XSF Discussion - 2020-02-28

Btw why psa doesn't visit this conference anymore?

he does, sometimes

I've just noticed that one example from the reminders protoxep I sent this week to editor@ has an error. Should I just resend the fixed version? Would that fix count as a revision even if it's still a protoxep?

marc0s, is the error critical, in a way that confuses the reader?

or is it more editorial?

revisions on ProtoXEPs are to be avoided because they are more or less under vote, so unless it makes the entire document unclear, defer that change until the XEP has been accepted

jonas’, not at all, I think, it's an attribute that should not be there, and it's not mentioned in the text at all

marc0s, yeah, then don’t worry about it

ok, perfect

thanks

As quick feedback and sorry-not-on-list, I find it weird that the server sends back all info the client has sent all the time, or did I miss a MAY?

yes, I also find that odd

would comment on that on-list

feels redundant and weird.

an empty <iq type='result'/> is perfectly valid and would probably be the right response

yeah

> revisions on ProtoXEPs are to be avoided because they are more or less under vote, so unless it makes the entire document unclear, defer that change until the XEP has been accepted understandable 🙂

> As quick feedback and sorry-not-on-list, I find it weird that the server sends back all info the client has sent all the time, or did I miss a MAY? it can be stated as a MAY, yes, this is probably some personal bias 🙂

nonetheless, I thought of having the server sending back the id, in the case the reminder has to be cancelled afterwards

Ah ok, sure then, send the id back, but the rest doesn't seem to be needed :)

that’s in fact similar to how pubsub publish works

you send a request and it sends the response without the payload, just the id attribute attached

ok, thanks a lot for the feedback 🙂

https://tools.ietf.org/html/rfc8711 Structure of the IETF Administrative Support Activity, Version 2.0

There's an article about this for those who speak baguette et fromage (or one or the other): https://www.bortzmeyer.org/8711.html

https://fsfe.org/news/2020/news-20200228-01.en.html

Was it really possible to read chat content from the link alone?

The link allows you to join, so yes

> Links to private chat groups in the proprietary WhatsApp messenger can be used to show the communication and private data of group members, even if you are not a member. That sounds like "without joining", but not quite?

Not sure exactly, maybe you can get preview or sth

larma: thanks for the link! spamming the RT here as well: https://post.lurk.org/@pep/103736700377632789

Ge0rG, larma: Chat content wasn't readable from the link alone as stated by DW: > Even without actively joining a group, its title, description, image and creator's phone number are available for all. However, upon entering a group, it is possible to also see the phone numbers of up to 256 participants, as well as other information, and adding these numbers to one's contacts can reveal their names in the app. Source: https://m.dw.com/en/whatsapp-security-flaw-over-60000-groups-still-accessible-online/a-52543414