XSF Discussion - 2021-01-31


  1. marek has left
  2. marek has joined
  3. wladmis has left
  4. LNJ has left
  5. alameyo has left
  6. karoshi has left
  7. marek has left
  8. marek has joined
  9. wurstsalat has left
  10. Andrzej has joined
  11. stpeter has joined
  12. stpeter has left
  13. Zash has left
  14. Maranda has left
  15. Maranda has joined
  16. tom has joined
  17. Andrzej has left
  18. alameyo has joined
  19. larma has joined
  20. emus has left
  21. tom has left
  22. stp has left
  23. moparisthebest https://burtrum.org/up/53831ae2-c479-4137-a8c6-d2007b0680df/IMG_20210130_203835.jpg
  24. moparisthebest ^ Looks like XMPP isn't the only one with, eh, styling problems cc SamWhited jonas’
  25. moparisthebest Does matrix really use pseudo-xml for markup in it's text?
  26. moparisthebest For context, this is an IRC channel I'm joined to via conversations and biboumi and those people are joined from matrix
  27. SamWhited It's a subset of HTML, not XML
  28. SamWhited https://matrix.org/docs/spec/client_server/unstable#m-room-message-msgtypes
  29. moparisthebest > Clients should limit the HTML they render to avoid Cross-Site Scripting, HTML injection, and similar attacks. The strongly suggested set of HTML tags to permit, denying the use and rendering of anything else, is: ...
  30. moparisthebest Yikes, well, nothing could possibly go wrong there right?
  31. moparisthebest > Not all attributes on those tags should be permitted
  32. SamWhited There's an open proposal for a replacement (although I think it still uses HTML? I dunno, I haven't really read it): https://github.com/matrix-org/matrix-doc/pull/1767
  33. moparisthebest It's cool how when that PR is merged all clients will be instantly updated
  34. moparisthebest Since that was the point of not doing xeps I mean
  35. Zash has joined
  36. paul has left
  37. Zash has left
  38. Zash has joined
  39. alameyo has left
  40. Zash moparisthebest: It's HTML embedded in JSON, so it's perfectly safe. Mastodon does it that way too. But XHTML in XML is impossible to secure!!!!kk!!
  41. alameyo has joined
  42. chronosx88 has left
  43. chronosx88 has joined
  44. neshtaxmpp has left
  45. chronosx88 has left
  46. stp has joined
  47. wladmis has joined
  48. govanify has left
  49. govanify has joined
  50. govanify has left
  51. govanify has joined
  52. Andrzej has joined
  53. stpeter has joined
  54. stpeter has left
  55. stp has left
  56. wladmis has left
  57. wladmis has joined
  58. Andrzej has left
  59. debacle has left
  60. govanify has left
  61. govanify has joined
  62. arc has left
  63. arc has joined
  64. govanify has left
  65. govanify has joined
  66. Andrzej has joined
  67. murabito has left
  68. murabito has joined
  69. Andrzej has left
  70. Andrzej has joined
  71. wladmis has left
  72. fuana has joined
  73. Andrzej has left
  74. Andrzej has joined
  75. stpeter has joined
  76. stpeter has left
  77. govanify has left
  78. govanify has joined
  79. Vaulor has joined
  80. marek has left
  81. Seve has joined
  82. marek has joined
  83. Andrzej has left
  84. fuana has left
  85. arc has left
  86. arc has joined
  87. Andrzej has joined
  88. wladmis has joined
  89. karoshi has joined
  90. Andrzej has left
  91. Andrzej has joined
  92. marek has left
  93. Adi has left
  94. marek has joined
  95. Adi has joined
  96. paul has joined
  97. Andrzej has left
  98. lorddavidiii has joined
  99. mukt2 has left
  100. govanify has left
  101. govanify has joined
  102. stpeter has joined
  103. stpeter has left
  104. Mikaela has joined
  105. chronosx88 has joined
  106. marek has left
  107. marek has joined
  108. wladmis has left
  109. chronosx88 has left
  110. chronosx88 has joined
  111. mukt2 has joined
  112. ti_gj06 has joined
  113. govanify has left
