Re: [jdev] [Security] Spoofing of iq ids and misbehaving servers

2014-02-01 Thread Mark Doliner
On Sat, Feb 1, 2014 at 6:21 AM, Alexander Holler hol...@ahsoftware.de wrote: I'm able to read. How do you send that reply? The malicious user is logged into the user's XMPP server with another account. The reply is sent as a normal IQ reply stanza from the malicious user's client to the server,

Re: [jdev] [Security] Spoofing of iq ids and misbehaving servers

2014-02-01 Thread Mark Doliner
On Sat, Feb 1, 2014 at 5:20 PM, Alexander Holler hol...@ahsoftware.de wrote: Am 01.02.2014 20:41, schrieb Mark Doliner: On Sat, Feb 1, 2014 at 11:20 AM, Alexander Holler hol...@ahsoftware.de wrote: Thijs Alkemade didn't wrote that an already broken server is necessary to explore or do

Re: [jdev] Spoofing of iq ids and misbehaving servers

2014-01-31 Thread Mark Doliner
(My apologies if this email doesn't thread correctly -- I was not previously subscribed to this mailing list.) THE SPEC In addition to the aforementioned paragraph from section 10.3.3 [footnote #1], section 8.1.2.1 [footnote #2] also talks about the from attribute. SERVER BEHAVIOR It's not clear

Re: [jdev] Spoofing of iq ids and misbehaving servers

2014-01-31 Thread Mark Doliner
Small correction... On Fri, Jan 31, 2014 at 12:26 AM, Mark Doliner m...@kingant.net wrote: In a server generated IQ reply it seems like it's never acceptable to set 'from' to the user's full JID. Thijs mentioned that he thought iChat server (unknown version) and ejabberd (probably 2.1.10) do

Re: [jdev] Spoofing of iq ids and misbehaving servers

2014-01-31 Thread Mark Doliner
On Fri, Jan 31, 2014 at 2:51 AM, Alexander Holler hol...@ahsoftware.de wrote: In general the reply should always have 'to' and 'from' exchanged. I think any server which doesn't do so, does something wrong. Hmm, are you talking about the 'jabber:client' namespace? If so I think this statement

Re: [jdev] XMPP user behavior

2008-01-25 Thread Mark Doliner
On Fri, 2008-01-25 at 11:52 AM, Matthias Stiller wrote: I am currently writing my bachelor thesis about performance measurings concerning XMPP. One chapter will deal with the simulation of user (clients) behavior. Due to this fact I would like to know if someone of you is aware of statistics

Re: [jdev] Where is the JCR these days?

2007-12-06 Thread Mark Doliner
On Dec 6, at 9:53 AM, Donald Hoffman wroge: On Dec 6, 2007, at 1:01 AM, Tomasz Sterna wrote: On Śr, 2007-12-05 at 19:31 -0800, Donald Hoffman wrote: I wanted to experiment with writing an XMPP external component for a project I am working on. I noticed some references to the Jabber

Re: [jdev] How to specify username with SASL ANONYMOUS

2007-10-18 Thread Mark Doliner
On Wed, Oct 17, 2007 at 02:48 PM, Peter Saint-Andre On Wed, Oct 17, 2007 at 02:40:26PM -0700, Justin Karneges wrote: On Wednesday 17 October 2007 2:11 pm, Mark Doliner wrote: So I've read through XEP-0175[1], and I think I have a pretty good idea of how SASL ANONYMOUS login is supposed

Re: [jdev] How to specify username with SASL ANONYMOUS

2007-10-18 Thread Mark Doliner
On Thu, Oct 18, 2007 at 01:20AM, Ralph Meijer wrote: On Wed, 2007-10-17 at 15:48 -0600, Peter Saint-Andre wrote: On Wed, Oct 17, 2007 at 02:40:26PM -0700, Justin Karneges wrote: On Wednesday 17 October 2007 2:11 pm, Mark Doliner wrote: So I've read through XEP-0175[1], and I think I have

RE: [jdev] JABBERSTUDIO NOTICE -- SITE DEMISE

2007-03-14 Thread Mark Doliner
Wikipedia has a few lists of Jabber software. The formatting is not exactly ideal... but anyone is free to update it. http://en.wikipedia.org/wiki/List_of_Jabber_client_software http://en.wikipedia.org/wiki/List_of_Jabber_component_software

RE: [jdev] Correct way to remove a nickname form a roster item

2006-10-05 Thread Mark Doliner
On 10/5/06, Norman Rasmussen wrote: On 10/5/06, Mark Doliner [EMAIL PROTECTED] wrote: Hi, I'mjavascript:SetCmd(cmdSend); wondering what is the correct way to remove a nickname from a roster item? Psi seems to generate: iq type=set id=ab34a query xmlns=jabber:iq:roster item

RE: [jdev] Correct way to remove a nickname form a roster item

2006-10-05 Thread Mark Doliner
On 10/5/06, Michal vorner Vaner wrote: On Wed, Oct 04, 2006 at 08:20:02PM -0700, Mark Doliner wrote: Hi, I'm wondering what is the correct way to remove a nickname from a roster item? Method 1: iq type='set' id='lalala123'query xmlns='jabber:iq:roster'item jid='[EMAIL PROTECTED

RE: [jdev] Correct way to remove a nickname form a roster item

2006-10-05 Thread Mark Doliner
On 10/5/06, Norman Rasmussen wrote: On 10/5/06, Mark Doliner [EMAIL PROTECTED] wrote: Wouldn't that remove the item from my roster completely? I just want to get rid of the nickname that's associated with the item. Some Jabber clients refer to this as an alias. woops, I missed that one

[jdev] Correct way to remove a nickname form a roster item

2006-10-04 Thread Mark Doliner
Hi, I'm wondering what is the correct way to remove a nickname from a roster item? Method 1: iq type='set' id='lalala123'query xmlns='jabber:iq:roster'item jid='[EMAIL PROTECTED]'groupBuddies/group/item/query/iq Method 2: iq type='set' id='lalala124'query xmlns='jabber:iq:roster'item jid='[EMAIL