XSF Discussion - 2022-08-14


  1. Seve has left

  2. Ingolf has joined

  3. Skull Fucker has joined

  4. Maranda[x] has joined

  5. EuAndreh has left

  6. EuAndreh has joined

  7. adiaholic has left

  8. adiaholic has joined

  9. massivebox has left

  10. adiaholic has left

  11. Kev has joined

  12. floretta has left

  13. adiaholic has joined

  14. thilo.molitor has left

  15. floretta has joined

  16. Paganini has joined

  17. Calvin has joined

  18. Calvin has left

  19. Kev has left

  20. sbach has left

  21. sbach has joined

  22. root has left

  23. millesimus has left

  24. root has joined

  25. floretta has left

  26. millesimus has joined

  27. mjk has left

  28. floretta has joined

  29. xnamed has left

  30. me has joined

  31. sbach has left

  32. sbach has joined

  33. gooya has left

  34. singpolyma has left

  35. gooya has joined

  36. sbach has left

  37. sbach has joined

  38. singpolyma has joined

  39. lskdjf has left

  40. floretta has left

  41. gooya has left

  42. floretta has joined

  43. david has joined

  44. david has left

  45. gooya has joined

  46. Kev has joined

  47. brunrobe has left

  48. jcbrand has left

  49. singpolyma has left

  50. pablo has joined

  51. gooya has left

  52. gooya has joined

  53. Kev has left

  54. sbach has left

  55. marc0s has left

  56. sbach has joined

  57. marc0s has joined

  58. neshtaxmpp has left

  59. gooya has left

  60. gooya has joined

  61. neshtaxmpp has joined

  62. Maranda[x] has left

  63. thilo.molitor has joined

  64. sbach has left

  65. djorz has left

  66. FXTIA has left

  67. floretta has left

  68. singpolyma has joined

  69. pablo has left

  70. FXTIA has joined

  71. Kev has joined

  72. Maranda[x] has joined

  73. gooya has left

  74. FXTIA has left

  75. FXTIA has joined

  76. david has joined

  77. david has left

  78. floretta has joined

  79. Kev has left

  80. singpolyma has left

  81. antranigv has left

  82. BASSGOD has joined

  83. FXTIA has left

  84. marc0s has left

  85. marc0s has joined

  86. rion has left

  87. FXTIA has joined

  88. sbach has joined

  89. sbach has left

  90. sbach has joined

  91. floretta has left

  92. floretta has joined

  93. singpolyma has joined

  94. arc has left

  95. arc has joined

  96. marc0s has left

  97. marc0s has joined

  98. Kev has joined

  99. Calvin has joined

  100. wgreenhouse has left

  101. wgreenhouse has joined

  102. floretta has left

  103. floretta has joined

  104. Calvin has left

  105. sbach has left

  106. sbach has joined

  107. adiaholic has left

  108. adiaholic has joined

  109. jgart has left

  110. adiaholic has left

  111. adiaholic has joined

  112. david has joined

  113. david has left

  114. paul has left

  115. millesimus has left

  116. floretta has left

  117. Seve has joined

  118. floretta has joined

  119. sbach has left

  120. Paganini has left

  121. arc has left

  122. arc has joined

  123. millesimus has joined

  124. marc0s has left

  125. marc0s has joined

  126. me has left

  127. paul has joined

  128. arc has left

  129. arc has joined

  130. floretta has left

  131. floretta has joined

  132. Kev has left

  133. marc0s has left

  134. marc0s has joined

  135. arc has left

  136. arc has joined

  137. floretta has left

  138. floretta has joined

  139. emus has left

  140. Kev has joined

  141. mathijs has left

  142. mathijs has joined

  143. mathijs has left

  144. mathijs has joined

  145. arc has left

  146. arc has joined

  147. Menel has left

  148. Menel has joined

  149. adiaholic has left

  150. adiaholic has joined

  151. Kev has left

  152. adiaholic has left

  153. napen123 has joined

  154. napen123 has left

  155. adiaholic has joined

  156. adiaholic has left

  157. arc has left

  158. arc has joined

  159. adiaholic has joined

  160. karoshi has joined

  161. Steve Kille has left

  162. adiaholic has left

  163. adiaholic has joined

  164. wurstsalat has left

  165. arc has left

  166. arc has joined

  167. antranigv has joined

  168. adiaholic has left

  169. adiaholic has joined

  170. Kev has joined

  171. adiaholic has left

  172. antranigv has left

  173. adiaholic has joined

  174. Mario Sabatino has joined

  175. Tobias has joined

  176. Tobias has left

  177. Tobias has joined

  178. arcxi has left

  179. Tobias

    https://www.blackhat.com/us-22/briefings/schedule/index.html#xmpp-stanza-smuggling-or-how-i-hacked-zoom-26618

