Difference between revisions of "XMPP Newsletter"

From XMPP WIKI
Jump to navigation Jump to search
(25 intermediate revisions by 3 users not shown)
Line 2: Line 2:




== Contributors: What determines relevancy? ==
== Contributors ==
 
=== What determines relevancy? ===


The submission must ideally be a blog or article about XMPP/Jabber and/or
The submission must ideally be a blog or article about XMPP/Jabber and/or
Line 15: Line 17:
Make sure you read the [[Basic communication guide for XMPP techies]]
Make sure you read the [[Basic communication guide for XMPP techies]]


== Newsletter editors ==
== Editors ==


=== TODO/checklist ===
=== TODO/checklist ===
Line 50: Line 52:
=== Intro ===
=== Intro ===


Welcome to the XMPP newsletter: October edition, covering the month of September.
Welcome to the XMPP newsletter October edition, covering the month of September.


New this month: we added the license (CC by-sa 4.0), and the credits as this is a community effort.
New this month: we added the license (CC by-sa 4.0), and the credits as this is a community effort.
Line 62: Line 64:
In case of internet shut down, whether by disaster or voluntarily, peer networks are useful. [http://monal.im/blog/xmppsignalbluetoothp2p-wifi-serverless-chat/ Monal uses Airdrop] (wifi and bluetooth) along with XMPP and OMEMO end-to-end encryption.
In case of internet shut down, whether by disaster or voluntarily, peer networks are useful. [http://monal.im/blog/xmppsignalbluetoothp2p-wifi-serverless-chat/ Monal uses Airdrop] (wifi and bluetooth) along with XMPP and OMEMO end-to-end encryption.


[https://framapic.org/Qg1mv43w1673/akPmtepp0nfH.png]
[https://framapic.org/Qg1mv43w1673/akPmtepp0nfH.png Monal and Airdrop screenshots]


JabberFr, the French XMPP/Jabber community, has again [https://news.jabberfr.org/2019/09/lettre-dactualite-xmpp-du-3-septembre-2019/ translated the XMPP newsletter in French], merci beaucoup.
JabberFr, the French XMPP/Jabber community, has again [https://news.jabberfr.org/2019/09/lettre-dactualite-xmpp-du-3-septembre-2019/ translated the XMPP newsletter in French], merci beaucoup.


For the poor lonesome techies, we wrote a very minimalistic [https://wiki.xmpp.org/web/Basic_communication_guide_for_XMPP_techies communication guide], could be worth for some.
We have started a very minimalistic [https://wiki.xmpp.org/web/Basic_communication_guide_for_XMPP_techies communication guide] to help promoting a project through social networks and other means such as blog posts. Could be worth for those involved in XMPP projects and would like to get ideas on how to reach out to different communities.


=== Videos ===
=== Videos ===
Line 74: Line 76:
=== Events ===
=== Events ===


As usual every year, that time has come: we proudly announce the XMPP Summit 24 and the FOSDEM. The 24th XMPP Summit will happen on Thursday 30th and Friday 31st of January, and the FOSDEM will be held on Saturday 1st and Sunday 2nd of February. Prepare for the community gathering.
As usual every year, that time has come: we proudly announce the XMPP Summit 24 and [https://fosdem.org/2020/ FOSDEM]. The 24th XMPP Summit will happen on Thursday 30th and Friday 31st of January, and FOSDEM will be held on Saturday 1st and Sunday 2nd of February. Prepare for the community gathering; now is good time to start booking your flights!
 
[https://framapic.org/fTZlikXsyi0F/ZqlvJhNjWDFj.png FOSDEM 2020]


=== Software releases ===
=== Software releases ===
Line 80: Line 84:
==== Servers ====
==== Servers ====


Réda Housni Alaoui is reviving the formerly dormant [https://github.com/apache/mina-vysper Vysper XMPP server], please pronounce "whisper".
Réda Housni Alaoui is reviving the formerly dormant [https://github.com/apache/mina-vysper Vysper XMPP server] (pronounced as "whisper").


