XSF Discussion - 2019-06-28

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-20843 -- this expat vulnerability would probably get more attention if it was called "billion dots"...

praise the fuzzer

Now the question is if other XML parser suffer from a similiar issue

flow: The multiple colon thing?

praise the fuzzer and pass the ammunition

Zash, yep

> XEP-0410 Damn I didn't noticed that we're above 400 now

oh, the whole MIX package is also 04**

yes, and we have sadly missed to do a "XEP-0404 Not Found"

That's 28 no?

right, we should have redirected there.

;)

https://mailarchive.ietf.org/arch/msg/ietf-announce/illMk4Mi2aB94Gj4ubwY3ngZbEU Common logging format of interest to folks here?

that is a super fancy rendering of a Draft: https://quiclog.github.io/internet-drafts/draft-marx-quic-logging-main-schema.html

they stole our new XEP style! ;)

!

and here people say XMPP is behind on fanciness!

I sorta imagined PCAP as logging format at some point.

pcap is binary though

reminds me I need to look into how much you can twist CAP (Common Alerting Protocol, XML based) into conveying (IT) infrastructure alerts

pcap is binary, true. reading traces in wireshark isn't that bad, I'm just missing some way to braid in normal log messages.

can lnav read pcap?

being python (I think?) and there being scrapy, I suspect there may be a way to make that work

Hehe, why not?

Who edits https://xmpp.org/software/libraries.html ? I would like to see "libstrophe" (http://strophe.im/libstrophe/) for the C programming language there. There is only strophe.js, the JS variant of it.

I think you can put in a PR on the GitHub

debacle: actually it's there, but it lacks timestamp (has to be bumped every year) therefore it's not included -- you can do PR for this file: https://github.com/xsf/xmpp.org/blob/master/data/libraries.json

debacle, https://github.com/xsf/xmpp.org/tree/master/data#software-directory-readme

I always have difficulties with github. Either I don't like it or they don't like me :-)

you can also send a patch to me ;)

jonas’, that sounds better ;)