[JDEV] Guest access

2002-04-28 Thread Thomas Parslow (PatRat)

Hi,

I want to write an application using Jabber where most users would use
the system once and never use it again. It seems a bit silly to create
a new account for each of these users as they use the system... Is
there some way to set up guest access to a Jabber server? I was
thinking of maybe logging in with the same JID but different
resources but then there would be a problem because the
username/password for that account would have to be contained in the
client program and eventually someone would extract it and use it to
cause problems. Is there a way to disable changes to an account?

I'd like to do as little modification to the server as possible (I was
hoping I could find a way of doing it without modifying in the server
at all)

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] filetransfer in jabber

2002-04-24 Thread Thomas Parslow (PatRat)

 Just some thoughts.

 It could be time for the jabber community to define an official way 
 file sharing should be done. I don't say here that it should be written 
 by jabber folks, or that it should be part of the jabber server, but 
 having a implementation reference could help. For instance, using webdav 
 is a very good idea, but, if this solution is choosen, it should be said 
 somewhere that's the way jabber clients and transports should/could do 
 file sharing. But more than that, an implementation of webdav (webdav is 
 only a protocol after all) could become the, once again, official file 
 sharing solution,

 Once it's settled, it will be easier for everybody to support that 
 feature and will lead, I'm sure, to a quick integration into the 
 clients, transports and even, I hope, the jabber server, at least for 
 the installation and configuration. I know that taking such kind of 
 decision is not really the way the open-source community is working, 
 more often a de-facto standard emerges by itself, but I could make 
 thinks so easier.

 my 2 cents

 Philippe

 PS: sorry for my english (et merde, ou est ce putain de dictionnaire?)

Currently with jabber:iq:oob
(http://www.jabber.org/ietf/draft-miller-jabber-00.html#extended-iq-oob)
it doesn't matter to the receiving client whether the sending client
is using WebDAV, a built in HTTP server, or even just pointing to a
file hosted elsewhere, all it sees is an http url to download from...

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Emoticons: guidelines

2002-04-22 Thread Thomas Parslow (PatRat)

snip

 Thats all good in theory but what about people who are behind firewalls and
 proxy's?
 And what about the unneccessary bandwidth it takes up, not just in the xml
 but having to download those images, for something like emoticons isnt it
 better just to have a way of defining that something is an emoticon and what
 it represents so particular clients can display emoticons that better go
 with a particular clients graphical style, and also whats to stop abuse of
 this by either embedding enormous images that take ages to download or an
 image with silly dimensions, also i will cause problems where people use a
 lots of emoticons within a message, something like emoticons i dont think is
 best delt with by embedding it in this way.

It also allows the sender to determine the receivers IP address (if
they retrieve the image) which is not good

snip

 Rich

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[4]: [JDEV] Emoticons: guidelines

2002-04-22 Thread Thomas Parslow (PatRat)

 Okay, now before you read my response to a previous message (which
 answers all your concerns), can anybody come up with any more problems
 with the HTML IMG tag approach?  That was certainly a rather major salvo
 of bashing you folks put up ;-P

  - Dave

It's just way more complicated then it needs to be. It creates
security problems which the rest of Jabber has been designed to
prevent. And it requires people to upload emoticons they want to use
or rely on sort of central store.

All an emoticon system needs to do is replace certain pieces of text
(such as :)) with brightly colored friendly little graphics, why
add a requirement for each client to have to connect to a web site and
download them for each message?

IMHO, no extra protocol enhancements are needed, although it would
possibly be useful to define a standard set (I'm not really convinced
even this is needed but it wouldn't hurt).

Also, as has already been mentioned, most clients will probably want
to provide they're own emoticon graphics which fit in with the rest of
the UI.

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Emoticons: guidelines

2002-04-22 Thread Thomas Parslow (PatRat)

 here's something to ponder:

 emoticons can be viewed as a special case of a more generic
 capability.  Let's call it jabsters (c).  In essence a
 jabster is a textual description that has a meaning
 different from the text itself -- a short cut if you will.
 Emoticons are one example, all of the other little acronyms
 like BTW, IANAL, TIA, RTFM are short cuts too (but they
 aren't emoticons).  If I type BTW, what can't it come up as
 By the way on the other client?

