XSF Discussion - 2019-07-12

we need to mandate this for Avatars: https://en.wikipedia.org/wiki/Better_Portable_Graphics 😁

> Fabrice Bellard

I’m on board

and of course they wrote a decoder in JavaScript. ✏

And you most probably can pipe the compressed data through your hardware HEVC decoder

seems peter is not answering by email

ok maybe i give him another week, maybe he is on holiday or something :)

jonas’, why is the HTTP API discouraged for search.jabbercat.org ?

lovetox: it's harder to rate limit

And easier to abuse.

Not that xmpp is particularly easy to rate limit...

I've opted for the xmpp api for yaxim, with a bot serving a cache of the data on yax.im, Daniel opted to use the HTTP api so he doesn't leak users' JIDs but instead IPs

yeah i will implement both but default to the http

Also those databases queries should be dirt cheap. I don't really understand the worry about rate limiting

Something something full text search

I mean every word press blog is more expansive for a db and you usually don't rate limit that

a plus for the xmpp api is, i dont have to deal with proxy

Daniel: this is also why wordpress completely melts down if you happen to be mentioned on any news aggregator

Daniel, it’s just a precaution

I don’t expect to have to do any type of fun rate limiting outside of specific attacks, but I like to have thought about that.

lovetox, downside of XMPP is, the server sees the user’s JID + their search terms

with HTTP, it only sees the users IP + search terms

make of that what you will :)

Technically a client could use an sasl anonymous connection to do the query :-°

I could offer that indeed.

most SASL ANON services won’t let you s2s

for obvious reasons

and has much overhead

that, too

I could do things like use a HMAC’d part of the IP prefix as the local part to do rate limiting through that or something

anyways, gotta run

One of my recent projects: https://hacks.mozilla.org/2019/07/add-ons-outage-post-mortem-result/

hey stpeter hello, i wrote you an email some days ago regarding the state of the jabber.org server, did you receive it?

stpeter: thanks for the link. Keep up the good work!

I did! Now I just need to reply. $dayjob is bleeding into $eveningjob these days.

Ouch

This is my job. ;-)

stpeter: please implement fast-forward functionality in video calling

Haha

You'd become rich and famous. Or you'd have been killed by the time travel police.

Has anybody used elasticsearch's XMPP plugins already?