  180. Kev has left

  181. wurstsalat has joined

  182. Steve Kille has joined

  183. massivebox has joined

  184. arc has left

  185. arc has joined

  186. Menel

    Interesting. Is this the problem of using full xml librarys? Or is that something else

  187. jcbrand has joined

  188. arcxi has joined

  189. Steve Kille has left

  190. adiaholic has left

  191. sbach has joined

  192. arc has left

  193. arc has joined

  194. restive_monk has left

  195. adiaholic has joined

  196. mathijs has left

  197. mathijs has joined

  198. mathijs has left

  199. mathijs has joined

  200. mathijs has left

  201. mathijs has joined

  202. mathijs has left

  203. Fishbowler has left

  204. Fishbowler has joined

  205. MSavoritias (fae,ve) has joined

  206. Kev has joined

  207. restive_monk has joined

  208. adiaholic has left

  209. mathijs has joined

  210. adiaholic has joined

  211. Louis

    > Kev: right partial compliance is common. For example, everyone claims to support data forms just because they have a parser for it, maybe use it in ibr. But the xep allows for data forms being send in messages and tracked by thread ID... I've not found a client that supports that well yet. So do they "support" data forms or not? I would need the feature for staff to report.

  212. arc has left

  213. arc has joined

  214. mjk has joined

  215. Kev has left

  216. krauq has left

  217. krauq has joined

  218. floretta has left

  219. adiaholic has left

  220. floretta has joined

  221. Tobias has left

  222. Tobias has joined

  223. Tobias has left

  224. Tobias has joined

  225. Tobias has left

  226. Tobias has joined

  227. Tobias has left

  228. Tobias has joined

  229. krauq has left

  230. krauq has joined

  231. arcxi has left

  232. xnamed has joined

  233. Tobias has left

  234. Tobias has joined

  235. Tobias has left

  236. Tobias has joined

  237. marc has joined

  238. Tobias has left

  239. Tobias has joined

  240. Kev has joined

  241. lskdjf has joined

  242. xecks has joined

  243. adiaholic has joined

  244. vanitasvitae has left

  245. vanitasvitae has joined

  246. david has joined

  247. david has left

  248. adiaholic has left

  249. arc has left

  250. arc has joined

  251. Kev has left

  252. *IM* has left

  253. jgart has joined

  254. mathijs has left

  255. mathijs has joined

  256. rion has joined

  257. xnamed has left

  258. xnamed has joined

  259. Alex has left

  260. Alex has joined

  261. mathijs has left

  262. mathijs has joined

  263. emus has joined

  264. adiaholic has joined

  265. adiaholic has left

  266. neshtaxmpp has left

  267. neshtaxmpp has joined

  268. *IM* has joined

  269. Kev has joined

  270. kurisu has left

  271. kurisu has joined

  272. vanitasvitae has left

  273. vanitasvitae has joined

  274. serge90 has joined

  275. Mikaela has joined

  276. brunrobe has joined

  277. Dele Olajide has joined

  278. Kev has left

  279. vanitasvitae has left

  280. antranigv has joined

  281. vanitasvitae has joined

  282. antranigv has left

  283. gooya has joined

  284. Mjolnir Archon has joined

  285. djorz has joined

  286. Maranda has joined

  287. neshtaxmpp has left

  288. neshtaxmpp has joined

  289. Paganini has joined

  290. Steve Kille has joined

  291. floretta has left

  292. papatutuwawa has joined

  293. Tobias has left

  294. Tobias has joined

  295. floretta has joined

  296. Steve Kille has left

  297. Tobias has left

  298. Tobias has joined

  299. Kev has joined

  300. adiaholic has joined

  301. xnamed has left

  302. gooya has left

  303. gooya has joined

  304. larma has joined

  305. adiaholic has left

  306. flow

    Menel, I wouldn't say so, the advantages of using an xml library is IMHO always outweigh the drawbacks

