Daniel Gultsch

Infrastructure “We should own our infrastructure.”

You might have heard that XMPP in general, and Conversations in particular, make a great UnifiedPush Distributor.

The goal of this tutorial is to set up a simple REST API that allows you to send XMPP messages to an existing XMPP account.

CVE-2019-16235+: Missing or incorrect sender validations in Dino allow an attacker to spoof messages and inject or remove entries from the user’s roster.

For the last couple of years I have been consulting and doing contract work for various instant messaging companies.

A justification for some of the design choices I made; The second part in a series of essays leading up the release of Conversations 2.0 I had been a Jabber user for many, many years when I got my first Android device in 2012.

Why it took us more than two years to enable End-to-End encryption by default: The first in a series of essays leading up to the release of Conversations 2.0 When Andreas Straub first introduced OMEMO into Conversations he was trying to make it work with…

CVE-2018-6591: When storing bookmarks on the server Converse.js does not properly configure the access model to be private.

In May 2016 Moxie Marlinspike published an article on his company’s blog entitled ‘Reflections: The ecosystem is moving’ where he claims that federated systems are ‘stuck in time’.

Establishing trust is always a complicated task but especially difficult in a multi-device environment where every device has its own identity.

XMPP is not suited for mobile devices.

CVE-2015-8688: Gajim doesn’t verify the origin of roster pushes thus allowing third parties to modify the roster.

Conversations is a messenger for the next decade.