  114. govanify has joined
  115. jcbrand has joined
  116. mukt2 has left
  117. neshtaxmpp has joined
  118. andy has joined
  119. Andrzej has joined
  120. marek has left
  121. marek has joined
  122. LNJ has joined
  123. mukt2 has joined
  124. mukt2 has left
  125. mukt2 has joined
  126. Andrzej has left
  127. Andrzej has joined
  128. antranigv has left
  129. mukt2 has left
  130. karoshi has left
  131. karoshi has joined
  132. Andrzej has left
  133. mukt2 has joined
  134. goffi has joined
  135. Seve has left
  136. karoshi has left
  137. karoshi has joined
  138. wurstsalat has joined
  139. emus has joined
  140. Andrzej has joined
  141. karoshi has left
  142. stp has joined
  143. ti_gj06 has left
  144. karoshi has joined
  145. stpeter has joined
  146. stpeter has left
  147. Tobias has joined
  148. Daniel has left
  149. Daniel has joined
  150. mukt2 has left
  151. ti_gj06 has joined
  152. karoshi has left
  153. Daniel has left
  154. Daniel has joined
  155. mukt2 has joined
  156. Andrzej has left
  157. karoshi has joined
  158. stp has left
  159. serge90 has joined
  160. ti_gj06 has left
  161. andy has left
  162. andy has joined
  163. Adi has left
  164. Adi has joined
  165. marek has left
  166. mimi89999 has left
  167. marek has joined
  168. mimi89999 has joined
  169. Seve has joined
  170. Jan has joined
  171. ti_gj06 has joined
  172. antranigv has joined
  173. Andrzej has joined
  174. andy has left
  175. Neustradamus has joined
  176. mukt2 has left
  177. karoshi has left
  178. mukt2 has joined
  179. karoshi has joined
  180. neshtaxmpp has left
  181. mukt2 has left
  182. alameyo has left
  183. karoshi has left
  184. karoshi has joined
  185. stp has joined
  186. debacle has joined
  187. goffi has left
  188. wladmis has joined
  189. Andrzej has left
  190. Guus has joined
  191. alameyo has joined
  192. neshtaxmpp has joined
  193. moparisthebest has left
  194. moparisthebest has joined
  195. mukt2 has joined
  196. deuill has left
  197. Andrzej has joined
  198. deuill has joined
  199. eevvoor has joined
  200. mathijs has left
  201. mathijs has joined
  202. Guus has left
  203. karoshi has left
  204. mukt2 has left
  205. debacle has left
  206. lorddavidiii has left
  207. karoshi has joined
  208. Andrzej has left
  209. goffi has joined
  210. mukt2 has joined
  211. peetah has left
  212. mathijs has left
  213. mathijs has joined
  214. Andrzej has joined
  215. andy has joined
  216. karoshi has left
  217. mukt2 has left
  218. mdosch has left
  219. mdosch has joined
  220. lorddavidiii has joined
  221. andy has left
  222. mukt2 has joined
  223. karoshi has joined
  224. goffi has left
  225. Andrzej has left
  226. peetah has joined
  227. alameyo has left
  228. alameyo has joined
  229. nyco has left
  230. papatutuwawa has joined
  231. Andrzej has joined
  232. karoshi has left
  233. Neustradamus has left
  234. Neustradamus has joined
  235. tom has joined
  236. tom has left
  237. ti_gj06 has left
  238. mukt2 has left
  239. alameyo has left
  240. alameyo has joined
  241. karoshi has joined
  242. nyco has joined
  243. peetah has left
  244. stp has left
  245. nyco has left
  246. Andrzej has left
  247. mukt2 has joined
  248. ti_gj06 has joined
  249. peetah has joined
  250. ti_gj06 has left
  251. papatutuwawa has left
  252. alameyo has left
  253. nyco has joined
  254. mathijs has left
  255. Andrzej has joined
  256. mukt2 has left
  257. mathijs has joined
  258. chronosx88 has left
  259. chronosx88 has joined
  260. Andrzej has left
  261. chronosx88 has left
  262. chronosx88 has joined
  263. mukt2 has joined
  264. goffi has joined
  265. SamWhited Both are impossible to secure. reusing the layer your client is built in (possibly) internally is just a bad idea period.
