IMO it would be smart to review current default config of the Jabber servers out there.

The defaults for the jabber servers are really nice for the Jabber network that contained a bunch of geeks that are interested in the technology but at the moment we have lots and lots of clueless/bored/insane teenagers on the network. Just checkout [EMAIL PROTECTED], really creepy people there some of the time :D

Jabber is getting bigger so IMO we can't sustain this 'freedom for all, everyone can be trusted' mentality. This <iq type="set"> is a nice example but the same goes for roster size, connection rates and (IMO the potential nr1 problem) 0.1 second registration of new accounts.

It takes approx 5 minutes to write a script that creates thousands and thousands of new accounts on a server that has inband registration enabled (all the public servers).

With a bit of luck this won't happen in the next few months but if it happens when Jabber is massively gaining popularity then it will become a _big_ problem for Jabber/XMPP, especially when it comes to the perception of the stability/security of Jabber/XMPP.

Jesper Krogh wrote:
Is there currently any limitations on Jabberd handling of peoples
xml-file.

Bart


_______________________________________________
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev

Reply via email to