 I suggest that we have a more generalized format to
 accommodate other short-cut uses.  We also need a mechanism
 to identify which jabster sets are available on each
 client (a capabilities exchange).  We don't want one person
 typing LOL on a client assuming it will come out as
 laughing out loud  and the other client uses a different
 jabster set that translates LOL to lots of luck.

 A more esoteric application can be for the non-tradition IM,
 like from human-to-device.  Perhaps I want to IM my coffee
 machine and say Turn On.  The coffee machine could see
 this as a jabster and translate it to the relevant command
 string for the device.  Here the jabster is a translation
 from a human readable command to a device command.

 Similar to emoticons?  I think so.  So when we finalize how
 we want to handle emoticons, lets also think about the more
 generic case and perhaps cover it, too while we are at it.

I'd find that sort of thing incredibly annoying (ok, I also find
emoticons annoying but this would be more so:). If I write BTW I
probably want the user at the other end to see BTW. Maybe if I'm
lazy (which I am;) I might appreciate some sort of auto complete in my client but it
would just be a pain if the remote client went and changed what I'd
written.

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Using jabber for an application

2002-04-21 Thread Thomas Parslow (PatRat)

 URL:http://docs.jabber.org/ is the authoritative source for
 documentation of all sorts, much of it with working examples.  If you'd
 like more complete working examples, check out the source code for the
 open source jabberd and/or Gabber and/or Jarl.

See also:

http://www.jabber.org/protocol/

More up to date documentation. Shouldn't docs.jabber.org point to
there or something?

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: emoting (Re: [JDEV] Emoticons: guidelines)

2002-04-19 Thread Thomas Parslow (PatRat)

 Some clients (Gabber, JabberIM and plugMarvin/plug) support IRC
 style /me emotes as in:

 /me does some emoting

 which would be shown in a different color as:

 * tom does some emoting

 I've never really used IRC...can someone tell me what the point of these
 are?  I've always wondered.  For people who can't remember their names?

 Michael.

/me just likes the excuse to refer to himself in the third person

;)

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: emoting (Re: [JDEV] Emoticons: guidelines)

2002-04-19 Thread Thomas Parslow (PatRat)

 Ok, but I still don't understand how typing:

/me does something

 has any advantages over typing

bob does something

 given that I know my name is bob.  Is the whole point to change the colour
 of bob?


It also removes the Bob: that would precede all other messages and
sets it apart, for example:

Bob: I'm thirsty
Tom: Ok, just a sec
* Tom hands bob a coke

Ok, so not the most useful thing in the work but some people use it...

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: emoting (Re: [JDEV] Emoticons: guidelines)

2002-04-18 Thread Thomas Parslow (PatRat)


 is there anyway currently for clients to actually send traditional
 'emotes'? perhaps i have not run across a client that supports it or
 something simular. i can see this very lacking with irc-jabber if so.

Some clients (Gabber, JabberIM and plugMarvin/plug) support IRC
style /me emotes as in:

/me does some emoting

which would be shown in a different color as:

* tom does some emoting


 ---
 Gabriel Millerd|The sticker on the side of the box said Supported
 SysAdmin, Antitribu|Platforms: Windows 95, Windows NT 4.0, or better,
|so clearly Linux was a supported platform.


Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Question about UserName and Clients

2002-04-16 Thread Thomas Parslow (PatRat)

 Thanks Temas and Michael. But I am still not clear, why we should not
 support this.

 Why not do it like email clients.
 Pop and SMTP servers run on a different subdomain machines.
 But Email addresses are always in the form of [EMAIL PROTECTED] not
 [EMAIL PROTECTED]

 IMHO, The current client behavior is too restrictive. It forces me to a JID
 that is tied to the name of the server that I connect to. This is
 unacceptable to the customers who want to outsource their IM hosting to an
 ISP that does Jabber hosting.

 If the suggestion that I proposed is followed, then it becomes very easy for
 folks to contact an ISP that offers Jabber hosting to become jabber enabled,
 without disturbing their current web/email hosting setup. (And without
 getting involved in Packet forwarding between two ISPs). This is a real
 issue for customers who want the IM address to be the same as their email
 address but want to use a different ISP for the IM hosting part. This will
 help the nascent IM hosting market using Jabber to develop.

