XMPP Service Operators - 2022-12-24


  1. kapad

    also bots use certificate's alt-names to scan around even some names don't exist in dns anymore. i think ( i don't do it yet? ) one certificate per service-group sounds good.

  2. Menel

    Wildcard. Can't scan that 😄

  3. kapad

    yes, but ... So lets say it depends on the design of the server/service what is better suited.

  4. Menel

    Yes, actually I've one server with wildcard. And another where I do http challenge with single certs for every service... So I use both 😄

  5. Trung

    not brightest idea exposing how you set up your stuff to the world though i would think…

  6. Martin

    What's the issue? You can easily check whether a wildcard is used or not for any service…

  7. Trung

    yes but the world don't need know which cert is located on which machine. when they do they can narrow their target range.

  8. Trung

    aniway it's xmas stop talkin computers LOL have a great time people 😊

  9. Link Mauve

    No why, computers are nice.

  10. Trung

    yeah xmas is off topic here. sorry.

  11. Menel

    Its not a secret, everyone connecting to my server can see it.. It's not security by obscurity. I only make it harder for people to know all my subdomains in use.. But I don't rely on *that*

  12. Trung

    i rely on you Menel. you nice guy

  13. kapad

    so then, lets try xmas through xmpp: https://youtu.be/_nZQYEk7ZqE ^ 'Depeche Mode - Personal Jesus - 500 musicians The biggest rock flashmob in Central Europe CITYROCKS'

  14. ernst.on.tour

    Sorry guys, this is XMPP-Service-Operator-MUC. Every year in december the whole hacker-world try to enter forign systems and it would be nice to get an information about a compromenticed xmpp before they knock on my system. Therefor, please keep this MUC clean for xmpp-ops Thanx

  15. moparisthebest

    What

  16. ernst.on.tour

    > What Okay, I knew, there will be never an compromiced xmpp-server 😞 😂

  17. Trung

    LOL

  18. Martin

    I know of an inputmiced server…

  19. kapad

    + also is not ``december`` but ``24/7`` :)

  20. Maranda

    Compromenticed 🤔

  21. kapad

    when the whole hacker-world try ...

  22. kapad

    it's a full time job i think ;)

  23. Ellenor Bjornsd.

    compromenticed

  24. Ellenor Bjornsd. compromentices Maranda

  25. Menel

    Its tradition that there is offtopic on Christmas in all channels.

  26. fireburner was not able to find any translation for 'compromentice' and hence has no clue, what it means

  27. Maranda

    A typo for "compromised"?

  28. Maranda

    Anyhow not sure about the OOT but I know it's Christmas...

  29. Maranda

    https://aria.im/_matrix/media/v1/download/aria-net.org/hkNpoQMlWyWhYUETgqQcUppj