XMPP Service Operators - 2026-05-20

riseup.net, fix your email server

Hi! This is the MAILER-DAEMON, please DO NOT REPLY to this email. An error has occurred while attempting to deliver a message for the following list of recipients: [redacted]@riseup.net: 550 5.3.7 Spam is not welcome Below is a copy of the original message:

You sending spam again, Tom? ;)

(I'm not affiliated to any of this, just making unhelpful comments from the sidelines)

no, they have their mailserver misconfigured to perm-reject all incoming mail instead of a temporary fail

tom, I haven't exactly heard good things from riseup.net tbf

besides this is email, I don't think riseup.net has an XMPP server?

They used to, but closed it over concerns related to metadata storage on their servers.

Which, given their specific threat profile is fair enough 🤷

(It was specifically about roster storage and thus a social graph)

it also barely worked. i remember recieving spam but not being able to message back id just get connection errors

so good riddance as far as im concerned

> tom, I haven't exactly heard good things from riseup.net tbf Details?

update your nginx's again https://xcancel.com/nebusecurity/status/2057071579876753643

at this point maybe just run your package manager update command in a while loop...

moparisthebest, to be clear, afaict there is nothing to update to right now? They announced the vulnerability, but no patch and no release has been made.

it seems they reported it and nginx either will shortly or has patched it but I haven't seen anything concrete yet :(

> update your nginx's again https://xcancel.com/nebusecurity/status/2057071579876753643 use OpenBSD httpd!!! ↺

*sigh* absolutely no reason to believe that has less undiscovered CVEs in it... can we just not here

it's not a CVE if it's undiscovered 😉

I think that's what I said