in package for the latter for fedora and arch: https://gitlab.com/divested/rpm-hardened_malloc

One is from Microsoft...mkay...

One is from the "friendly" Graphene project :rolleyes:

there are some others listed here: https://github.com/daanx/mimalloc-bench#current-allocators

Sapotaceae: do you use it system wiDe or per specific app? The preload seems to be hit & miss ✏

System wide