 All I am asking is that if the username contains '@' , then the clients send
 that as the JID. If not then continue the current behavior.

 The are benefits to my proposal (and a older version of WinJab was doing
 this too). What are the issues that outweigh these benefits.

 Regards,
 Ashvil

You can use SRV records much like e-mail uses MX records to have the
Jabber server running on a different domain to the one used for its
JIDs. So you have [EMAIL PROTECTED] but the Jabber server is running
at im.compnay.com.

You then need a way for clients to connect to the server, quite a few
currently don't properly support connecting to a different domain
(none support SRV records afaik). The way I've implemented it in my
client is to allow a username to be entered followed by an @ then the
correct domain for the JID, sort of like you suggest. The client will
then connect to the server specified in the server field but identify
itself using the the domain given after the @ sign in the username
field.

There is another way, I think it has something todo with using alias
tags in the jabber.xml file. Then a connecting client would believe
itself to be [EMAIL PROTECTED] but everyone else would see it as
[EMAIL PROTECTED]

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Does jabber server queues messages

2002-04-16 Thread Thomas Parslow (PatRat)

 I've wondered if there is a way to limit, or even turn off offline
 storage.  You could in effect DOS the server by sending lots of large
 messages to an offline user.  Kinda like filling up /var/log/messages
 etc.


 Chris Pile.

There are karma settings which I think are meant to reduce this sort of
thing, not sure how that works on the s2s level though...

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



[JDEV] Multiple elements within IQs

2002-04-16 Thread Thomas Parslow (PatRat)

Hi,

Is it possible for there to be 2 or more unrelated elements within an IQ? For
example would the following be valid and if it is then what would be
the correct responce?

iq from=[EMAIL PROTECTED]/resource to=[EMAIL PROTECTED]/resource type=get 
id=id1
query xmlns=jabber:iq:version/
query xmlns=jabber:iq:time/
/iq

It doesn't seem correct but I can't find anywhere that says that it
isn't...

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: [JDEV] JabberApplet - Dynamic Creation of User ??

2002-04-15 Thread Thomas Parslow (PatRat)

 Hi,
  I have seen that, the Jabber Applet is providing the new user
 creation (dynamically), in the
 jabber server. Can anybody tell me where can i get the source of the same ??

 regds
 r-a-v-i

Hi,

This is a feature of the Jabber protocol, most (probably all) Jabber
clients do it. See:

http://www.jabber.org/ietf/draft-miller-jabber-00.html#extended-iq-register

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



[JDEV] Marvin 0.0.6 Released!

2002-03-12 Thread Thomas Parslow (PatRat)

Version 0.0.6 of Marvin has just been released!

For more information see: 
http://marvin-jabber.sourceforge.net/

Marvin is a Jabber client written in the Euphoria programing language
(for more information on Euphoria take a look at
http://www.rapideuphoria.com/). It is fully skinable so that it's look
and feel can be customized (much like Winamp except the skin format is
a lot more flexible).

Changes for 0.0.6: 
* Hot key support 
* Notification box which appears above system tray to notify user of messages 
(optional) 
* Enhanced history display (date stamps, search etc...) 
* Windows 2000 Alpha Blending transparency support (Windows 2000/XP only) 
* Topmost toggle for Roster window 
* User status changes can be shown in chat 
* Support for composing message event (allows you to see when the other person is 
replying) 
* Custom status supported 
* Roster font and back color customizable 
* Status of remote users now shown in message windows 
* Changes to skin format (see skinchanges.txt in the docs directory) 
* Lots and lots of bugs fixed and large internal parts rewritten

As always feedback is very much appreciated :)

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Jabber server hostname and JIDs

2002-03-09 Thread Thomas Parslow (PatRat)

 On Mon, Mar 04, 2002 at 06:07:01PM +1100, Robert Norris wrote:
   3. Hack JID rewriting stuff into the JSM, so that any to/from attributes
  get rewritten to what I want them to be.
  
