XMPP Service Operators - 2024-01-07


  1. hook

    I used XMPP way back, but then stopped due to spam (and Google fucking it all up). Now I started running my own private (family, potentially friends) XMPP server. So I wonder if this channel is something that makes sense to follow or is this more for ops of bigger servers?

  2. jonasโ€™

    hook, if it isn't too much work for you to follow here, it doesn't hurt. Sometimes people will point out grave security issues, or (if you communicate with other domains) they may (try to) tell you here that your certificate has expired (because they can't reach you directly anymore because of the expired cert) or things like that.

  3. hook

    jonasโ€™: awesome, thanks.

  4. MattJ

    hook: out of curiosity, are you using Snikket for that, or something else?

  5. hook

    > hook: out of curiosity, are you using Snikket for that, or something else? Metronome on YunoHost

  6. hook

    It comes bundled with YunoHost and is enabled by default

  7. MattJ

    ๐Ÿ‘

  8. hook

    How's the spam situation nowadays?

  9. Menel

    Private it is non existant for me. There is sometimes a bit spam in open channels like this one

  10. Menel

    If you don't publish your jid everywhere you shouldn't get any spam. (I don't for nearly 10ears now)

  11. hook

    > If you don't publish your jid everywhere you shouldn't get any spam. (I don't for nearly 10ears now) And if I did? How is anti-spam nowadays?

  12. hook

    Last I used it, the best I had was Gajim' 12x12 antispam plugin ๐Ÿ˜…

  13. hook

    I know there are some XEP..

  14. Menel

    As admin you should be able to use something server side. I don't know anything about metronome, prosody has a bunch of models like https://modules.prosody.im/mod_admin_blocklist.html or the firewall module. And most modern clients support xep191 be sure your server has it too... (https://prosody.im/doc/modules/mod_blocklist for prosody)

  15. Menel

    I just checked, looks metronome supports blocklists

  16. fjklp

    ejabberd has https://docs.ejabberd.im/admin/configuration/modules/#mod-block-strangers which is a good way to frustrate users since they cannot receive private messages

  17. MattJ

    hook: https://blog.prosody.im/simple-anti-spam-tips/ has some advice and links, not all Prosody-specific

  18. hook

    Thanks for the tips, will read up on it before publishing my new JID

  19. MattJ

    Email has demonstrated that if you publish your address openly, you can expect spam. Moreover, the tools email mostly relies on (content filtering) works less well with instant messaging, where the initial message can be as innocent as a simple "hi". That said, we have other advantages over email, such as the roster, server-side block lists, and good collaboration between server operators.

  20. Ellenor Bjornsd.

    demons

  21. rewtkid

    daemons

  22. Menel

    Darmok and Jalad at Tanagra

  23. mkf

    potatoes.

  24. hook

    MattJ, thatโ€™s true. Iโ€™ll think about it a bit more. Iโ€™m thinking perhaps obfuscating the contact using <table>

  25. hook

    I wonder why spam does not seem to be such an issue on Matrix though โ€ฆ ๐Ÿค”

  26. Menel

    It is. Much more then here anyway, why not more then it currently is? I don't know.. The spam bot there is quite good, because it is so easy to spam, I think

  27. hook

    Menel, so more spam on Matrix than on XMPP? Hmmm, then it seems matrix.org is doing a pretty good job at cleaning up.

  28. rewtkid

    idk all im gonna say is if you see a guy in your muc asking about his nord ce3 lite or pixel 4a just know its over for you and your chat.

  29. badmuff

    Can you explain?

  30. rewtkid

    theres this guy that goes around every platform basically spamming every chat

  31. rewtkid

    and hes even on xmpp now

  32. badmuff

    Does riddim or rtbl be a solution?