[https://blog.xabber.com/xabber-server-v-0-9-alpha-is-released/ Xabber Server v.0.9 alpha is released], with quick installation and management panel, and interesting innovations.
[https://blog.xabber.com/xabber-server-v-0-9-alpha-is-released/ Xabber Server v.0.9 alpha is released], with quick installation and management panel and interesting innovations.


The Fastpath Service plugin has been released in versions [https://discourse.igniterealtime.org/t/fastpath-service-plugin-4-4-4-released/86155 4.4.4] and [https://discourse.igniterealtime.org/t/fastpath-service-plugin-4-4-5-released/86198 4.4.5]., bringing support for managed queued chat requests, such as a support team might use.
[https://www.erlang-solutions.com/resources/download.html MongooseIM 3.4.1 is out now] with an important security upgrade, fixing a vulnerability allowed any logged in user to crash the node with malicious stanza on certain (but popular) configurations. [https://twitter.com/MongooseIM/status/1176111308430815232 Read the whole thread on Twitter] for more information.


[https://www.erlang-solutions.com/resources/download.html MongooseIM 3.4.1 is out now] with and important security upgrade, fixing a vulnerability that increased the chance of a cluster node crash. [https://twitter.com/MongooseIM/status/1176111308430815232 Read the whole thread on Twitter] for more precise info.
The igniterealtime community has many news:
* [https://discourse.igniterealtime.org/t/openfire-4-4-2-release/86209 Openfire 4.4.2]: "This release should better support server to server (s2s) connections, fix a few admin console XSS-style issues, and improve client session stability."
* The Fastpath Service plugin has been released in versions [https://discourse.igniterealtime.org/t/fastpath-service-plugin-4-4-4-released/86155 4.4.4] and [https://discourse.igniterealtime.org/t/fastpath-service-plugin-4-4-5-released/86198 4.4.5], bringing support for managed queued chat requests, such as a support team might use.
* [https://discourse.igniterealtime.org/t/search-plugin-1-7-3-released/86207 Search plugin 1.7.3]: "This update 3 adds protection against CSRF and XSS attacks."
* [https://discourse.igniterealtime.org/t/monitoring-service-plugin-1-8-1-released/86208 Monitoring Service plugin 1.8.1]: "This hotfix update 4 adds protection against XSS attacks on Archiving Settings page."


==== Clients and applications ====
==== Clients and applications ====


Profanity, the console/terminal app, has been released in [https://github.com/profanity-im/profanity/releases/tag/0.7.0 version 0.7.0] after five months of work, brining OMEMO end-to-end encryption, followed by a [https://github.com/profanity-im/profanity/releases/tag/0.7.1 0.7.1] bug fix release.
Profanity, has been released in [https://github.com/profanity-im/profanity/releases/tag/0.7.0 version 0.7.0] after five months of work, brining OMEMO end-to-end encryption, followed by a [https://github.com/profanity-im/profanity/releases/tag/0.7.1 0.7.1] bug fix release.
 
[https://gultsch.de/dino_multiple.html Multiple Vulnerabilities found in Dino], please update as soon as possible if you are a Dino user.


[https://gultsch.de/dino_multiple.html Multiple Vulnerabilities found in Dino], please update as soon as possible.
Converse has been released in versions [https://github.com/conversejs/converse.js/releases/tag/v5.0.2 5.0.2] and [https://github.com/conversejs/converse.js/releases/tag/v5.0.3 5.0.3] fixing security issues among others.
Converse users may find useful the new [https://blog.agayon.be/converse_xep_0070.html plugin to verify HTTP Requests via XMPP] from Agayon.
For developers, there is a [https://github.com/conversejs/converse.js-docker Converse Docker image] by odajay.  