  It already does this, in the pthcsock element in the c2s config just
  add:
  alias to=server.name/
  
  It's ugly, but it does all the magic to/from replacing so that things work
  just like you want :)  The above is the default one, you can also have
  multiple alias to=real.serverwhat.client.uses/alias in there.
 
 That's interesting to know. It's pretty disgusting (as most hacks of
 this type are), and it still has the problem that the client thinks its
 JID is one thing while the rest of the network knows it as something

 Yes. This is the problem with alias/ - it wasn't very well known early
 on in the stages of client development, so it wasn't implemented (AFAIK)
 as widely as one would have liked. (I am just as guilty - sjabber was 
 written before I knew much about the full server config options).

 dj

If a client connects to a server through an address which is
different from the servers name and it has an alias set up for that
address is there any way for the client to determine the servers
actual name?

The solution I have in my client right now is to let the user enter
their full JID in the username box if it differs from username@server.

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Jabber Transports - New Architecture

2002-03-09 Thread Thomas Parslow (PatRat)

 delivering mail requires a central server also (determined
 by MX-record in DNS). so it is much like email except that
 the domain part of the jabber-uid is directly resolved 
 (no JX record in DNS :-)

snip

 holger

The _jabber_ SRV record is Jabber's MX record.

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Yahoo transport?

2002-02-27 Thread Thomas Parslow (PatRat)

 I had heard that Yahoo changed their authentication protocol recently,
 which might mean that our transport wouldn't work anymore (I know that the
 Jabber Inc. transport has experienced some problems because of this). Is
 anyone still successfully running the open-source Yahoo Transport?

 Peter

 --
 Peter Saint-Andre
 email+jabber: [EMAIL PROTECTED]

It's working fine here. 1.4.2 server (with pth downgraded) and the CVS
version of the yahoo transport from about the time 1.4.2 was
released.

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Jabber server redirection

2002-02-21 Thread Thomas Parslow (PatRat)

 You have tos et up an mx record of company.com pointing to
 jabber.su.company.com

I don't think MX records are supported by Jabber any more, they were
replaced by SRV records.

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] File Transfer Proposals

2002-02-20 Thread Thomas Parslow (PatRat)

 No ... I don't think you need 3 days to send some headers ... you just
 have
 to preprend to all your outgoing connections GET / HTTP/1.0\r\n\r\n and
 to
 all incomming connections HTTP/1.0 200 OK\r\n\r\n. I really can't see
 why
 you need 3 days to implement that. - Oh, sure ... you have to strip that
 headers when you receive it ... 1 minute more to write the code for that.

 What?? and you think that we be robust enough and compatible enough to
 always work with all clients, somehow I doubt it.

AFAIK most HTTP headers are optional, so that should work fine for
HTTP compatible clients and servers.

Does anyone know the minimum required for HTTP/1.0 compatibility?

Thomas Parslow (PatRat)
E-Mail/Jabber: [EMAIL PROTECTED]
ICQ: 26359483

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] File Transfer Proposals

2002-02-20 Thread Thomas Parslow (PatRat)

 Can someone point me at some docs that shows how to implement PASS?  I'm a
 little unsure if it is Jabber specific or not, but searching Jabber.org
 doesn't give me much useful, and searching the web for PASS give me
 hundreds of hits, even with other keywords.

Hi,

JEP 3 describes the protocol used, you can see it here:
http://foundation.jabber.org/jeps/jep-0003.html

PASS itself is available from the contrib section at jabber.org:
http://download.jabber.org/contrib/
You can read it's readme file here:
http://download.jabber.org/contrib/pass.README

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[6]: [JDEV] SRV record and sending S2S

2002-01-16 Thread Thomas Parslow (PatRat)

 The reason for this is that SRV lookups are _very hard_ from most languages.
 For some operating systems, you would need to either do the DNS queries
 yourself by hand, or port libresolv. I don't believe that Java supports SRV
 lookups without JNDI, and I don't think either visual basic 6 or the
 libraries on .Net support it at all.

 -David Waite

Hopefully this will change though...

At the moment in my client I'm allowing the user to enter a different
server to connect to from the one in their JID but at some point I'm
going to try and implement SRV records at some time...

Is there any reason for S2S using a different port to C2S? Would it be
possible for a server to accept client connections on it's S2S port?