  266. alameyo has joined
  267. larma has left
  268. debacle has joined
  269. papatutuwawa has joined
  270. mukt2 has left
  271. LNJ has left
  272. alameyo has left
  273. LNJ has joined
  274. ti_gj06 has joined
  275. Andrzej has joined
  276. stpeter has joined
  277. stpeter has left
  278. peetah has left
  279. nyco has left
  280. peetah has joined
  281. mukt2 has joined
  282. debacle has left
  283. deuill has left
  284. ti_gj06 has left
  285. lorddavidiii has left
  286. mukt2 has left
  287. deuill has joined
  288. papatutuwawa has left
  289. papatutuwawa has joined
  290. chronosx88 has left
  291. chronosx88 has joined
  292. Andrzej has left
  293. werdan has joined
  294. mukt2 has joined
  295. Neustradamus has left
  296. nyco has joined
  297. lorddavidiii has joined
  298. mukt2 has left
  299. alacer has left
  300. Neustradamus has joined
  301. alacer has joined
  302. werdan has left
  303. peetah has left
  304. peetah has joined
  305. peetah has left
  306. peetah has joined
  307. chronosx88 has left
  308. chronosx88 has joined
  309. papatutuwawa has left
  310. nyco has left
  311. nyco has joined
  312. mukt2 has joined
  313. paul has left
  314. larma has joined
  315. mukt2 has left
  316. Andrzej has joined
  317. chronosx88 has left
  318. chronosx88 has joined
  319. mukt2 has joined
  320. chronosx88 has left
  321. chronosx88 has joined
  322. Guus has joined
  323. nyco has left
  324. nyco has joined
  325. mukt2 has left
  326. peetah has left
  327. peetah has joined
  328. ti_gj06 has joined
  329. chronosx88 has left
  330. chronosx88 has joined
  331. chronosx88 has left
  332. chronosx88 has joined
  333. Andrzej has left
  334. lorddavidiii has left
  335. arc has left
  336. arc has joined
  337. peetah has left
  338. chronosx88 has left
  339. chronosx88 has joined
  340. mukt2 has joined
  341. peetah has joined
  342. lorddavidiii has joined
  343. Andrzej has joined
  344. arc has left
  345. arc has joined
  346. mukt2 has left
  347. lskdjf has joined
  348. ti_gj06 has left
  349. Andrzej has left
  350. fuana has joined
  351. stpeter has joined
  352. stpeter has left
  353. lskdjf has left
  354. lskdjf has joined
  355. fuana has left
  356. lskdjf has left
  357. lskdjf has joined
  358. mukt2 has joined
  359. Guus has left
  360. lskdjf has left
  361. lskdjf has joined
  362. lskdjf has left
  363. lskdjf has joined
  364. ti_gj06 has joined
  365. mukt2 has left
  366. Guus has joined
  367. lskdjf has left
  368. fuana has joined
  369. lskdjf has joined
  370. lskdjf has left
  371. lskdjf has joined
  372. Guus has left
  373. fuana has left
  374. lskdjf has left
  375. lskdjf has joined
  376. mukt2 has joined
  377. lskdjf has left
  378. lskdjf has joined
  379. stpeter has joined
  380. stpeter has left
  381. lskdjf has left
  382. lskdjf has joined
  383. moparisthebest Speaking of impossible to secure, add mam and carbons to the list https://monal.im/blog/cve-2020-26547/
  384. Zash Welcome to the club!
  385. moparisthebest The list of clients that haven't had that vuln is probably shorter
  386. Zash That list is probably the list of clients where nobody has looked yet. 🙁
  387. moparisthebest Likely
  388. Zash Ge0rG can confirm 🙂
  389. moparisthebest Anyone look at siskin yet
  390. Zash https://wiki.xmpp.org/web/XEP-Remarks/XEP-0280:_Message_Carbons#Client-Side_Processing
  391. moparisthebest Add it to the list! Any similar note for mam?
  392. lskdjf has left
  393. lskdjf has joined
  394. fuana has joined
  395. Zash https://wiki.xmpp.org/web/XEP-Remarks/XEP-0313:_Message_Archive_Management looks like
  396. mukt2 has left
  397. Zash IIRC similar issue with rosters have been a thing in the past
  398. Daniel > The list of clients that haven't had that vuln is probably shorter Conversations is on that list
  399. lskdjf has left
  400. lskdjf has joined
  401. moparisthebest Possibly alone
  402. Zash Daniel: 🥇️
  403. Zash A winrar is you!
  404. lskdjf has left
  405. lskdjf has joined
  406. Ge0rG BTW, I've recently added those lists to the wiki because of the "new" pidgin Carbons code being vulnerable
  407. fuana has left
  408. Ge0rG Maybe somebody can add the Monal link?
  409. lskdjf has left
  410. lskdjf has joined
  411. jcbrand has left
  412. Zash On it
  413. lskdjf has left
  414. lskdjf has joined
  415. Zash Done
  416. Zash Hope the link title is ok. If not, fix it! 😉
  417. Neustradamus has left
  418. Neustradamus has joined
  419. Ge0rG 👍
  420. lskdjf has left
  421. lskdjf has joined
  422. jcbrand has joined
  423. lskdjf has left
  424. lskdjf has joined
  425. fuana has joined
  426. lskdjf has left
  427. lskdjf has joined
  428. fuana has left
  429. karoshi has left
  430. lskdjf has left
  431. lskdjf has joined
  432. Yagiza has left
  433. peetah has left
  434. lskdjf has left
  435. lskdjf has joined
  436. peetah has joined
  437. peetah has left
  438. peetah has joined
  439. LNJ has left
  440. fuana has joined
  441. lskdjf has left
  442. lskdjf has joined
  443. karoshi has joined
  444. Yagiza has joined
  445. Andrzej has joined
  446. fuana has left
  447. paul has joined
  448. LNJ has joined
  449. mukt2 has joined
  450. ti_gj06 has left
  451. karoshi has left
  452. fuana has joined
  453. karoshi has joined
  454. LNJ has left
  455. fuana has left
  456. mukt2 has left
  457. LNJ has joined
  458. karoshi has left
  459. LNJ has left
  460. fuana has joined
  461. serge90 has left
  462. lskdjf has left
  463. jonas’ moparisthebest, since you mentioned it here the other day, pester your XMPP client developer about supporting the color vision deficiency fixes for '392 :)