Converse, the web app for team chat, has been released in versions [https://github.com/conversejs/converse.js/releases/tag/v5.0.2 5.0.2] and [https://github.com/conversejs/converse.js/releases/tag/v5.0.3 5.0.3] fixing security issues among others. A [https://github.com/conversejs/converse.js-docker Converse Docker image] has been released by odajay, and Agayon has released a [https://blog.agayon.be/converse_xep_0070.html plugin to verify HTTP Requests via XMPP].
[https://github.com/siacs/Conversations/releases/tag/ Conversations has been released in version 2.5.8].


The Android chat app [https://github.com/siacs/Conversations/releases/tag/ Conversations has been released in version 2.5.8].
[https://monal.im/blog/monal-4-out/ Monal 4 with iOS 13 support and dark mode is out]. Mac update is expected to be already released for October.


==== Libraries ====
==== Libraries ====
Line 104: Line 116:
=== Services ===
=== Services ===


[https://search.jabbercat.org/ Christopher Muclumbus], a listing and search engine of public XMPP/Jabber chat rooms/groups, has been updated with visual redesign, groupchats avatars, link to anonymous web chat if available, and software version pie chart.
[https://search.jabbercat.org/ Christopher Muclumbus], a listing and search engine of public XMPP chats, has been updated with a visual redesign, group chat avatars, link to anonymous web chat and logs if available, and software version pie chart.


=== GSoC ===
=== GSoC ===
Line 110: Line 122:
=== Extensions and specifications ===
=== Extensions and specifications ===


This month, three proposed XEP, and two updated. No XEP in Last Call, New, or Obsoleted.
This month, three proposed XEPs, and two updated. No XEPs in Last Call, New, or Obsoleted.


==== Last Call ====
==== Last Call ====
Line 152: Line 164:
=== Thanks and CTA, Call To Action (remove this mention before publishing) ===
=== Thanks and CTA, Call To Action (remove this mention before publishing) ===


This XMPP Newsletter is a community collaborative effort. Thanks to Nÿco, Daniel, Jwi, and MDosch for aggregating the news. Thanks Nÿco and SouL for the copywriting.
This XMPP Newsletter is a community collaborative effort. Thanks to Nÿco, Daniel, Jwi, and MDosch for aggregating the news. Thanks Nÿc, Seve, and Jwi for the copywriting.


Please follow and relay the XMPP news on our Twitter account [https://twitter.com/xmpp @xmpp].
Please follow and relay the XMPP news on our Twitter account [https://twitter.com/xmpp @xmpp].

Revision as of 13:30, 26 September 2019

Here you can submit news items for inclusion in the next XMPP Newsletter (as managed by the CommTeam).


Contributors

What determines relevancy?

The submission must ideally be a blog or article about XMPP/Jabber and/or XMPP-based software (clients, servers, libs).

Some exceptions might be made, for example for a release page showing a new release of some XMPP-based software.

However, marketing brochures (e.g. single-page marketing sites) for new products which don't contain information on XMPP, won't be included.

Make sure you read the Basic communication guide for XMPP techies

Editors

TODO/checklist

For the newsletter editors:

  1. Collect links in this wiki page, read and validate content
  2. Copywriting so it is readable by humans
  3. Add images
  4. Add clear CTA
  5. Subject line and preview text
  6. PR on website git repo for blog post (Markdown, Pelican), and peer review
  7. Analytics from latest newsletter in spreadsheet
  8. Newsletter via Tinyletter
  9. Twitter scheduling: text, image, hashtags, link, timestamp
  10. Empty this page, keep structure

Planning

October

  • 2019-09-27 Fri: end of submission
  • 2019-09-27 Fri: PR on GitHub
  • 2019-10-01 Tue: newsletter publication, blog post, tweets

Submissions for next newsletter

Newsletter subject/title

[ Friendly, human introduction for the month (remove this mention before publishing) ]

  • Prepare for FOSDEM, modern XMPP features, and more news
  • FOSDEM 2020 Feb, modernization of XMPP, peer networks

Intro

Welcome to the XMPP newsletter October edition, covering the month of September.

New this month: we added the license (CC by-sa 4.0), and the credits as this is a community effort.

Be kind, inform your friends and colleagues: forward this newsletter!