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] SRV record and sending S2S

2002-01-14 Thread Thomas Parslow (PatRat)

 Since 1.2, the servers have used the standard SRV dns record type to
 resolve domains into the actual servers that handle jabber.  An example
 of such a record for bind for domain.org would look like:
 _jabber._tcpIN SRV  30 30 5269 servera.domain.org.

 The RFC that describes SRV is:
 http://www.faqs.org/rfcs/rfc2052.html

 The implementation of dialback is based on this document:
 http://docs.jabber.org/draft-proto/html/dialback.html

 The SRV lookups are implemented in the dnsrv component in the 1.4
 server, and dialback is in the dialback component.

 Jer

I had a SRV record on my domain pointing to my Jabber server but S2S
only worked with a few other servers (like Jabber.org). I thought that
was because it was new and not supported by most servers yet, but I
assume most servers are 1.2+. Could it have been a set up issue and
what possibly could it have been?

Also, are MX records still supported?

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[4]: [JDEV] SRV record and sending S2S

2002-01-14 Thread Thomas Parslow (PatRat)

Hi,

Thanks for the reply Jeremie, I'll be trying it again if the guy who
hosts my domain has time to add the SRV record again (we had problems
with automatic tools so it got removed) :)

_jabber._tcpIN SRV  30 30 5269 servera.domain.org.

Does any one have any thoughts on a how a client should use SRV
records? If the port given in the SRV record is the S2S port then how
would the client determine which port to connect to?

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: [JDEV] Thoughts about AOL blocking IPs

2002-01-08 Thread Thomas Parslow (PatRat)

 1. Using DNS entries for the transport that have a very short TTL
and updating them every time the transport changes IP.
This method is used for providing domain names to dial up users
by services like dyndns.org.
On the domain of that dynamic DNS entry we'll operate a jabber
server just for running the transport.

Just a thought, if there is a DNS entry always pointing to the AIM
transport then AOL can just block that. Wouldn't stop the relaying
idea from working though...

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Theoretic.com Now Blocked

2002-01-08 Thread Thomas Parslow (PatRat)

 Does a network of socket redirectors offer any benefits over just setting up more 
Jabber Servers with AIM Transports?  Meaning, you still have to find people to set up 
the free Socket Redirectors,
 why not focus that energy on getting people to set up additional Jabber Servers. 

 Unless you have a critical mass even the socket redirectors are pretty easy to pick 
out and block.  The key is to have the AIM traffic spread over 1000's of nodes.  It 
is a matter of deciding where
 to spend our energy.  The Socket Redirectors will work, but so will the same number 
of Jabber Servers will too.   

 Rashad

As far as I can see the advantage of the socket subdirector idea is
that it will be transparent to the user. It's a real pain to move all
your ICQ/AIM contacts to use a different transport (I've done it a
couple of times now), it's even more of a pain to have to move entirely to a new 
server.

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Theoretic.com Now Blocked

2002-01-08 Thread Thomas Parslow (PatRat)

snip

 A benifits of the socket redirector apporach is that it should be a very
 simple program to setup and run. Very little or no configuration.  Lets
 get one that can be run on unix, or windows or anything.  Think of them
 as throwaways, they block one machine, we bring up three more.  I think
 we want to use the SETI online model.  Make it trivial to get on
 1000's of machines.

snip

 Rashad

That sounds like a major security problem to me, any one of those
redirectors would be able to snoop traffic and pick out passwords (I
think passwords are sent plain text in AIM/ICQ, is that correct?)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Open source Win32 client

2001-12-20 Thread Thomas Parslow (PatRat)

 OK, again. 
 is there any Jabber client with the following features:
   Win32
   Visual C++ (not Delphi, VB)
   GPL or other Open Source

 (I looked through http://jabbercentral.org/clients/)

Looks like the Win32 version of Psi pretty much fulfills those
criteria:

http://jabbercentral.org/clients/view.php?id=1003246756

Also, there's a JabberCOM MFC on the JabberCOM site:

http://prdownloads.sourceforge.net/jabbercom/JabberCOM_MFC-1.0.zip

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



[JDEV] Marvin 0.0.5 Released!

2001-11-27 Thread Thomas Parslow (PatRat)

Marvin 0.0.5 has just been released!

