Please anwer to the ML.
Le 19/09/2016 à 15:37, growl@airmail.cc a écrit :
On 2016-09-19 12:45, Yann Leboulanger wrote:
You are considered as SPAM because your IP is blacklisted:
IP XX.XX.XX.XX blacklisted by list.blogspambl.com [2], all.s5h.net [2], dnsbl.tornevall.org [163]
It is 2016, you really do not need to blacklist IPs, there are other options to fight spam - at least captchas (which is already implemented) and manual verification.
I think I have a bit more experience than you on the spam on this tracker. I'd love to remove all that anti-spam things that makes me loose a lot of time because of stupid guys, really !
1/ Yes, for your contacts to know which feature your client support,
we send the identity of the client. see XEP-0115 [0].
Would the consequences of turning this "features sending" off be harmful for conversations?
Yes. see 4/
3/ I don't really understand what you mean. Log encrypted messages is used by Gajim to locally log (write to db) your chat when it is encrypted by GPG or E2E.
I meant that I turned it off and then after some time it shows as on. Considering other thing that happened when ft_send_local_ips selectively being turned on, I found it strange. Like maybe some other options or actions turn this options on?
Nothing turns on this option on except advanced configuration editor. It is on by default when you create a new account. And it's not linked at all with the ft_Send_local_ip option.
So your paranoid mode also means a client with very few features
I think it would be the core features everybody who prefer more privacy wants, like messaging, encryption, offline sending, maybe file transfer. Would "paranoid mode" break those things?
Yes it would. Gajim don't allow you to send a file to a contact if it doesn't support it. And use only the FT protocols that are supported by your contact's client (there are several). So not announcing we support that means no FT at all. Same thing for encryption and many many other things.
Gajim also asks for a few things to server on connection to know if it support some features, and just asking that in the particular order Gajim asks is enough for the server to know you use Gajim.
Well, first great step would be if just other clients, not server, get no more information than needed.
Once again, Gajim build stanza in a certain order, send errors in some format, etc. So I'm quite sure it's not hard to identify Gajim with just sending a few stanza and see how it replies.
Ok, as I understand there is no practical way to hide that I'm using Gajim, correct?
Can you tell me a bit more about "ft_send_local_ips"? What IP is sent when I connect through the SOCKS5 proxy?
No I don't think any client can hide itself. All clients have their way to build and reply to some stanza, or not, and can be identified.
when you send a file to a contact, you also send him whene he can connect to get the file. The things that can be sent are :
- your IPs (the IPs your machine have. a 192.168.x.y, a real internet IP, depending on your network configuration). This is controlled by the ft_send_local_ips option.
- the IPs/hostnames of socks5 proxys (listed in file_transfer_proxies option or discovered on your server)
- your real IP discovered with UPnP-IGD if your router supports that.
- your real IP discovered with UPnP-IGD if your router supports that.
How can I turn this off? Besides dealing with my router.
Are there any other options and features that could leak my real or local ip, even if use SOCKS5 connection in account settings? Or maybe DNS requests? Sorry for annoying :)
Do not install the required dep (python-gupnp-igd). There is currently no option to not use that.
only P2P things can reveal your IP : FT, whiteboard plugin. I think that's all currently and they use the same options.
Le 19/09/2016 à 16:47, growl@airmail.cc a écrit :
- your real IP discovered with UPnP-IGD if your router supports that.
How can I turn this off? Besides dealing with my router.
Are there any other options and features that could leak my real or local ip, even if use SOCKS5 connection in account settings? Or maybe DNS requests? Sorry for annoying :) _______________________________________________ Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
Yep this is an option to add, why not. a ticket would help us to add it ... if you was not using TOR :/
Le 19/09/2016 à 17:42, growl@airmail.cc a écrit :
On 2016-09-19 15:17, Yann Leboulanger wrote:
Do not install the required dep (python-gupnp-igd). There is currently no option to not use that.
Ok. Please consider to add this option though.
Thank you for your time and answers :)
Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
Yep this is an option to add, why not. a ticket would help us to add it ... if you was not using TOR :/
You just can either:
1. Stop blocking Tor, I feel unfairly discriminated by this already
2. Whitelist me. I think I proved I am not a spammer ;)
3. Outsource problem, that is move to e.g. Github or Gitlab or BitBucket or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
growl@airmail.cc wrote on 09/19/2016 19:48:
Yep this is an option to add, why not. a ticket would help us to add it ... if you was not using TOR :/
You just can either:
Stop blocking Tor, I feel unfairly discriminated by this already
Whitelist me. I think I proved I am not a spammer ;)
Outsource problem, that is move to e.g. Github or Gitlab or BitBucket
or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
+1 for #3. It will be much easier to contribute patches and to handle problem repors.
Le Mon, 19 Sep 2016 19:52:41 +0300, Ruslan Makhmatkhanov cvs-src@yandex.ru a écrit :
- Outsource problem, that is move to e.g. Github or Gitlab or
BitBucket or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
+1 for #3. It will be much easier to contribute patches and to handle problem repors.
