Gajim - 2023-11-27


  1. fjklp

    pep.: You should get a confirmation dialog when you try to close a chat. Have you tried selecting "do not ask me again" and pressing cancel? I don't know if this will do it.

  2. pep.

    I don't get the dialog

  3. fjklp

    are you on a recent gajim versin?

  4. fjklp

    are you on a recent gajim version?

  5. fjklp

    check confirm_close_muc in the advanced configuration editor

  6. pep.

    I'll check tomorrow thanks. And yeah I'm running 1.8.4

  7. pep.

    Not on the laptop right now

  8. hyoizaburoo

    hi

  9. hyoizaburoo

    if I connect over tor, is it enough to just set the global proxy as Tor?

  10. hyoizaburoo

    or do I have to enable the proxy per account basis?

  11. hyoizaburoo

    because even if I set global proxy as Tor. any new account I add has 'System' enabled as proxy

  12. hyoizaburoo

    because even if I set global proxy as Tor, any new account I add has 'System' enabled as proxy

  13. hyoizaburoo

    so, if I set global proxy as Tor, do I need to enbale them for my account too?

  14. hyoizaburoo

    the tor daemon is running as relay and I'm exclusively using the onion server as hostname

  15. innocent

    > is there any way to open to the last-read position of a chat? i understand that gajim needs to keep track of which message has been last read (incl. by other clients?) and it'd be nice to jump to that message when switching chats monocles chat for android has it.

  16. hyoizaburoo

    huh, it seems settings as global proxy is enough, if you set onion address as hostname

  17. sch

    I suggest to add "Tip Of The Day" to the main "Status" page, it would be good to educate about Gajim's feature (and also XMPP).

  18. sch

    cal0pteryx, lovetox, are there any new features or UI planned for Service Discovery?

  19. lovetox

    No

  20. sch

    Okay

  21. Anon Ymous

    > Anon Ymous: wrong. They are stored in Windows's credential vault Is that by default now? I was using an old profile, but yes, I see that it's possible now ๐Ÿ™‚

  22. Anon Ymous

    cal0pteryx I just checked, and it isn't enabled by default. I think that's a mistake.

  23. Anon Ymous

    cal0pteryx I just checked, and it isn't enabled by default? Or is this dependent on whether you're using the portable version, for which it does make sense to not use the vault, but it still doesn't make sense to save it in plain text imho.

  24. Anon Ymous

    cal0pteryx I just checked, and it's enabled by default for installations, disabled for portable, that makes sense. It still doesn't make sense to save it in plain text imho.

  25. fjklp

    Anon Ymous: what other option exists?

  26. lovetox

    Anon Ymous, it makes perfectly sense to us

  27. fjklp

    If I remember right, people have said you can store as a hash but only some servers will allow submitting a hash for authentication?

  28. lovetox

    and that hash has the same value as the password

  29. lovetox

    so nothing was gained

  30. fjklp

    it requires cracking. You seem to disagree with the whole rationale that passwords should be stored hashed, which is industry standard on servers.

  31. fjklp

    something likely is gained

  32. fjklp

    something likely is gained, it's just not as secure as encryption

  33. lovetox

    no nothing is gained, the hash is the password, everybody who gets the hash can log into your account

  34. fjklp

    you are right, lol, how stupid of me to overlook that

  35. lovetox

    and it makes not much sense to compare a server which stores tousands of users passwords, to your own machine storing only yours

  36. fjklp

    yeah, I get that they are different scenarios, server being more likely to be attacked. I just think we should still respect the end user as much as possible

  37. fjklp

    but maybe there is no solution possible here

  38. lovetox

    first you would need to define the problem, then we can talk about a solution

  39. fjklp

    I'm anticipating you saying "if you think an attacker has access to your password list, why would you assume they are not logging keystrokes anyway?"

  40. fjklp

    I'm anticipating you saying "if you think an attacker has access to your password list, why would you assume they are not logging keystrokes anyway?" or similar

  41. fjklp

    I'm not saying we should, but I can imagine gajim having an optional setting to require a password at launch time, that password being used to decrypt a a password store used by gajim

  42. lovetox

    im saying whatever your answer, it goes into the direction of you not securing your device, either by harddisk encryption or any other security mechanisms. So it seems you already dont care that attacker can read your full harddisk and all data contained. But Gajim should make now 10 bytes of that harddisk super secure for nobody to read. I would say Gajim cannot help such a careless user, and everything we do would be security theater.

  43. lovetox

    > I'm not saying we should, but I can imagine gajim having an optional setting to require a password at launch time, that password being used to decrypt a a password store used by gajim Encrypt your harddrive and assign a password, suddenly you secure a lot more than *just* your XMPP account

  44. fjklp

    yes, I agree

  45. fjklp

    I'm sure someone can come up with scenarios where file-level encryption makes sense, too. But that will have a less confident rationale.

  46. cynical

    Gajim stores my XMPP password plaintext somewhere? Or only on Windows? Gajim prompts me for my XMPP password on Debian everytime

  47. fjklp

    If someone wanted to add something to the wiki, should they just write it up and submit it as an issue, or ask first?