  33. Guus

    From my observations, there are two types of spammers active in XMPP: generic ones, that mostly try to poll many, many one-on-one addresses, by sending it a 'hello' message. These bots sometimes send generic spam messages. The second type of spammers are a few individuals that misbehave in MUC rooms: they post obscene material, or ask the same question over and over. To me, it appears that this is a very small group of people that on-and-off are _very_ persistent. The amount of spam that _you_ receive is very dependent on the social bubble that you're in. Some people see a lot of spam, others do not see any.

  34. hook

    I abandoned my (public) JID at Gabbler.org because I was receiving so many random hello/invites that if I log in, several clients just canโ€™t deal with it (at least not graciously)

  35. chunk

    I don't ever see any spam, last time I saw spam was months ago

  36. hook

    chunk, but you donโ€™t publish your JID publicly, right?

  37. chunk

    I do actually

  38. chunk

    all over the place, because I prefer people PM me if they need to, than use muc private chats

  39. hook

    That gives me hope, thanks :}

  40. chunk

    i have heard a couple of times recently though, your story included, about stories of people being harassed via inbox

  41. chunk

    yw

  42. badmuff

    I can confirm, same behavior to me.

  43. MattJ

    hook: we often get room spam reaching XMPP via bridges from Matrix, and such spam was one of the reasons for libera.chat terminating the Matrix IRC bridge, so I've seen little evidence that Matrix is somehow tackling spam better

  44. Licaon_Kter

    rewtkid: old news oneplus :)

  45. ThUnD3r|Gr33n

    hi all :)

  46. ThUnD3r|Gr33n

    Licaon_Kter hi :)

  47. hook

    Hmmm, is XEP-0258 (Security Label) used in practice in chats much?

  48. cal0pteryx

    hook, some companies use it, some gov institutions use it, military uses it

  49. hook

    What does it do in practice?

  50. hook

    TLDR ๐Ÿ˜…

  51. Menel

    Read the introductions first paragraph https://xmpp.org/extensions/xep-0258.html#intro

  52. MSavoritias (fae,ve)

    > Menel, so more spam on Matrix than on XMPP? Hmmm, then it seems matrix.org is doing a pretty good job at cleaning up. https://discuss.grapheneos.org/d/9344-chat-platforms graphene was using matrix but their rooms kept getting spam brikked so they switched to discord.

  53. MSavoritias (fae,ve)

    as in somebody came in exploited the matrix architecture and made the rooms unjoinable.

  54. Martin

    How can you brick a groupchat on Matrix? ๐Ÿ˜ณ

  55. hook

    > How can you brick a groupchat on Matrix? ๐Ÿ˜ณ Was in one. Too many messages (at least for the frontend) to process, basically DoS

  56. hook

    > Read the introductions first paragraph > https://xmpp.org/extensions/xep-0258.html#intro ๐Ÿ‘

  57. hook

    Shouldn't the read status be synced across (modern) clients nowadays?

  58. MSavoritias (fae,ve)

    for group chats it doesnt afaik.

  59. Menel

    For public group chats it doesn't

  60. hook

    Aaah ok

  61. hook

    I assume good reasons

  62. chunk

    --------- ---- [THE ARMADA] ---- ------------------ ---- Join Our MUC: xmpp:the-armada@muc.xmpp.bot?join *Do Any Programming?* ?? *Collaborate With Us For The Lulz* HEY ALL! Want To Officially Join THE ARMADA? Join that ^above^ chatbox url and bring some curly braces or \t or angle brackets at least ๐Ÿ˜Ž๐Ÿ‘Œ๐Ÿ“ฆ

  63. chunk hopes he's not banned

  64. Menel

    You're in the wrong room for that. You had sever problems recently? End of the year? Someone couldn't find a room (or connect his account) and your server ip was unresponsive

  65. savagepeanut

    > Shouldn't the read status be synced across (modern) clients nowadays? This is something that I wish was better too

  66. MSavoritias (fae,ve)

    Agreed.

  67. fff

    Hi people. Is there a summary of whats state of the art in xmpp world and maybe even why?

  68. MattJ

    Mmm, that seems a very broad question... anything in particular you are interested in?