Marvin is a Jabber client written in the Euphoria programing language
(for more information on Euphoria take a look at
http://www.rapideuphoria.com/). It is fully skinable so that it's look
and feel can be customized (much like Winamp except the skin format is
a lot more flexible).

For more information see:
http://marvin-jabber.sourceforge.net/

Changes for 0.0.5:
* Message History
* XML Debug Window (left alt-keypad minus)
* Gateway setup
* Auto away
* Lots more small additions and bug squishings

Feedback would be much appreciated :)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] URL form of JID?

2001-09-24 Thread Thomas Parslow (PatRat)

  I'd much rather add a query to the URL indicating the action:
 
  jabber:[EMAIL PROTECTED]?action=message   # send IM (default action)
  jabber:[EMAIL PROTECTED]?action=roster   # add to roster
 
  jabber:[EMAIL PROTECTED]?action=chat   # join a chat room

 I think this makes a lot of sense, as it doesn't muddy the
 JID part of the URL and is a clean and flexible way of doing
 things. And it's also a format we're familiar with (HTTP GET URLs).

 Ironically, I guess the achilles heel is the flexibility:

 jabber:[EMAIL PROTECTED]?action=chat   # join a chat room

 vs

 jabber:[EMAIL PROTECTED]?action=join   # join a chat room

 jabber:[EMAIL PROTECTED]?action=chat joining a chatroom could get
 confusing.  I would have assumed it would have started a line-by-line
 private chat (as opposed to sending a normal message- see
 http://docs.jabber.org/jpg/html/main.html#REFMESSAGE for details).

 Having two chat types in Jabber does confuse things a little...

 Michael.

jabber:[EMAIL PROTECTED]?action=join
or
jabber:[EMAIL PROTECTED]?action=conference

maybe?

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: [JDEV] Available: Jabber Web Pager documentation

2001-09-05 Thread Thomas Parslow (PatRat)

 All,

 I've finally got round to documenting my send a jabber message from a web 
 page form system. Anyone who's interested can find a link to it at 
 http://www.alsutton.com/

 Al.

Looks very cool :) But when I try and use it I get a 500 error... Am I
doing something wrong or is it just down atm?

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Marvin Jabber Client

2001-09-03 Thread Thomas Parslow (PatRat)

 Thomas Parslow (PatRat) wrote:
Hi,

I've just released a Pre-Alpha preview release of my Jabber client and
I'd appreciate some feedback. It's a fully skinable client written in
Euphoria.

For anyone interested it's at:
https://sourceforge.net/projects/marvin-jabber/

Thanks :)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying

 screenshots?
 
 --temas

That might be an idea :) I still haven't got round to doing a proper
web page for Marvin... One thing though, Marvin is fully skinable so
it is possible to totally change the way it looks, the screenshots
would just have to be of the default skin...

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



[JDEV] Encrypting logs

2001-09-03 Thread Thomas Parslow (PatRat)

Hi,

I'm going to be adding logging functionality to my client but I'm a
bit uncomfortable about storing it in plain text by default.

One way I though of doing things was to encrypt it all using the users
jabber password, this would work fine until the user decided to change
they're password using a different client...

Maybe I could use a password stored in private XML storage on the
server, the password could itself be encrypted using a locally stored
password, thus an attacker would need access to both the users machine
and the users Jabber account in order to decrypt they're log files.

Does any one have any thoughts on this or has anyone found a good way
of doing it?

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



[JDEV] Marvin Jabber Client

2001-08-17 Thread Thomas Parslow (PatRat)

Hi,

I've just released a Pre-Alpha preview release of my Jabber client and
I'd appreciate some feedback. It's a fully skinable client written in
Euphoria.

For anyone interested it's at:
https://sourceforge.net/projects/marvin-jabber/

Thanks :)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: [JDEV] password?

2001-06-14 Thread Thomas Parslow (PatRat)

 I'm interested in 'make jabber client'

 and I'm looking Winjab's protocol
 there is 

Hi,
Take a look at Jens Alfke's Jabber Client Developer's Cheat Sheet at:
http://homepage.mac.com/jens/Jabber/JabberClientCheatSheet.html

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] (no subject)

2001-05-16 Thread Thomas Parslow (PatRat)

DOS attack, anyone?