Articles

Ralph Meijer, chairman of the Board of Directors of the XSF, has written an introductory piece about "XMPP Message Attaching, Fastening, References", specifications currently in progress.

In case of internet shut down, whether by disaster or voluntarily, peer networks are useful. Monal uses Airdrop (wifi and bluetooth) along with XMPP and OMEMO end-to-end encryption.

Monal and Airdrop screenshots

JabberFr, the French XMPP/Jabber community, has again translated the XMPP newsletter in French, merci beaucoup.

We have started a very minimalistic communication guide to help promoting a project through social networks and other means such as blog posts. Could be worth for those involved in XMPP projects and would like to get ideas on how to reach out to different communities.

Videos

Tutorials

Events

As usual every year, that time has come: we proudly announce the XMPP Summit 24 and FOSDEM. The 24th XMPP Summit will happen on Thursday 30th and Friday 31st of January, and FOSDEM will be held on Saturday 1st and Sunday 2nd of February. Prepare for the community gathering; now is good time to start booking your flights!

FOSDEM 2020

Software releases

Servers

Réda Housni Alaoui is reviving the formerly dormant Vysper XMPP server (pronounced as "whisper").

Xabber Server v.0.9 alpha is released, with quick installation and management panel and interesting innovations.

MongooseIM 3.4.1 is out now with an important security upgrade, fixing a vulnerability allowed any logged in user to crash the node with malicious stanza on certain (but popular) configurations. Read the whole thread on Twitter for more information.

The igniterealtime community has many news:

  • Openfire 4.4.2: "This release should better support server to server (s2s) connections, fix a few admin console XSS-style issues, and improve client session stability."
  • The Fastpath Service plugin has been released in versions 4.4.4 and 4.4.5, bringing support for managed queued chat requests, such as a support team might use.
  • Search plugin 1.7.3: "This update 3 adds protection against CSRF and XSS attacks."
  • Monitoring Service plugin 1.8.1: "This hotfix update 4 adds protection against XSS attacks on Archiving Settings page."

Clients and applications

Profanity, has been released in version 0.7.0 after five months of work, brining OMEMO end-to-end encryption, followed by a 0.7.1 bug fix release.

Multiple Vulnerabilities found in Dino, please update as soon as possible if you are a Dino user.

Converse has been released in versions 5.0.2 and 5.0.3 fixing security issues among others. Converse users may find useful the new plugin to verify HTTP Requests via XMPP from Agayon. For developers, there is a Converse Docker image by odajay.

Conversations has been released in version 2.5.8.

Monal 4 with iOS 13 support and dark mode is out. Mac update is expected to be already released for October.

Libraries

Other

Services

Christopher Muclumbus, a listing and search engine of public XMPP chats, has been updated with a visual redesign, group chat avatars, link to anonymous web chat and logs if available, and software version pie chart.

GSoC

Extensions and specifications

This month, three proposed XEPs, and two updated. No XEPs in Last Call, New, or Obsoleted.

Last Call

New

Proposed

Message Fastening

Abstract: This specification defines a way for payloads on a message to be marked as being logically fastened to a previous message.

URL: https://xmpp.org/extensions/inbox/fasten.html


XMPP Compliance Suites 2020

Abstract: This document defines XMPP protocol compliance levels.

URL: https://xmpp.org/extensions/inbox/cs-2020.html


Authorization Tokens

Abstract: This document defines an XMPP protocol extension for issuing authentication tokens to client applications and provides methods for managing сlient connections.

URL: https://xmpp.org/extensions/inbox/auth-tokens.html

Obsoleted

Updated

Friendly specs

Thanks and CTA, Call To Action (remove this mention before publishing)

This XMPP Newsletter is a community collaborative effort. Thanks to Nÿco, Daniel, Jwi, and MDosch for aggregating the news. Thanks Nÿc, Seve, and Jwi for the copywriting.

Please follow and relay the XMPP news on our Twitter account @xmpp.

License

This newsletter is published under CC by-sa license: https://creativecommons.org/licenses/by-sa/4.0/