  307. iink has left

  308. Kev has left

  309. xnamed has joined

  310. djorz has left

  311. gooya has left

  312. gooya has joined

  313. Tobias has left

  314. Tobias has joined

  315. robertooo has left

  316. kujiu has left

  317. gooya has left

  318. Paganini has left

  319. Louis has left

  320. Tobias has left

  321. Tobias has joined

  322. robertooo has joined

  323. Tobias has left

  324. Tobias has joined

  325. serge90 has left

  326. Tobias has left

  327. Tobias has joined

  328. Tobias has left

  329. Tobias has joined

  330. Alex has left

  331. mh has left

  332. Alex has joined

  333. Louis has joined

  334. mh has joined

  335. Kev has joined

  336. Kev has left

  337. kujiu has joined

  338. Tobias has left

  339. Tobias has joined

  340. antranigv has joined

  341. mimi89999 has left

  342. mimi89999 has joined

  343. Tobias has left

  344. Tobias has joined

  345. gooya has joined

  346. mathijs has left

  347. mathijs has joined

  348. mh has left

  349. Tobias has left

  350. Tobias has joined

  351. antranigv has left

  352. mathijs has left

  353. mathijs has joined

  354. djorz has joined

  355. jcbrand has left

  356. jcbrand has joined

  357. jcbrand has left

  358. jcbrand has joined

  359. gooya has left

  360. gooya has joined

  361. Titi has left

  362. Seve has left

  363. Seve has joined

  364. Titi has joined

  365. eevvoor has joined

  366. jcbrand has left

  367. jcbrand has joined

  368. iink has joined

  369. Kev has joined

  370. arcxi has joined

  371. iink has left

  372. adiaholic has joined

  373. lovetox2 has joined

  374. moparisthebest

    Tobias: same one we talked about in may right? https://bugs.chromium.org/p/project-zero/issues/detail?id=2254

  375. Kev has left

  376. moparisthebest

    Gloox is still vulnerable and the dev hasn't replied to email https://camaya.net/gloox/changelog/

  377. moparisthebest

    (luckily?) The only XMPP client we found that uses it is https://github.com/pulkomandy/Renga which, due to targeting Haiku, has limited users, but they are all still vulnerable to this day if using the wrong server

  378. xnamed has left

  379. marc0s has left

  380. marc0s has joined

  381. moparisthebest

    It also likely doesn't have a "install this code" command like zoom...

  382. konstantinos has left

  383. vanitasvitae has left

  384. antranigv has joined

  385. antranigv has left

  386. Louis has left

  387. vanitasvitae has joined

  388. me has joined

  389. xnamed has joined

  390. Titi has left

  391. iink has joined

  392. Titi has joined

  393. lovetox2 has left

  394. adiaholic has left

  395. gooya has left

  396. Louis has joined

  397. Louis has left

  398. vanitasvitae has left

  399. arcxi has left

  400. Kev has joined

  401. *IM* has left

  402. Alex has left

  403. Alex has joined

  404. adiaholic has joined

  405. papatutuwawa has left

  406. *IM* has joined

  407. Kev has left

  408. floretta has left

  409. karoshi has left

  410. karoshi has joined

  411. singpolyma has left

  412. Guus

    Did someone create a set of susceptible XML snippets? That would be handy to implement more testing.

