Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Marco Cirillo
Sorry If I have been confrontational. I did misread your sentence, Just as hypothetical example, leaving alone internet SMS services which grant receptions. Given the louse normatives regarding rechargeable SIM cards in most countries it could be even less expensive then getting domains and vps

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Peter Saint-Andre
On 2/4/14, 1:38 PM, Evgeny Khramtsov wrote: Tue, 04 Feb 2014 21:31:47 +0100 Marco Cirillo wrote: Il 04/02/2014 21:29, Evgeny Khramtsov ha scritto: It's stronger than email in my practice. Don't be sorry for me. In your opinion, not in practice :) What do you know about my practice? Hey

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Evgeny Khramtsov
Tue, 4 Feb 2014 19:18:32 + Dave Cridland wrote: > On 4 Feb 2014 18:27, "Evgeny Khramtsov" wrote: > > > > Tue, 04 Feb 2014 09:59:37 -0700 > > michael p wrote: > > > > > I'm all for privacy, but I realize I need to trade some in order > > > to use other people's free as in beer services. If p

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Evgeny Khramtsov
Tue, 04 Feb 2014 21:31:47 +0100 Marco Cirillo wrote: > Il 04/02/2014 21:29, Evgeny Khramtsov ha scritto: > > It's stronger than email in my practice. Don't be sorry for me. > > In your opinion, not in practice :) > What do you know about my practice?

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Evgeny Khramtsov
Tue, 04 Feb 2014 20:13:59 +0100 Marco Cirillo wrote: > Il 04/02/2014 19:26, Evgeny Khramtsov ha scritto: > > Exactly. It is impossible to build SPAM free anonymous network, > > because you need an identity to block. The stronger the identity > > the less SPAM you have. > > Evgeny, > > Dependi

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Marco Cirillo
Il 04/02/2014 21:29, Evgeny Khramtsov ha scritto: It's stronger than email in my practice. Don't be sorry for me. In your opinion, not in practice :) -- *Marco Cirillo* /LW.Org/LW.Org IM Owner & Head Developer/ /Metronome IM Project Mantainer/Developer/ /Jappix Mantainer/Developer/ http://lig

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Dave Cridland
On 4 Feb 2014 18:27, "Evgeny Khramtsov" wrote: > > Tue, 04 Feb 2014 09:59:37 -0700 > michael p wrote: > > > I'm all for privacy, but I realize I need to trade some in order to > > use other people's free as in beer services. If people expect free > > services to also allow anonymous registration

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Marco Cirillo
Il 04/02/2014 19:26, Evgeny Khramtsov ha scritto: Exactly. It is impossible to build SPAM free anonymous network, because you need an identity to block. The stronger the identity the less SPAM you have. Evgeny, Depending on the acceptation of "identity" you intend, sorry to say but a phone

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Evgeny Khramtsov
Tue, 04 Feb 2014 09:59:37 -0700 michael p wrote: > I'm all for privacy, but I realize I need to trade some in order to > use other people's free as in beer services. If people expect free > services to also allow anonymous registration and not somehow to > become bastions of spammers, they have u

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Marco Cirillo
I think this thread is derailing out of actual usefulness and constructiveness, the topic is important, not trivial and can easily extend beyond just Prosody. It'd be good to not fall into the usual flat demagogic statements... Just a thought, -- *Marco Cirillo* /LW.Org/LW.Org IM Owner & Head

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Evgeny Khramtsov
Tue, 04 Feb 2014 16:42:11 +0100 Alexander Holler wrote: > The keyword above was 'common', that means if more service-providers > do think that this is a good idea (because it might work), it might > become finally accepted by users too. And then people will have to > leave their phone numbers eve

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Dave Cridland
On Tue, Feb 4, 2014 at 5:28 PM, Alexander Holler wrote: > Am 04.02.2014 17:59, schrieb michael p: > > Wait, why do the phone numbers need to be stored/logged? Can't a >> completely separate system be used to send an audio message or text to a >> number, then once the correct verification code is

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Alexander Holler
Am 04.02.2014 17:59, schrieb michael p: Wait, why do the phone numbers need to be stored/logged? Can't a completely separate system be used to send an audio message or text to a number, then once the correct verification code is received, signal the new user to be created on the jabber server

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread michael p
Wait, why do the phone numbers need to be stored/logged? Can't a completely separate system be used to send an audio message or text to a number, then once the correct verification code is received, signal the new user to be created on the jabber server and discard the number? I understand the

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Alexander Holler
Am 04.02.2014 15:35, schrieb Evgeny Khramtsov: Mon, 03 Feb 2014 21:25:23 +0100 Alexander Holler wrote: Am 03.02.2014 20:57, schrieb Evgeny Khramtsov: We're thinking to switch to SMS-based verification for jabber.ru: we have it currently and it works fine and is pretty cheap, just need to dis

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Evgeny Khramtsov
Mon, 03 Feb 2014 21:25:23 +0100 Alexander Holler wrote: > Am 03.02.2014 20:57, schrieb Evgeny Khramtsov: > > > We're thinking to switch to SMS-based verification for > > jabber.ru: we have it currently and it works fine and is pretty > > cheap, just need to disable email verification completely.

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Thomas Camaran
it's possible, also, to remove user if not connect after a period for limit this problem 2014-02-04 Mathias Ertl : > Hi, > > > On 02/03/2014 02:29 PM, Moonchild wrote: > > I've been running prosody for a little while now, and although I'm happy > with > > the c2s/s2s security of the connections

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Mathias Ertl
Hi, On 02/03/2014 02:29 PM, Moonchild wrote: > I've been running prosody for a little while now, and although I'm happy with > the c2s/s2s security of the connections it makes, I'm running into a different > security issue which is potentially a much larger problem. > > The problem is: spammers

Re: [Operators] Prosody vs. spammers - security measures?

2014-02-04 Thread Jonas Wielicki
On 03.02.2014 21:25, Alexander Holler wrote: > Am 03.02.2014 20:57, schrieb Evgeny Khramtsov: > >> We're thinking to switch to SMS-based verification for >> jabber.ru: we have it currently and it works fine and is pretty cheap, >> just need to disable email verification completely. > > Hmm, nice