  464. adiaholic has left
  465. Guus has joined
  466. fuana has left
  467. karoshi has joined
  468. alameyo has joined
  469. papatutuwawa has joined
  470. adiaholic has joined
  471. deuill has left
  472. ti_gj06 has joined
  473. LNJ has joined
  474. lovetox has left
  475. lovetox has joined
  476. marek has left
  477. debacle has joined
  478. mukt2 has joined
  479. marek has joined
  480. mukt2 has left
  481. fuana has joined
  482. deuill has joined
  483. lorddavidiii has left
  484. fuana has left
  485. andrey.g has joined
  486. test1 has joined
  487. lskdjf has joined
  488. flow https://www.nic.at/media/files/News_and_PR/BachelorArbeit.pdf
  489. Zash DE-crypted?
  490. Zash Ah, nm, some kind of fore-word
  491. serge90 has joined
  492. lskdjf has left
  493. lskdjf has joined
  494. lskdjf has left
  495. lskdjf has joined
  496. lskdjf has left
  497. lskdjf has joined
  498. test1 has left
  499. test1 has joined
  500. test1 has left
  501. test1 has joined
  502. test1 has left
  503. test1 has joined
  504. test1 has left
  505. stpeter has joined
  506. stpeter has left
  507. APach has left
  508. APach has joined
  509. Yagiza has left
  510. Neustradamus has left
  511. Neustradamus has joined
  512. Andrzej has left
  513. mukt2 has joined
  514. test1 has joined
  515. test1 has left
  516. mukt2 has left
  517. Andrzej has joined
  518. werdan has joined
  519. fuana has joined
  520. chronosx88 has left
  521. chronosx88 has joined
  522. werdan has left
  523. fuana has left
  524. Andrzej has left
  525. ti_gj06 has left
  526. fuana has joined
  527. mukt2 has joined
  528. Andrzej has joined
  529. fuana has left
  530. APach has left
  531. APach has joined
  532. test1 has joined
  533. test1 has left
  534. mukt2 has left
  535. test1 has joined
  536. test1 has left
  537. test1 has joined
  538. test1 has left
  539. wladmis has left
  540. wladmis has joined
  541. APach has left
  542. APach has joined
  543. goffi has left
  544. Andrzej has left
  545. eevvoor has left
  546. fuana has joined
  547. fuana has left
  548. Tobias has left
  549. test1 has joined
  550. mukt2 has joined
  551. test1 has left
  552. goffi has joined
  553. deuill has left
  554. test1 has joined
  555. test1 has left
  556. test1 has joined
  557. lskdjf has left
  558. deuill has joined
  559. test1 has left
  560. test1 has joined
  561. test1 has left
  562. moparisthebest on the topic of programatically generated avatars instead of colors from the other day, lol https://social.tchncs.de/@cark/105651953031693352
  563. moparisthebest I don't speak german but the gist seems to be gitea generated a swastika for some users cc jonas’
  564. Zash Praise the sun.
  565. mukt2 has left
  566. Zash Can't have nice things or rotational symmetry.
  567. moparisthebest 1. randomly generated avatars 2. not offending users; pick 1
  568. Zash And whatever you do, don't let the Internet train your AI!
  569. goffi has left
  570. stpeter has joined
  571. stpeter has left
  572. lovetox has left
  573. larma has left
  574. goffi has joined
  575. antranigv has left
  576. adiaholic has left
  577. adiaholic has joined
  578. alameyo has left
  579. chronosx88 has left
  580. alameyo has joined
  581. antranigv has joined
  582. Adi has left
  583. goffi has left
  584. Dele Olajide has joined
  585. Dele Olajide has left
  586. Mikaela has left
  587. deuill has left
  588. karoshi has left
  589. Guus has left
  590. Adi has joined
  591. jcbrand has left
  592. deuill has joined
  593. Lance has joined
  594. marek has left
  595. Lance has left
  596. marek has joined
  597. Andrzej has joined
  598. papatutuwawa has left
  599. andrey.g has left
  600. neshtaxmpp has left
  601. jcbrand has joined
  602. mukt2 has joined
  603. Alex has left
  604. Andrzej has left
  605. mukt2 has left
  606. alameyo has left
  607. wurstsalat has left
  608. alameyo has joined
  609. paul has left
  610. larma has joined
  611. LNJ has left
  612. Seve has left
  613. marek has left
  614. marek has joined
  615. mukt2 has joined