XMPP Service Operators - 2026-08-30

We have to stop recommending servers like xmpp.earth..

Is someone doing that?

We have to stop recommending any server with a single admin only - which are almost all servers

> We have to stop recommending any server with a single admin only - which are almost all servers the issue is the server being open to all ↺

You can't force servers to have not open registration. You can only ban them all if you feel like that. Personally I've got not much issues with them

the only issue i get from open reg servers is morph

The moment you close open registration you will lose your listing on the xmpp providers list. Which is ass

No it isn't. Why the fuck should your server be on a public providers list if you don't accept registrations

manual approval?

> You can't force servers to have not open registration. > You can only ban them all if you feel like that. > Personally I've got not much issues with them I don't think its worth it ↺

> the only issue i get from open reg servers is morph its crazy how 1 person can be so well known across the network ↺

> The moment you close open registration you will lose your listing on the xmpp providers list. Which is ass lots of servers there do not have open registration ↺

I have this crazy idea for some kind of bot that makes a newly registered user tell them who / what referred them to the server and as long as that's reasonable, approve them for federation. then some kind of threshold for the amount of rooms they join in X amount of time / how many messages they send across them would flag them and pull federation privileges. when they've just joined or got flagged, they'd be confined to a local muc kind of like a torrent site when you're trying to get an interview to join realistic timeline on that.... probably never

>> The moment you close open registration you will lose your listing on the xmpp providers list. Which is ass > > lots of servers there do not have open registration That's because of stale data then. They did require open registration in the past at least. The whole point of that website was to be *automatically* included in apps, so one can choose from them on install. ↺

No, open IBR is only required for "A" grade listing on that page. And yes, it is a very poor site to use for server recommendations because it was never ment for that.

> I have this crazy idea for some kind of bot that makes a newly registered user tell them who / what referred them to the server and as long as that's reasonable, approve them for federation. then some kind of threshold for the amount of rooms they join in X amount of time / how many messages they send across them would flag them and pull federation privileges. when they've just joined or got flagged, they'd be confined to a local muc kind of like a torrent site when you're trying to get an interview to join > > realistic timeline on that.... probably never ye thats too crazy ↺

if you are that worried about bots and trolls and whatever you dont like, the easiest fix would be to just make whitelist for trusted servers instead of making everyone follow your rules

I think even in this case the guys whos spreading that muc isnt really a problem since its just 1 guy

> if you are that worried about bots and trolls and whatever you dont like, the easiest fix would be to just make whitelist for trusted servers instead of making everyone follow your rules that'd just people who want an account with my domain / name / responsibility attached to it. not tryna check behind everyone's ears who just passes through ↺

>> if you are that worried about bots and trolls and whatever you dont like, the easiest fix would be to just make whitelist for trusted servers instead of making everyone follow your rules > that'd just people who want an account with my domain / name / responsibility attached to it. not tryna check behind everyone's ears who just passes through ahh ↺

> No, open IBR is only required for "A" grade listing on that page. And yes, it is a very poor site to use for server recommendations because it was never ment for that. just have client devs host an official server 🧌 ↺

in all seriousness monocles, conversations, and movim do afaik (at least if you count movim's official instance) ✏

>> No, open IBR is only required for "A" grade listing on that page. And yes, it is a very poor site to use for server recommendations because it was never ment for that. > just have client devs host an official server 🧌 they already do ↺

> the only issue i get from open reg servers is morph Morph? ↺

its extremely outdated, but heres a good brief on morph https://www.moparisthebest.com/morph.en.txt

interestingly theyre now transfem? will get angry at you for using they/them for them, and tells me constantly that I behave like a man and that im he/him in denial and whatnot

morph is indeed trans

> its extremely outdated, but heres a good brief on morph https://www.moparisthebest.com/morph.en.txt its not outdated ↺

It is outdated, and just feeds into the on-going bullying of that person, which is the intent of that text.

It's actually also irrelevant. I hope we moderate on what people do in the chat, not what they are

Honestly as soon as I read "gay-European values" I assumed it was written by a 12 year old or it's intended as satire

i have half a mind sometime to sit down and write an actual briefing text that provides the intformation you dont wanna have to say every 4 days but in a probably more clinical manor

and will complain to muc moderators using long meaningless paragraphs

anyways the only reason i mentioned identity is i feel like a core part of the experience im getting from morph is constantly being I'm not trans enough to satisfy them and i'll just get floods of comments like these > Wed 26 Aug 2026 12:04:57 AM  - teie: Closed in fear again. Angry like a boy and act like one instead of stopping own bullshit. What a shame!