  413. Titi has left

  414. papatutuwawa has joined

  415. arcxi has joined

  416. Calvin has joined

  417. adiaholic has left

  418. Tobias has left

  419. Tobias has joined

  420. Tobias has left

  421. Tobias has joined

  422. Tobias has left

  423. Tobias has joined

  424. Tobias has left

  425. Tobias has joined

  426. Tobias has left

  427. Tobias has joined

  428. adiaholic has joined

  429. Titi has joined

  430. Calvin has left

  431. iink has left

  432. Steve Kille has joined

  433. raghavgururajan has left

  434. singpolyma has joined

  435. iink has joined

  436. iink has left

  437. Tobias has left

  438. Tobias has joined

  439. adiaholic has left

  440. xnamed has left

  441. MSavoritias (fae,ve) has left

  442. djorz has left

  443. iink has joined

  444. raghavgururajan has joined

  445. *IM* has left

  446. restive_monk has left

  447. restive_monk has joined

  448. chipmnk has left

  449. chipmnk has joined

  450. vanitasvitae has joined

  451. uhoreg has left

  452. Half-Shot has left

  453. Matthew has left

  454. homebeach has left

  455. Half-Shot has joined

  456. Matthew has joined

  457. homebeach has joined

  458. uhoreg has joined

  459. lovetox2 has joined

  460. lovetox2 has left

  461. adiaholic has joined

  462. floretta has joined

  463. Steve Kille has left

  464. *IM* has joined

  465. wgreenhouse has left

  466. MSavoritias (fae,ve) has joined

  467. raghavgururajan has left

  468. me has left

  469. Louis has joined

  470. bean has joined

  471. vanitasvitae has left

  472. thilo.molitor has left

  473. thilo.molitor has joined

  474. chipmnk has left

  475. chipmnk has joined

  476. Maranda[x] has left

  477. Titi has left

  478. adiaholic has left

  479. adiaholic has joined

  480. Titi has joined

  481. singpolyma has left

  482. wgreenhouse has joined

  483. Kev has joined

  484. adiaholic has left

  485. Maranda[x] has joined

  486. phryk has joined

  487. xnamed has joined

  488. floretta has left

  489. singpolyma has joined

  490. adiaholic has joined

  491. floretta has joined

  492. mathijs has left

  493. mathijs has joined

  494. konstantinos has joined

  495. mathijs has left

  496. djorz has joined

  497. me has joined

  498. mathijs has joined

  499. Kev has left

  500. lovetox2 has joined

  501. lovetox2 has left

  502. lovetox2 has joined

  503. lovetox2 has left

  504. xnamed has left

  505. vanitasvitae has joined

  506. wgreenhouse has left

  507. adiaholic has left

  508. Titi has left

  509. Tobias

    moparisthebest: yes. Looks like the same. Just presented at black hat

  510. Dele Olajide has left

  511. Titi has joined

  512. wgreenhouse has joined

  513. lovetox2 has joined

  514. tomxcd has joined

  515. mathijs has left

  516. mathijs has joined

  517. adiaholic has joined

  518. neshtaxmpp has left

  519. neshtaxmpp has joined

  520. mathijs has left

  521. raghavgururajan has joined

  522. mathijs has joined

  523. mathijs has left

  524. mathijs has joined

  525. mathijs has left

  526. mathijs has joined

  527. lovetox2 has left

  528. lovetox2 has joined

  529. mathijs has left

  530. Kev has joined

  531. Kev has left

  532. arcxi has left

  533. mathijs has joined

  534. arcxi has joined

  535. adiaholic has left

  536. adiaholic has joined

  537. MSavoritias (fae,ve) has left

  538. floretta has left

  539. adiaholic has left

  540. adiaholic has joined

  541. singpolyma has left

  542. raghavgururajan has left

  543. djorz has left

  544. singpolyma has joined

  545. raghavgururajan has joined

  546. atomicwatch has joined

  547. david has joined

  548. david has left

  549. thilo.molitor has left

  550. adiaholic has left

  551. marc has left

  552. Kev has joined

  553. marc has joined

  554. neshtaxmpp has left

  555. neshtaxmpp has joined

  556. adiaholic has joined

  557. konstantinos has left

  558. konstantinos has joined

  559. MSavoritias (fae,ve) has joined

  560. MSavoritias (fae,ve) has left

  561. xnamed has joined

  562. thilo.molitor has joined

  563. Steve Kille has joined

  564. MSavoritias (fae,ve) has joined

  565. raghavgururajan has left

  566. MSavoritias (fae,ve) has left

  567. raghavgururajan has joined