  48. fjklp

    It might just be easier to host a separate unofficial wiki

  49. lovetox

    i can give you a role so you can edit the wiki

  50. Link Mauve

    fjklp, the current direction things are going towards is using tokens, you still have a password for the initial login, but afterwards you get handed a token from the server and from then on you can use it instead of the password, but itโ€™s specific to this particular client and you can revoke it from other clients.

  51. fjklp

    Link Mauve: what is this called?

  52. Link Mauve

    FAST, see https://blog.prosody.im/fast-auth/

  53. fjklp

    thanks

  54. dpunkt

    Hello, I am trying to debug a OMEMO issue between Gajim and Siskin. Is there any way to make the XML Console in Gajim more readable? Larger text oder colors with more contrast?

  55. cal0pteryx

    dpunkt, try Ctrl+Plus

  56. cal0pteryx

    (in gajim 1.8.3)

  57. dpunkt

    Thanks. Does not work in the console, but increasing the text size in the chat window also increases the size in the xml console...

  58. cal0pteryx

    Right, the shortcut is only recognized when the main window is focused

  59. dpunkt

    After updating gajim I noticed that the text field is selected when pressing any button. including just "ctrl". How can I Ctrl-C a Message now? Is this a Bug or Intentional?

  60. cal0pteryx

    dpunkt, works fine here

  61. cal0pteryx

    ctrl does not select the message input for me

  62. dpunkt

    Gajim 1.8.4, Windows 10

  63. cal0pteryx

    and I can Ctrl+C just fine

  64. cal0pteryx

    can somebody else on Windows check?

  65. dpunkt

    Which Version of OMEMO does Gajim implement?

  66. fjklp

    works for me on linuxd

  67. fjklp

    works for me on linux

  68. cal0pteryx

    fjklp, linux is not Windows :)

  69. fjklp

    I know, I just wanted to add the data point

  70. cal0pteryx

    dpunkt, 0.3 ish

  71. cal0pteryx

    see https://gajim.org/support/extensions/

  72. dpunkt

    Thanks. Helps a lot to look into the correct spec...

  73. fjklp

    wow, windows doesn't let you download and install applications

  74. fjklp

    how considerate

  75. fjklp

    is windows 10 not supported?

  76. dpunkt

    I just installed it 1 hour ago?

  77. cal0pteryx

    fjklp, that's simply not true

  78. fjklp

    which part?

  79. fjklp

    I just tried

  80. cal0pteryx

    Windows _does_ let you download and install applications. Windows 10 _is_ supported

  81. fjklp

    it gave me a dialog with the option to "not install"

  82. fjklp

    dark patterns

  83. cal0pteryx

    fjklp, look closer

  84. cal0pteryx

    Microsoft Store is recommended

  85. fjklp

    that doesn't work either

  86. fjklp

    gives me a blank page

  87. dpunkt

    The direct download does not seem to be microsft-approved code signed, so you get the warning.

  88. fjklp

    it seemed to be more than a warning for me

  89. dpunkt

    When does this prekey="true" flag get set in omemo messages?

  90. cal0pteryx

    fjklp, that's not a gajim issue that your MS Store is not working :D and yes, you need to confirm that you really want to open the setup. it's hidden, but it's there

  91. fjklp

    wow, that's insidious

  92. cal0pteryx

    hence the MS Store version

  93. fjklp

    does the ms store link usually open a page in the browser? for me it opened a blank page in the browser.

  94. cal0pteryx

    fjklp, it opens a page in the browser, but it also tries to open the Store after the page has been loaded. seems your MS Store install is borked or you have some blocking extensions running

  95. cal0pteryx

    You can also use Chocolatey, if you prefer a decent package manager on Windows

  96. fjklp

    I don't know what's going on but it's taking forever to connect to anything in gajim

  97. fjklp

    maybe I'll try again latre

  98. fjklp

    maybe I'll try again later

  99. fjklp

    what a crazy experience trying to use windows

  100. cal0pteryx

    fjklp, just because it does not work for you :) I'm using Gajim on windows just fine

  101. fjklp

    I mean the dark patterns in the installer, the fact that it wouldn't let me reboot when I wanted to, and the fact that gajim was taking forever to connect to multiple servers, and that it was running so slow with more than enough ram

  102. cal0pteryx

    fjklp, maybe your internet is just slow at the moment? or your machine in general? Gajim runs fast for me on Windows, every day

  103. fjklp

    it's definitely slow internet. I was running it in a vm. Maybe windows needs more cores to just idle or something.

  104. fjklp

    I haven't messed with windows much for a long time

  105. fjklp

    sorry, I mean definitely *not* slow internet

  106. fjklp

    I can confirm that with gajim 1.8.4 in windows 10, after highlighting a word in chat, pressing the control key causes the text input field to be selected, so copying with Ctrl+c is not possible

  107. fjklp

    I can confirm that with gajim 1.8.4 in windows 10, after highlighting a word in chat, pressing the control key causes the text input field to be selected, so copying with Ctrl+c is not possible in the chat message space

  108. dpunkt

    also happens with the shift key (e.g. text selection by keyboard)

  109. fjklp

    I also experience that