XSF Discussion - 2021-03-10

It less healing than chronic stress. I think at some point we all experience this, especially this year

Yes, I understand

We weren’t accepted for GSoC.

Ah. That mail was 2 days ago and was just in my spam since then, so Arc’s probably already said that. Nevermind :)

Yep, last night. Ignore me.

I think at least we should define a little internal timeline to approach the topic next year earlier and also to retrieve more ideas/possible projects

Also regarding elections: Welcome Heiner!

According to my calendar it is meeting time

Kev: apparently a lot of people did not get accepted this year.

Does that mean Google is full of interns?

It appears that they focused a lot more on university based projects, which to be honest most of us can't stand because it's usually a professor mentoring his own students without seriously considering anyone they don't already know

Honestly I've lost a lot of interest since they shut down the high school program again.

It is what it is, I guess. Leaves you more cycles for gathering sponsorship etc. for running an Outreachy.

Yup.

I would really love to build an outreachy for high school students. The program cost very little.

We did not give the high school students money. But we had high school students, especially girls, extending Prosody and several spent several weeks improving xmpp webchat

From a diversity standpoint I think that focusing on the younger ages was far more effective. But there are also a lot of rough edges with the program, most notably it was not really designed for group participation

GSoC, GCI, or Outreachy?

Several of the schools built their own clubs, even had their own internal leaderboards. And I don't know if there's a causal link, but those same schools had both the highest female participation and the highest non-white participation in the US.

GCI

Google officially killed GCI last year. Which was shocking and ridiculous given how little it cost to run.

wow I was scared google had killed CGI but I just misread

No, your perl scripts are safe.

it's only a matter of time though

I was one of the people that went city to city, going to primarily STEM schools promoting GCI. I still have boxes of t-shirts, stickers, pens, flash drives, etc that Google sent me to distribute to these schools.

google has killed CGI a decade ago, but Amazon has resurrected it

it's called "serverless" now! (please no OVH jokes)

Something happened with OVH? TBH Flosoft put me off OVH years ago.

Kev, … did you miss the thing where one of their DCs burnt down yesterday?

It’s a safe bet.

I still get emails from these schools asking me to schedule a talk in the fall, months ahead of time. And these are mostly presentations in the auditorium or the library, which the kids who are interested come to during their lunch breaks, and we're highly dominated by a young woman. Like a 9:1 ratio girls to boys.

UK news is probably still dominated by the oprah interview. so the ovh news just went under

You brits in your royal family, we are so much more evolved culturally since we have the Kardashians 😅

Oprah? Isn't that some US talkshow?

Yeah Oprah did an interview with members of the Royal family and the brits lost their goddamn minds. Because of course it is improper for members of the royal family to do a candid interview about their emotional state and family trouble

Like Opera, but for the people less close to education?

Lol

I use celsius, the metric system, and play rugby but hate American football. I'm about the least American American you'll ever meet. And even I find the whole situation ridiculous.

I think you’ve just devoted more words to it than any Brit I’ve spoken to.

The only brit I've talked about it to is a pretty hard-core Republican, so she's basically like "Canada can keep those two, and we should throw the rest of them out on the street" and that's about the extent of the discussion :)

Actually I was referring to the Kardashians as ridiculous but I guess it's all the same thing 😋

Hey Sam fellow American, how do you feel about the Kardashian-Kanye break up? And what do you think that means for the future of hip hop? 🙄

I literally didn't know this was a thing until just now ¯\_(ツ)_/¯

My neighbors literally sat in the front yard, smoked dope on the couches around the fire pit, and talked for over an hour about how good it was for Kanye to leave the abusive relationship

This is America https://youtu.be/VYOjWnS4cMY

oh man, that video was so good (like everything Donald Glover does). Up there in terms of my favorite music videos for sure

Absolutely, it's great. As is this https://youtu.be/loUQuSy57Is

It's great because it's so true.

haven't seen this one, looking

And it's 9:20 and we don't have board members, what's going on?

I'm ~here

That is two of us

ralphm, dwd

(randomling pinging board members I know of)

That is the four of us. But if we were to start a half an hour late, as in now, we might run into the council meeting

the council meeting is over already

(that starts at 16:00Z)

Ah. Ok

Well I guess we're going to need to discuss a new meeting time on the list

But yeah I have been thinking about starting a new independent teem program for high school students. Something not attached to Google

I ran a pilot in 2009 that Google helped fund and that was pretty successful. The only reason we didn't continue was Google started GCI in 2010

Out of curiosity but on the same as topic, do we have a good webRTC video chat app that can be incorporated into a website?

jitsi-meet in an iframe?

I've always found jitsi-meet to be a bit awkward

Is that something we can just plug in and go?

arc, for groups or 1:1 ? I believe movim does 1:1

No multi-party

so 1:1 ? then movim

I think that was “No, 1:1” not “No 1:1"

But could be wrong :)

arc, DID YOU MEAN TO PUT A COMMA THERE OR NOT :D

No, I need multi-party

then currently I think the only option is jitsi meet, soon Dino though...

https://www.youtube.com/watch?v=c4Y7SV741xE

Sam: hmm, was CVE-2021-27918 encountered when doing something XMPP-related?

yes; I didn't actually look, but I think I introduced it in the first place too though when I added the NewTokenDecoder stuff specifically to make some XMPP things easier, so oops.

what’s CVE-2021-27918?

mathieui: golang XML security vulnerability in the latest release

oh ok, couldn’t find it after a quick search

It's just a small DOS; it's possible to get the XML decoder into an infinite loop.

With malformed XML

mathieui, https://security.archlinux.org/CVE-2021-27918

Search engine helpfully showed me CVE-2020-27918 instead.

same

Hey arc, I know I offered to help you - but I think its still a bit unclear to me what I should do exactly 🙁 😬️ A little advise or break down would be helpful. You said we need to look for new sponsors. You want me to scrape through the internet for project sponsors in our direction?

No, the first step is figure out what our existing sponsorship policies are

Maybe ask stpeter, Alex, previous board members, search the mailing lists for relevant mentions?

okay, thanks

and check if https://xmpp.org/community/sponsorship.html has any useful info

thx

but does this apply to GSoC ?

(I have no idea what sponsorship info you're looking for, but that page had 'sponsor' in the title and was the most relevant-looking page I could find in the seconds I spent looking)

Yes, no critics that you posted that, but was a follow-up question