  568. MSavoritias (fae,ve) has joined

  569. Kev has left

  570. Tobias has left

  571. Tobias has joined

  572. vanitasvitae has left

  573. Ingolf has left

  574. vanitasvitae has joined

  575. Steve Kille has left

  576. Ingolf has joined

  577. floretta has joined

  578. papatutuwawa has left

  579. wgreenhouse has left

  580. vanitasvitae has left

  581. singpolyma has left

  582. mh has joined

  583. wgreenhouse has joined

  584. Jakkie has joined

  585. Jakkie has left

  586. Jakkie has joined

  587. Skull Fucker has left

  588. Shackleton has joined

  589. Shackleton has left

  590. Shackleton has joined

  591. Shackleton has left

  592. Skull Fucker has joined

  593. adiaholic has left

  594. Kev has joined

  595. adiaholic has joined

  596. singpolyma has joined

  597. Titi has left

  598. goffi has left

  599. david has joined

  600. david has left

  601. neshtaxmpp has left

  602. neshtaxmpp has joined

  603. singpolyma has left

  604. singpolyma has joined

  605. david has joined

  606. david has left

  607. Kev has left

  608. floretta has left

  609. Friendly Resident Cynic has left

  610. sbach has left

  611. sbach has joined

  612. david has joined

  613. david has left

  614. gooya has joined

  615. bean has left

  616. Titi has joined

  617. papatutuwawa has joined

  618. Jakkie has left

  619. Jakkie has joined

  620. xecks has left

  621. xecks has joined

  622. Kev has joined

  623. konstantinos has left

  624. konstantinos has joined

  625. me has left

  626. Titi has left

  627. lovetox2 has left

  628. sbach has left

  629. sbach has joined

  630. Friendly Resident Cynic has joined

  631. sbach has left

  632. sbach has joined

  633. Kev has left

  634. david has joined

  635. david has left

  636. Kev has joined

  637. sbach has left

  638. sbach has joined

  639. singpolyma has left

  640. sbach has left

  641. sbach has joined

  642. djorz has joined

  643. andrey.g has joined

  644. Jakkie has left

  645. Jakkie has joined

  646. Kev has left

  647. xnamed has left

  648. singpolyma has joined

  649. Skull Fucker has left

  650. floretta has joined

  651. Skull Fucker has joined

  652. xnamed has joined

  653. Titi has joined

  654. sbach has left

  655. sbach has joined

  656. antranigv has joined

  657. Kev has joined

  658. antranigv has left

  659. antranigv has joined

  660. Titi has left

  661. sbach has left

  662. sbach has joined

  663. mathijs has left

  664. mathijs has joined

  665. Titi has joined

  666. mathijs has left

  667. antranigv has left

  668. david has joined

  669. david has left

  670. Tobias has left

  671. Tobias has joined

  672. xnamed has left

  673. Kev has left

  674. Tobias has left

  675. Tobias has joined

  676. andrey.g has left

  677. Tobias has left

  678. Tobias has joined

  679. mathijs has joined

  680. xnamed has joined

  681. singpolyma has left

  682. singpolyma has joined

  683. Tobias has left

  684. Tobias has joined

  685. wladmis has left

  686. wladmis has joined

  687. Tobias has left

  688. Tobias has joined

  689. sbach has left

  690. sbach has joined

  691. sbach has left

  692. sbach has joined

  693. Tobias has left

  694. Tobias has joined

  695. atomicwatch has left

  696. Tobias has left

  697. Tobias has joined

  698. Tobias has left

  699. Tobias has joined

  700. massivebox has left

  701. massivebox has joined

  702. Tobias has left

  703. Tobias has joined

  704. TheCoffeMaker has left

  705. gooya has left

  706. TheCoffeMaker has joined

  707. lovetox2 has joined

  708. sbach has left

  709. sbach has joined

  710. lovetox2 has left

  711. lovetox2 has joined

  712. papatutuwawa has left

  713. papatutuwawa has joined

  714. sbach has left

  715. sbach has joined

  716. goffi has joined

  717. lovetox2 has left

  718. lovetox2 has joined

  719. lovetox2 has left

  720. lovetox2 has joined

  721. Kev has joined

  722. lovetox2 has left

  723. lovetox2 has joined

  724. lovetox2 has left

  725. lovetox2 has joined

  726. adiaholic has left

  727. lovetox2 has left

  728. lovetox2 has joined

  729. Mx2 has left

  730. chipmnk has left

  731. chipmnk has joined

  732. edhelas has left

  733. edhelas has joined

  734. Jakkie has left