> morph litereallt follows people arround on xmpp to harass them also this ↺

> It is outdated, and just feeds into the on-going bullying of that person, which is the intent of that text. morph literally follows people arround on xmpp to harass them ✏ ↺

has no respect for your MUC, small MUCs especially are vulnerable

the rooms i moderate all have to be moderated at all times, including disabling muc pms because its just a constant onslaught (aside from the random 2 week breaks)

sometimes one just wakes up to 10 paragraphs about how evil someone on your muc is

> has no respect for your MUC, small MUCs especially are vulnerable i've interacted with them and it seems that they legitimately think theyre entitled, as if its town square ↺

> sometimes one just wakes up to 10 paragraphs about how evil someone on your muc is im that someone ↺

I once joined an MUC morph was in and was literally told to leave despite not even saying a word

morph will also make everything sexual and write long paragraphs about it

its been a bit, (mucs in moderated mode helps A LOT) but for a solid while I was seemingly morph's fascination, they literally were spamming my muc 18 hours a day

> morph will also make everything sexual and write long paragraphs about it ive not had that one ↺

morph got too comfortable on my MUC ig

when i asked to stop, I was called a fascist nazi and all of those other buzzwords

now I'm a "genocidal psychopath"

and I forgot what else

Wow...

morph is arguably as bad as superalex on matrix was, and thats a case that ended in prison (i think on paper i could be considered a victim but i dont count it)

but whatever, its just one person, which clearly isnt in a good state of mind, so I don't think its that bad

"We'll all miss him when he's gone."

them*

The person people call morph is annoying, but she unintentionally exposes a lot of weaknesses in the xmpp ecosystem, both in regards to lacking moderation features (many that we do have now are a response) and the neglect of server admins to vet registrations in some shape or form.

if its just morph its fine, what really hurts the network is actual bot swarms

> but whatever, its just one person, which clearly isnt in a good state of mind, so I don't think its that bad it was pretty bad for me because for a while i had a bridge setup in my muc that meant I couldnt make it moderated, and i could literally full time sit and play whackamole with hours, possibly for a full like 18 hours if i was willing to sit through it that long ↺

even on discord there isnt much you can do moderating an attack from multiple accounts

> if its just morph its fine, what really hurts the network is actual bot swarms mod_muc_limits and mod_throttle_unsolicited, and i've literally never seen them again ✏ ↺

>> but whatever, its just one person, which clearly isnt in a good state of mind, so I don't think its that bad > it was pretty bad for me because for a while i had a bridge setup in my muc that meant I couldnt make it moderated, and i could literally full time sit and play whackamole with hours, possibly for a full like 18 hours if i was willing to sit through it that long even if you do make it moderated morph will follow you to other MUCs ↺

I never had a swarm on my server

> if its just morph its fine, what really hurts the network is actual bot swarms It doesn't have to be bot swarms. Just imagine 10 people like that and most public mucs would become unusable. That is clearly an issue of the state of the network. ↺

> even if you do make it moderated morph will follow you to other MUCs i only had one muc that morph would follow me to and its just one i lurked in so i left ↺

my server was used for spam but now it's invite only

> It doesn't have to be bot swarms. Just imagine 10 people like that and most public mucs would become unusable. That is clearly an issue of the state of the network. the scary part is xmpp moderation is in my opinion some of the best ive seen, outside the accessibility of matrix banlists or some of the third party discord/tg bots ↺

and theres no reason we couldnt have some of those third party (i mean i guess all of this is third party) bots if we really wanted

its not hard to make an xmpp bot

ive seen lots of them

I think I alr saw Grok in an MUC

> its not hard to make an xmpp bot slixmpp is great, its as easy as any other platform ↺

As long as server registration is kept wide open and negligent server operators are not penalized for that, ban evavion will always be trivial and moderation tools will have very little impact.

That's the trade off for an open platform

> I think I alr saw Grok in an MUC Yeah I hosted that before they decided to spike their prices

There are planty of ways to keep a platform open without having "no questions asked" registrations. ✏

> I think I alr saw Grok in an MUC i'm the dev of several small xmpp bots, though the one youre thinking of is prob sunglocto's https://github.com/jjj333-p/twitterbot-xmpp https://github.com/jjj333-p/gemini-xmpp https://github.com/jjj333-p/ytdlp-xmpp and https://github.com/jjj333-p/koishi isnt a small bot but you can lump it in too ↺

There are plenty of ways to keep a platform open without having "no questions asked" registrations. ✏

> even on discord there isnt much you can do moderating an attack from multiple accounts There are a number of protections discord offers that XMPP doesn't. Such as requiring accounts to have verified emails or phone numbers, or even age verification. Or even just blocking users across channels (which isn't possible with semi-anonymous MUCs) ↺

Not everything they do is good of course, but just throwing up your arms and claiming nothing can be done like most of the larger public xmpp server admins do is clearly also bad.

>> even on discord there isnt much you can do moderating an attack from multiple accounts > > There are a number of protections discord offers that XMPP doesn't. Such as requiring accounts to have verified emails or phone numbers, or even age verification. Or even just blocking users across channels (which isn't possible with semi-anonymous MUCs) across channels is possible to xmpp. Thats what the various rtbl are for example ↺

I've been considering a phone number verification service for MUCs

You could just build on the captchas we have now

> We have to stop recommending any server with a single admin only - which are almost all servers actually I recommend everyone use a single-admin server https://www.moparisthebest.com/images/xmpp-server-admin.jpg ↺

> You could just build on the captchas we have now captchas haven't been useful in a decade or more, literally easier for a computer to solve than a human ↺

Hence why I said build on

dead end

>> We have to stop recommending any server with a single admin only - which are almost all servers > > actually I recommend everyone use a single-admin server https://www.moparisthebest.com/images/xmpp-server-admin.jpg If someone asks for a server then they are not going to self host