Interesting. Is this the problem of using full xml librarys? Or is that something else
jcbrandhas joined
arcxihas joined
Steve Killehas left
adiaholichas left
sbachhas joined
archas left
archas joined
restive_monkhas left
adiaholichas joined
mathijshas left
mathijshas joined
mathijshas left
mathijshas joined
mathijshas left
mathijshas joined
mathijshas left
Fishbowlerhas left
Fishbowlerhas joined
MSavoritias (fae,ve)has joined
Kevhas joined
restive_monkhas joined
adiaholichas left
mathijshas joined
adiaholichas joined
Louis
> Kev: right partial compliance is common. For example, everyone claims to support data forms just because they have a parser for it, maybe use it in ibr. But the xep allows for data forms being send in messages and tracked by thread ID... I've not found a client that supports that well yet. So do they "support" data forms or not?
I would need the feature for staff to report.
archas left
archas joined
mjkhas joined
Kevhas left
krauqhas left
krauqhas joined
florettahas left
adiaholichas left
florettahas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
krauqhas left
krauqhas joined
arcxihas left
xnamedhas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
marchas joined
Tobiashas left
Tobiashas joined
Kevhas joined
lskdjfhas joined
xeckshas joined
adiaholichas joined
vanitasvitaehas left
vanitasvitaehas joined
davidhas joined
davidhas left
adiaholichas left
archas left
archas joined
Kevhas left
*IM*has left
jgarthas joined
mathijshas left
mathijshas joined
rionhas joined
xnamedhas left
xnamedhas joined
Alexhas left
Alexhas joined
mathijshas left
mathijshas joined
emushas joined
adiaholichas joined
adiaholichas left
neshtaxmpphas left
neshtaxmpphas joined
*IM*has joined
Kevhas joined
kurisuhas left
kurisuhas joined
vanitasvitaehas left
vanitasvitaehas joined
serge90has joined
Mikaelahas joined
brunrobehas joined
Dele Olajidehas joined
Kevhas left
vanitasvitaehas left
antranigvhas joined
vanitasvitaehas joined
antranigvhas left
gooyahas joined
Mjolnir Archonhas joined
djorzhas joined
Marandahas joined
neshtaxmpphas left
neshtaxmpphas joined
Paganinihas joined
Steve Killehas joined
florettahas left
papatutuwawahas joined
Tobiashas left
Tobiashas joined
florettahas joined
Steve Killehas left
Tobiashas left
Tobiashas joined
Kevhas joined
adiaholichas joined
xnamedhas left
gooyahas left
gooyahas joined
larmahas joined
adiaholichas left
flow
Menel, I wouldn't say so, the advantages of using an xml library is IMHO always outweigh the drawbacks
iinkhas left
Kevhas left
xnamedhas joined
djorzhas left
gooyahas left
gooyahas joined
Tobiashas left
Tobiashas joined
robertooohas left
kujiuhas left
gooyahas left
Paganinihas left
Louishas left
Tobiashas left
Tobiashas joined
robertooohas joined
Tobiashas left
Tobiashas joined
serge90has left
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
Alexhas left
mhhas left
Alexhas joined
Louishas joined
mhhas joined
Kevhas joined
Kevhas left
kujiuhas joined
Tobiashas left
Tobiashas joined
antranigvhas joined
mimi89999has left
mimi89999has joined
Tobiashas left
Tobiashas joined
gooyahas joined
mathijshas left
mathijshas joined
mhhas left
Tobiashas left
Tobiashas joined
antranigvhas left
mathijshas left
mathijshas joined
djorzhas joined
jcbrandhas left
jcbrandhas joined
jcbrandhas left
jcbrandhas joined
gooyahas left
gooyahas joined
Titihas left
Sevehas left
Sevehas joined
Titihas joined
eevvoorhas joined
jcbrandhas left
jcbrandhas joined
iinkhas joined
Kevhas joined
arcxihas joined
iinkhas left
adiaholichas joined
lovetox2has joined
moparisthebest
Tobias: same one we talked about in may right? https://bugs.chromium.org/p/project-zero/issues/detail?id=2254
Kevhas left
moparisthebest
Gloox is still vulnerable and the dev hasn't replied to email https://camaya.net/gloox/changelog/
moparisthebest
(luckily?) The only XMPP client we found that uses it is https://github.com/pulkomandy/Renga which, due to targeting Haiku, has limited users, but they are all still vulnerable to this day if using the wrong server
xnamedhas left
marc0shas left
marc0shas joined
moparisthebest
It also likely doesn't have a "install this code" command like zoom...
konstantinoshas left
vanitasvitaehas left
antranigvhas joined
antranigvhas left
Louishas left
vanitasvitaehas joined
mehas joined
xnamedhas joined
Titihas left
iinkhas joined
Titihas joined
lovetox2has left
adiaholichas left
gooyahas left
Louishas joined
Louishas left
vanitasvitaehas left
arcxihas left
Kevhas joined
*IM*has left
Alexhas left
Alexhas joined
adiaholichas joined
papatutuwawahas left
*IM*has joined
Kevhas left
florettahas left
karoshihas left
karoshihas joined
singpolymahas left
Guus
Did someone create a set of susceptible XML snippets? That would be handy to implement more testing.
Titihas left
papatutuwawahas joined
arcxihas joined
Calvinhas joined
adiaholichas left
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
Tobiashas left
Tobiashas joined
adiaholichas joined
Titihas joined
Calvinhas left
iinkhas left
Steve Killehas joined
raghavgururajanhas left
singpolymahas joined
iinkhas joined
iinkhas left
Tobiashas left
Tobiashas joined
adiaholichas left
xnamedhas left
MSavoritias (fae,ve)has left
djorzhas left
iinkhas joined
raghavgururajanhas joined
*IM*has left
restive_monkhas left
restive_monkhas joined
chipmnkhas left
chipmnkhas joined
vanitasvitaehas joined
uhoreghas left
Half-Shothas left
Matthewhas left
homebeachhas left
Half-Shothas joined
Matthewhas joined
homebeachhas joined
uhoreghas joined
lovetox2has joined
lovetox2has left
adiaholichas joined
florettahas joined
Steve Killehas left
*IM*has joined
wgreenhousehas left
MSavoritias (fae,ve)has joined
raghavgururajanhas left
mehas left
Louishas joined
beanhas joined
vanitasvitaehas left
thilo.molitorhas left
thilo.molitorhas joined
chipmnkhas left
chipmnkhas joined
Maranda[x]has left
Titihas left
adiaholichas left
adiaholichas joined
Titihas joined
singpolymahas left
wgreenhousehas joined
Kevhas joined
adiaholichas left
Maranda[x]has joined
phrykhas joined
xnamedhas joined
florettahas left
singpolymahas joined
adiaholichas joined
florettahas joined
mathijshas left
mathijshas joined
konstantinoshas joined
mathijshas left
djorzhas joined
mehas joined
mathijshas joined
Kevhas left
lovetox2has joined
lovetox2has left
lovetox2has joined
lovetox2has left
xnamedhas left
vanitasvitaehas joined
wgreenhousehas left
adiaholichas left
Titihas left
Tobias
moparisthebest: yes. Looks like the same. Just presented at black hat