So you want privacy but ask developers to give all their informations to github or any other centralised container ? Also use gmail maybe ? Simplicity has a cost, we may better thank Yann to handle all the work of being independant on that point :) It's for sure a compromise, with pros and cons, but coming from someone picky about privacy sounds strange to me. (couldn't avoid answering to that, sorry for the noise :))
This was very lame and totally uncalled for. Your considerations are not even of the same scale as the users' privacy, as the project is already open source anyway.
Alex
-----Original Message----- From: Gajim-devel [mailto:gajim-devel-bounces@gajim.org] On Behalf Of Jonathan Michalon Sent: Thursday, September 22, 2016 2:57 PM Cc: Gajim-devel@gajim.org Subject: Re: [Gajim-devel] Anonymous mode
Le Mon, 19 Sep 2016 19:52:41 +0300, Ruslan Makhmatkhanov cvs-src@yandex.ru a écrit :
- Outsource problem, that is move to e.g. Github or Gitlab or
BitBucket or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
+1 for #3. It will be much easier to contribute patches and to handle problem repors.
So you want privacy but ask developers to give all their informations to github or any other centralised container ? Also use gmail maybe ? Simplicity has a cost, we may better thank Yann to handle all the work of being independant on that point :) It's for sure a compromise, with pros and cons, but coming from someone picky about privacy sounds strange to me. (couldn't avoid answering to that, sorry for the noise :)) _______________________________________________ Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
To be fair he suggested more possible solutions, not only github. Gitlab for example is open source and can be installed on your own server as far as I know...
Just my 2 cents...
Am Donnerstag, 22. September 2016, 20:57:26 schrieb Jonathan Michalon:
Le Mon, 19 Sep 2016 19:52:41 +0300,
Ruslan Makhmatkhanov cvs-src@yandex.ru a écrit :
- Outsource problem, that is move to e.g. Github or Gitlab or
BitBucket or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
+1 for #3. It will be much easier to contribute patches and to handle problem repors.
So you want privacy but ask developers to give all their informations to github or any other centralised container ? Also use gmail maybe ? Simplicity has a cost, we may better thank Yann to handle all the work of being independant on that point :) It's for sure a compromise, with pros and cons, but coming from someone picky about privacy sounds strange to me. (couldn't avoid answering to that, sorry for the noise :)) _______________________________________________ Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
Are you talking about gitlab.gajim.org?
work in progress of course. Nothing usable
On 09/22/2016 09:01 PM, Thilo Molitor wrote:
To be fair he suggested more possible solutions, not only github. Gitlab for example is open source and can be installed on your own server as far as I know...
Just my 2 cents...
Am Donnerstag, 22. September 2016, 20:57:26 schrieb Jonathan Michalon:
Le Mon, 19 Sep 2016 19:52:41 +0300,
Ruslan Makhmatkhanov cvs-src@yandex.ru a écrit :
- Outsource problem, that is move to e.g. Github or Gitlab or
BitBucket or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
+1 for #3. It will be much easier to contribute patches and to handle problem repors.
So you want privacy but ask developers to give all their informations to github or any other centralised container ? Also use gmail maybe ? Simplicity has a cost, we may better thank Yann to handle all the work of being independant on that point :) It's for sure a compromise, with pros and cons, but coming from someone picky about privacy sounds strange to me. (couldn't avoid answering to that, sorry for the noise :)) _______________________________________________ Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
yes :D
Am Donnerstag, 22. September 2016, 21:05:47 schrieb Yann Leboulanger:
Are you talking about gitlab.gajim.org?
work in progress of course. Nothing usable
On 09/22/2016 09:01 PM, Thilo Molitor wrote:
To be fair he suggested more possible solutions, not only github. Gitlab for example is open source and can be installed on your own server as far as I know...
Just my 2 cents...
Am Donnerstag, 22. September 2016, 20:57:26 schrieb Jonathan Michalon:
Le Mon, 19 Sep 2016 19:52:41 +0300,
Ruslan Makhmatkhanov cvs-src@yandex.ru a écrit :
- Outsource problem, that is move to e.g. Github or Gitlab or
BitBucket or whatever you feel comfortable with, where a lot of users and potential contributors.
I would personally prefer the third option for obvious reasons. But I know it is not the easiest solution.
+1 for #3. It will be much easier to contribute patches and to handle problem repors.
So you want privacy but ask developers to give all their informations to github or any other centralised container ? Also use gmail maybe ? Simplicity has a cost, we may better thank Yann to handle all the work of being independant on that point :) It's for sure a compromise, with pros and cons, but coming from someone picky about privacy sounds strange to me. (couldn't avoid answering to that, sorry for the noise :)) _______________________________________________ Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
Gajim-devel mailing list Gajim-devel@gajim.org https://lists.gajim.org/cgi-bin/listinfo/gajim-devel
-
Alex Malmyguine -
growl＠airmail.cc -
Jonathan Michalon -
Ruslan Makhmatkhanov -
Thilo Molitor -
Yann Leboulanger