  735. lovetox2 has left

  736. lovetox2 has joined

  737. wladmis has left

  738. wladmis has joined

  739. lovetox2 has left

  740. lovetox2 has joined

  741. Steve Kille has joined

  742. lovetox2 has left

  743. lovetox2 has joined

  744. lovetox2 has left

  745. Tim R has joined

  746. lovetox2 has joined

  747. lovetox2 has left

  748. Kev has left

  749. lovetox2 has joined

  750. lovetox2 has left

  751. wladmis has left

  752. wladmis has joined

  753. Josh has left

  754. adiaholic has joined

  755. lovetox2 has joined

  756. lovetox2 has left

  757. Josh has joined

  758. Paganini has joined

  759. Alex has left

  760. lovetox2 has joined

  761. lovetox2 has left

  762. lovetox2 has joined

  763. lovetox2 has left

  764. singpolyma has left

  765. singpolyma has joined

  766. Alex has joined

  767. Mario Sabatino has left

  768. phoebos has joined

  769. adiaholic has left

  770. david has joined

  771. david has left

  772. gooya has joined

  773. phoebos has left

  774. Paganini has left

  775. adiaholic has joined

  776. singpolyma has left

  777. Steve Kille has left

  778. Steve Kille has joined

  779. singpolyma has joined

  780. Kev has joined

  781. adiaholic has left

  782. massivebox has left

  783. Louis has left

  784. wladmis has left

  785. wladmis has joined

  786. massivebox has joined

  787. Kev has left

  788. Tim R has left

  789. Mx2 has joined

  790. Maranda[x] has left

  791. Maranda[x] has joined

  792. floretta has left

  793. floretta has joined

  794. djorz has left

  795. david has joined

  796. david has left

  797. Louis has joined

  798. marc0s has left

  799. marc0s has joined

  800. karoshi has left

  801. sbach has left

  802. sbach has joined

  803. adiaholic has joined

  804. Menel has left

  805. Tobias has left

  806. karoshi has joined

  807. coleman has left

  808. vanitasvitae has joined

  809. singpolyma has left

  810. Kev has joined

  811. Mikaela has left

  812. adiaholic has left

  813. david has joined

  814. david has left

  815. adiaholic has joined

  816. Tobias has joined

  817. xnamed has left

  818. Kev has left

  819. djorz has joined

  820. singpolyma has joined

  821. gooya has left

  822. gooya has joined

  823. xnamed has joined

  824. marc has left

  825. papatutuwawa has left

  826. gooya has left

  827. xnamed has left

  828. lovetox2 has joined

  829. gooya has joined

  830. lovetox2 has left

  831. xecks has left

  832. floretta has left

  833. *IM* has left

  834. Ingolf has left

  835. marc has joined

  836. floretta has joined

  837. wurstsalat has left

  838. Josh has left

  839. Josh has joined

  840. Josh has left

  841. Josh has joined

  842. david has joined

  843. david has left

  844. *IM* has joined

  845. me has joined

  846. TheCoffeMaker has left

  847. TheCoffeMaker has joined

  848. marc0s has left

  849. marc0s has joined

  850. Kev has joined

  851. gooya has left

  852. Seve has left

  853. mathijs has left

  854. mathijs has joined

  855. MSavoritias (fae,ve) has left

  856. gooya has joined

  857. marc has left

  858. gooya has left

  859. Ray22 has joined

  860. Ray22 has left

  861. gooya has joined

  862. antranigv has joined

  863. Kev has left

  864. Tobias has left

  865. Tobias has joined

  866. Tobias has left

  867. djorz has left

  868. Tobias has joined

  869. floretta has left

  870. mathijs has left

  871. mathijs has joined

  872. adiaholic has left

  873. adiaholic has joined

  874. atomicwatch has joined

  875. pablo has joined

  876. chipmnk has left

  877. chipmnk has joined

  878. Tobias has left

  879. adiaholic has left

  880. marc has joined

  881. Ingolf has joined

  882. karoshi has left

  883. david has joined

  884. david has left

  885. floretta has joined

  886. Mx2 has left

  887. atomicwatch has left

  888. emus has left

  889. pablo has left

  890. adiaholic has joined

  891. Kev has joined

  892. marc0s has left

  893. marc0s has joined

  894. david has joined

  895. david has left

  896. djorz has joined

  897. adiaholic has left

  898. lskdjf has left

  899. arc has left

  900. arc has joined

  901. adiaholic has joined

  902. david has joined

  903. david has left

  904. Kev has left