XMPP Service Operators - 2026-06-05

> They have mostly been from magicbroccoli.de of the ones I've seen Lilith [queer-spark.org], I've established contact with mightyBroccoli, the admin of magicbroccoli.de - they seem interested in dealing with reports ↺

oh neat https://www.sentinelone.com/vulnerability-database/cve-2026-43505/

Ben: That website does not work. Firefox says something about redirection fault.

sus... works for me 🤷‍♂️ basically if you're running prosody <13.0.5 you should disable proxy65

workd for me just now in Zen Browser ✏

https://security-tracker.debian.org/tracker/CVE-2026-43505

This works ^

The Slopsite works in Torbrowser. Maybe my firefox is set up too secure for this site. 🤣

> The Slopsite works in Torbrowser. Maybe my firefox is set up too secure for this site. 🤣 that's what I was going to say... AI slop filter 😁 ↺

> sus... works for me 🤷‍♂️ basically if you're running prosody <13.0.5 you should disable proxy65 slim chance but do you you have any idea what nightly version that is, if not ig ill go in and disable it. not like i even know what it is, im just not sober rn ↺

(its midnight my time dw)

jjj333_p [pain.agency]: Maybe check if you have https://hg.prosody.im/trunk/rev/f34ad235cf3b

> slim chance but do you you have any idea what nightly version that is, if not ig ill go in and disable it. not like i even know what it is, im just not sober rn check for the patch, but anything built from may on *should* be patched ↺

eh i just disabled the module and also updated to the latest stable so its probably double fine now

thanks though

> Fri 05 Jun 2026 01:00:14 AM - EnvsBot: jjj333_p (she/they): ℹ️ Version for pain.agency: **Prosody** v13.0 nightly build 97 (2026-05-30, c4aa9b2b4787) on Linux

> Lilith [queer-spark.org], I've established contact with mightyBroccoli, the admin of magicbroccoli.de - they seem interested in dealing with reports Queer spark and joinjabber are getting hit again from that server ↺

yes, im aware, though i dont have any of the jids, and mightyBroccoli complained about not having a specific enough report

> yes, im aware, though i dont have any of the jids, and mightyBroccoli complained about not having a specific enough report I'll DM you a list of them ↺

Complaint is strong word. How should I react if the report is “I am getting hit”.

I need jids and references so that I can evaluate actions.

Cool avatar and server name

> some servers still dont support TLSv1.3 :) Not that they need to be in any rush to. Tls1.2 with a restricted cipher suite is still secure ✏ ↺

the irony of the server lobby getting hit

Martin showing off Debian like usual :p

> Cool avatar and server name someone really likes broccoli, never was a big fan of it myself :p ↺

> Martin showing off Debian like usual :p Debian is a great distro. 🙂

> > Martin showing off Debian like usual :p > Debian is a great distro. 🙂 For servers yeah, I would agree. I do think rolling release distros like Arch Linux have an edge for desktop use though. But for servers, there is a even better family of operating systems, and its called BSD >:) ↺

If I am running a Linux server though I would use Debian

I think we're drifting offtopic. 😄

We are indeed :)