Or just ring the 0800 number to complain if your in the UK, costs
them :)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying


___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



[JDEV] Lost messages

2001-04-12 Thread Thomas Parslow (PatRat)

Just noticed an even more worrying thing related to the problem with
offline users appearing online I reported a few days ago. It seems
that if you send a message to a user who appears to be online (but is
in fact offline) then it is lost, it is never received by the other
user and no indication that is was lost is given to the sender.

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: [JDEV] Kid-safe messaging: [was buddy icons]

2001-04-11 Thread Thomas Parslow (PatRat)

 Is there one - what's the address?

 Wouldn't the solution be that all servers and transports have to do some
 Public Key based authentication on first connection?

 Personally I'm fairly new to messaging and became interested more from the
 live XML data communications face of Jabber, and as a result signed up for a
 variety of IM "accounts".

 I have noticed that I pretty well invariably get spam'd by "Valerie" or
 whoever when I sign up for a new account on ICQ ( a few seconds after
 signing up)... not good news if you are thinking of building chat into a
 kids learning environment.

 Can anyone give e an idea of how "they" do this? And what the implications
 are for using Jabber in this area are?

Part of the problem is that ICQ numbers are assigned sequentially,
this is how they can easily target new accounts (the reason that you
get loads of e-mails requesting you credit card number when you sign up
for compuserve).

What I would recommend if you want to protect your users from messages
of this type is blocking all messages from people not on the roster,
this should be fairly watertight... Maybe things could be setup so
that all messages received from users not on the roster are forwarded
to another JID (the admins) but this would require a modified client.

For the time being, just not using the ICQ transport should be enough,
it's not a problem on Jabber (in my experience).

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Kid-safe messaging: [was buddy icons]

2001-04-11 Thread Thomas Parslow (PatRat)

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
 Sent: Wednesday, April 11, 2001 5:05 PM

 However, even though spam isn't a problem yet on the
 Jabber network, there will come a day when it is does
 become a problem.  Once there are enough users of
 Jabber, there will naturally follow those who want to
 advertise to them and then it's only a small step to
 Jabber spam.  That's why it's important (to me, at
 least) to start planning for countermeasures sooner
 rather than later.

 why do you think it will become an issue if the user itself is careful
 enough? It definitely isn't easy to guess the account names on Jabber, as it
 is the case with ICQ.
 For example, I don't get any spam on my MSN Messenger account (and no email
 spam to my hotmail account neither).

But that relies on every user knowing what they're doing ;)
Also, many users wish to be listed in online directories so that
people can find them.

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Kid-safe messaging: [was buddy icons]

2001-04-11 Thread Thomas Parslow (PatRat)

 Actually, I like the thought of rate-limiting. If they can only send two 
subscription requests per minute, they would be discouraged from trying to 
bulk-subscribe. Also, if they could only resolve
 two search matches per minute, they would be discouraged from walking the list and 
bulk-messaging. Have the ability to implement rules like 'ten unique invalid user 
requests in a minute bans s2s
 communication with that server for ten minutes', and it just won't be
 practical.

 I believe the spam response rate is well under 1%, if they were only able to spam a 
hundred users a day or some such number, it would be unlikely they would consider 
this to a viable advertising
 method.

 -David Waite

Sounds interesting, although IMHO it should allow slightly more than
that, consider what happens when someone comes from another IM and has
to add all their contacts to the roster.

How about having a way for a client to report a message as spam, it
could send back an iq with the message content and sender, then if
one user or message is reported many times as spam it will start to be
blocked, have to be thought out well so as to not allow loop holes for
abuse.

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Relationship with .NET?

2001-04-10 Thread Thomas Parslow (PatRat)

I suggest if we as an industry are going to back anything we back SOAP
and XML and let .NET .DIE


 Wow, I can honestly say I've never heard such an ignorant statement in
 my life.  Let me put the statement in perspective for people who are not up
 to par with .NET..

 "I suggest if we as an industry are going to back anything we back small
 peices of wood made so we can pick our teeth, and LET TOOTHPICKS DIE.."

 Shesh..

Toothpicks can be made from wood, among other things ;)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Buddy icons File Transfer

2001-04-07 Thread Thomas Parslow (PatRat)

 I think the iq:oob is the right place for this.  I've devised a fairly
 simple way to ensure that the person making the connection is the 
 appropriate person.  I've explained it a few times on this mailing list,
 I can explain it again if necessary.

 About the firewall issue.  I haven't spent any time on this issue yet, 
 if there is a firewall between the sending and the recipient, then I 
 just show an error message. I know that some people and some other IM
 clients use temporary disk web server to store stuff.  Something about
 WebDav.  When I do get around to solving this, I don't think this is
 how I'll solve the firewall problem.  I'm thinking that managing the
 lifetime of others files and making sure their secure will be too
 difficult.

 Instead, I think I'll just build another mini-web server or maybe an
 NSAPI or ISAPI DLL that both senders and recipients will connect to
 simultaneously to send a file.  When the sender decides to send a file,
 the client will first connect to this server and do a post that tells
 this web server that it wants to send a file.  This web server will 
 respond with a unique URL that the client will use to give to the
 recipient.   The client will remain connected to this web server, and
 then send a iq:oob to the recipient, with the corresponding URL.  The
 recipient client will then connect to that web server and do a GET
 on that URI.  Once the recipient is connected, then he will send an
 iq:oob result back to the sending client.  When the sending client gets
 this, it will start pushing the file to the web server.  Once its done,
 it will close up the connection.   The web server will pipe the data
 it gets from the post back to the recipient's connection.  The recipient
 will GET the file and everyone is happy.

 How does this sound?

 -Robert

But that would be incompatible with the current systems...
Wouldn't it be easier to send the senders ip as part of an url then as
soon as the other client connects to this and requests the file (an
http get) the sender stops listening on that port. So while it would
be possible for a third party to get the file by eavesdropping on the
conversation and grabbing it before the other client does it would be
quite unlikely :)
That way would remain compatible with the other way being used in
clients like JabberIM and WinJab, the receiver does not need to know
whether he/she is downloading directly from the sender or via a third
party.

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re[2]: [JDEV] Limitations of XHTML Basic

2001-04-06 Thread Thomas Parslow (PatRat)


 On Friday, April 6, 2001, at 09:44 AM, Peter Saint-Andre wrote:

 As you can see there is support for em instead of the evil i,
 strong instead of b, etc.

 Yes, although qualified with "this generally means..." and "most clients 
 should recognize this as..." As I recall, there were always differences 
 between how browsers interpreted these. But I suppose if everyone 
 implementing HTML support in Jabber clients is cribbing from this 
 particular document, they'll all interpret these tags the same way :-)

 Bold and italic are nice, but this still leaves open the issue of fonts, 
 point sizes and colors. Otherwise it's a flashback to 1993 and Mosaic 
 1.0.

 At this point I'm planning to use em and strong but also use u and 
 font as necessary. (And I'll parse b and i if I receive 'em.) 
 Cellphones can just ignore them.

 —Jens

Wouldn't that make it invalid XML?
Hmm, this is an extract of the kind of thing the JabberIM client
(which just implemented sending of xhtml messages in the new version) sends:

html xmlns="http://www.w3.org/1999/xhtml"
body
span style="font-family: Arial; font-size: 10pt"
biutest/u/i/b
/spanbr/
/body
/html

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev



Re: [JDEV] Browseing

2001-03-26 Thread Thomas Parslow (PatRat)

 Hi,
 I know this is probably a bit of a silly question but how do I browse
 a servers services. I've tried various variations on:
 iq id="services" type="get" xmlns="jabber:iq:browse"service//iq
 I tried quite a few variations including using query as with
 jabber:iq:agents but none worked (I either got a user element or and
 error).
 How should I be doing it?
 Thomas Parslow (PatRat) ICQ #:26359483
 Rat Software
 http://www.rat-software.com/
 Please leave quoted text in place when replying

Don't worry, I've managed to work it out, and it was a very stupid
mistake :)

Thomas Parslow (PatRat) ICQ #:26359483
Rat Software
http://www.rat-software.com/
Please leave quoted text in place when replying



___
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev