I work on the Mellium project and sometimes on XEPs. Bike mechanic during the day, but also sometimes freelance software development.

Hire me: https://willowbark.org/

  • 32 Posts
  • 24 Comments
Joined 1Y ago
cake
Cake day: Apr 13, 2022

help-circle
rss


We are excited to announce that the NLnet Foundation will be supporting the development of end-to-end encryption in the Mellium library with a grant from the NGI Assure Fund! We will be implementing the OMEMO encryption protocol and related technologies.
fedilink

TL;DR we're looking for a paid contributor from the EU to help with whatever they feel like with whatever flexible hours they feel like working! This is part of a grant application. See the post for more details.
fedilink


I will say that it’s worth being careful: there’s no option for a backup XMPP account (so your account better have perfect uptime) and I very rarely have incoming phone calls actually work (calling out works, calling in is pretty random, most of the time it doesn’t even ring). Also the UI on the client is still pretty bad (especially for group texts, which are almost unusably bad).

All that being said, it’s a great service, just know what you’re getting into before you make it your primary phone number, it’s not nearly as polished as they make it sound.



Bicycles group chat!
cross-posted from: https://community.xmpp.net/post/49428 > Do you like #bicycles or #cycling? Do you also use an #xmpp compatible chat service? Join our new group chat at [bicycles@conference.samwhited.com](xmpp:bicycles@conference.samwhited.com?join). Hopefully this can become a fun community space to share pictures, post routes, and generally chat about bicycles. > > [Join us!](xmpp:bicycles@conference.samwhited.com?join)
fedilink

Bicycles group chat!
Do you like #bicycles or #cycling? Do you also use an #xmpp compatible chat service? Join our new group chat at [bicycles@conference.samwhited.com](xmpp:bicycles@conference.samwhited.com?join). Hopefully this can become a fun community space to share pictures, post routes, and generally chat about bicycles. [Join us!](xmpp:bicycles@conference.samwhited.com?join)
fedilink


Oh nice, some of the GSoC projects are really interesting this year!



cross-posted from: https://community.xmpp.net/post/34677 > For the last few years we've accepted patches on both GitHub and Sourcehut and used Sourcehut for our CI system. We have tried to move entirely to Sourcehut in the past but it ended up [not meeting our needs](https://codeberg.org/mellium/xmpp/issues/51), and we've tried starting our own co-op code hosting, but were not able to find many cooperators who wanted to help (if you'd like to join us and cooperatively host a Gitea instance, [reach out](https://blog.samwhited.com/about/)!). We have been experimenting with mirroring a few of the main repos on Codeberg and using their experimental CI feature, and this has been going much smoother and has been much simpler than the current SourceHut integration. > > With all this in mind, we've decided that the time is right to move to [Codeberg](https://codeberg.org/). > > For the time being we will continue to accept pull requests for the main project and a few of the support libraries over on GitHub, and we will keep the main projects CI running on Sourcehut as well as on the new Codeberg CI so that both Codeberg and GitHub based PRs can show the status. However, smaller support libraries that do not receive contributions often will be moved entirely to Codeberg and PRs on GitHub will be automatically closed. > > Eventually, once we are certain everything is working smoothly, the old GitHub repos will be retired and become mirrors on which we do not accept contributions and all Sourcehut repos will be deleted. There is no timeline for this currently. If you would like to keep track of the timeline once we have one, or submit comments or suggestions you can track the issue https://mellium.im/issue/304 > > Some repos are still being moved, but the main project is now on Codeberg and ready to accept contributions. To track the overall migration, see https://mellium.im/issue/301 > > Thanks for your continued support and contributions!
fedilink

For the last few years we've accepted patches on both GitHub and Sourcehut and used Sourcehut for our CI system. We have tried to move entirely to Sourcehut in the past but it ended up [not meeting our needs](https://codeberg.org/mellium/xmpp/issues/51), and we've tried starting our own co-op code hosting, but were not able to find many cooperators who wanted to help (if you'd like to join us and cooperatively host a Gitea instance, [reach out](https://blog.samwhited.com/about/)!). We have been experimenting with mirroring a few of the main repos on Codeberg and using their experimental CI feature, and this has been going much smoother and has been much simpler than the current SourceHut integration. With all this in mind, we've decided that the time is right to move to [Codeberg](https://codeberg.org/). For the time being we will continue to accept pull requests for the main project and a few of the support libraries over on GitHub, and we will keep the main projects CI running on Sourcehut as well as on the new Codeberg CI so that both Codeberg and GitHub based PRs can show the status. However, smaller support libraries that do not receive contributions often will be moved entirely to Codeberg and PRs on GitHub will be automatically closed. Eventually, once we are certain everything is working smoothly, the old GitHub repos will be retired and become mirrors on which we do not accept contributions and all Sourcehut repos will be deleted. There is no timeline for this currently. If you would like to keep track of the timeline once we have one, or submit comments or suggestions you can track the issue https://mellium.im/issue/304 Some repos are still being moved, but the main project is now on Codeberg and ready to accept contributions. To track the overall migration, see https://mellium.im/issue/301 Thanks for your continued support and contributions!
fedilink

Moving to Codeberg
We previously discussed moving to [Codeberg](https://codeberg.org/), and I'm thinking the time is right to make the move from our current GitHub/SourceHut mix entirely to Codeberg. If you have any concerns or comments, now is the time!
fedilink

Copied here for discussion among non-contributors: As more people begin to rely on this project I have become somewhat concerned that our bus factor of 1 (ie. "me") is too low. It would be good to find more maintainers or leads from among the contributors who can be given access and continue the project if I become incapacitated or stop working on the project for any other reason. However, there really aren't enough contributions (or contributors who have a deep understanding of the full project) to do this right now, so the first step would be to try and find/engage more regular contributors. Suggestions welcome.
fedilink



I created a new Gajim community and cross posted there as well, for future use!


I’ve been looking forward to the UI overhaul since the office hours demo! I’m looking forward to it trickling into Fedora.


A new initiative from the folks at jmp.chat creates a fediverse compatible hosting solution that eventually aims to integrate with XMPP!
fedilink

Welcome, and thanks for the newsletter translations!



This thread was pasted to Open Collective and I'd love to get your thoughts there, here, or in the chat room. --- Hi all, I'd like to get a feeling from our contributors about how funds should be used. I've marked several issues as prerequisite to implementing OMEMO recently, and wondered if it's worth allowing part of the bounty to be paid on these blocking issues to try and encourage development on them, or would it be better to save the whole bounty and pay it out to whomever implements OMEMO itself? For example, #292 has nothing to do with OMEMO itself, but needs to be done before any OMEMO implementation is very useful. I'd love to get your thoughts, especially if you're thinking a bout implementing any part of it or are one of the financial contributors to the bounty. If we do want to allocate some amount, how do we decide how much for each issue?
fedilink


This release fixes RFC 3920 session building ([#3468](https://lab.louiz.org/poezio/slixmpp/-/issues/3468)), improves certificate errors handling, and adds an XEP-0454 (OMEMO Media Sharing) plugin. The python cryptography package is required to use the XEP-0454 plugin.
fedilink

The Dev Communiqué for April 2022 has been released! Copied below, for your convenience: April continued to be a slow month for Mellium, but never the less we have some exciting updates to report! But first, the stats! - 9 commits to [mellium.im/xmpp](https://pkg.go.dev/mellium.im/xmpp) from 2 contributors - 1 new contributors! - 3 commits to [Communiqué](https://github.com/mellium/communique-tui) - $64.43 in donations towards sustaining Mellium development from 2 contributors ## mellium.im/xmpp The big news this month is the release of [v0.21.2](https://opencollective.com/mellium/updates/new-release-mellium-im-xmpp-v0-21-2), of course. After this **the the work was mostly care work and bug fixes to make sure Mellium remains a high-quality XMPP implementation**. A special thanks goes to new contributor Julien Lavocat who fixed a bug in resource binding when using Mellium on the server! Aside from this a small memory leak was found when establishing connections, the compression package was moved to the new [mellium.im/legacy](https://pkg.go.dev/mellium.im/legacy) module, and an [API was added](https://pkg.go.dev/mellium.im/xmpp@v0.21.3-0.20220426143527-de01e08b48b9/ibb#Listener.Expect) to allow accepting only specific [in-band bytestreams](https://xmpp.org/extensions/xep-0047.html) connections which is needed for protocols that negotiate byte streams out of band such as [Jingle File Transfer](https://xmpp.org/extensions/xep-0234.html). ## Announcements Finally, we have two fun announcements this month! The first is that donations towards the [OMEOM end-to-end encryption project](https://opencollective.com/mellium/projects/omemo) have broken through an arbitrary but fun ceiling and now total over $100 USD! If anyone would like to claim this bounty and has experience with encryption protocols, reach out to us by joining our chat room [users@mellium.chat](https://mellium.chat/) ([xmpp:users@mellium.chat](xmpp:users@mellium.chat?join)). Secondly, we have launched a new federated space for the XMPP community over at [https://community.xmpp.net](https://community.xmpp.net/)! This is a [Lemmy](https://join-lemmy.org/) instance, a federated forum/link sharing platform in the vein of Reddit. If you're not on it already, be sure to apply for an account and join us over on the [Mellium Co-op Community](https://community.xmpp.net/c/mellium) page, or checkout [all the communities](https://community.xmpp.net/communities) and see if any of your other favorite projects have joined! Remember, it's federated, so you can even follow conversations from a Mastodon, Hometown, or other fedi-software or from another Lemmy instance! We hope this space will be a benefit to the broader XMPP community. Thanks for reading, we'll see you next month!
fedilink

I apologize if thatwsas a joke, my bad


This is exactly why we should stop pretending everything is fine and actually try to address the problem of Google doing damage to open ecosystems.


This kind of language is literally what I was replying to. You’re not helping, you’re just ensuring fewer people use XMPP. Stop spreading fud.


When people say “killed” they obviously don’t mean “literally no one uses it”. Also no one really cares that Whatsapp or Google are still using it internally. Google did serious damage to the public network and the broader XMPP ecosystem and it’s worth acknowledging and learning from that instead of just complaining that someone wasn’t absolutely precise in their language. For all intents and purposes, XMPP is effectively dead to the general public. Let’s try to bring it back to popular use and make sure Google et al. can’t do their “embrace, extend, extinguish” thing again.

TL;DR — please stop being snarky to the OP.


When you say “not quite there yet”, what issues did you run into?


Do you already have a bridge setup and hooked up to your account, eg https://jmp.chat? If you go to add a contact, for instance, it will let you add a phone number and automatically append the bridge address (@cheogram.com in this case)


I’ve been using Cheogram (another Conversations fork that adds features related to telephone dialing and SMS gateways; if you don’t use one of those, it’s probably not super useful and Conversations is a better choice). I think it’s only available on F-Droid, sadly: https://f-droid.org/en/packages/com.cheogram.android/


Seems okay to me, but I’d bet existing ones are already established and probably other instances will have a wider user base. But I don’t see any reason to forbid it, personally.


New Community: /c/accessibility
Join us in a new community space dedicated to accessibility concerns in clients and the network more broadly! We hope to see you there.
fedilink

The account applications appear to be working again (or maybe they always were?) but are just a bit slow. Expect registrations to take a few hours before approval. Thanks!


Taking the Temperature
What are your thoughts on Lemmy so far? I'd love to know how people feel about it; what could be improved; etc.
fedilink

Quick update: it looks like email confirmations aren’t being sent and account applications aren’t working. I’ve emailed the hosting provider to ask for a fix and will update when account registration has been re-enabled.


There is a fundraiser (money managed by the XSF, the project and developers aren't related though) to add history support to the Matrix/XMPP bridge Bifrost, check it out, and possibly throw them a few bucks if you're frequently bridging to Matrix rooms!
fedilink

On the main home page you can choose “local”, but otherwise no, Lemmy doesn’t have any real admin tools which is quite frustrating.


Temporary Registration Restrictions
Hi all, there was a wave of spam this evening so I’ve temporarily required moderator approval to create a new account or community. If this causes any issues, please let me know. Thanks!
fedilink

I think they meant that the reference client/server get the new features. You’re correct that the other third party clients have the same issue as XMPP where they all implement their distinct subsets of features or take a long time to update. Having the specs in one giant document or in multiple little documents doesn’t make much difference there.



What does co-op membership mean in Mellium?
I'd be curious what others think about co-op membership in Mellium. My goal is to run the projects (or at least handling the money) in a cooperative fashion, and that means figuring out who the cooperators are and how they make decisions. Are the cooperators people who have donated? Contributed code? A certain amount of code? etc. As a community, let's try to decide how decisions should be made so it's not just me imposing my will forever!
fedilink

Should the default community be meta or general?
Someone mentioned that they don't have a good place to post releases for a community that's not on this instance. Maybe we should make this default group a more general group? It can still be for discussion about the instance too (or we can have a separate /c/meta if we think people won't want them together). What do others think? (the sidebar already says this is for general discussion, so this is really about whether we should rename it and/or split the group in two)
fedilink

If you have some technical ability and are on Android I’d setup sshd on the phone (there are various apps to do this easily) and use rsync(1) or scp(1).

If you want something less technical, I use the Conversations app on my phone and Dino on my desktop for chat and sometimes send files to myself. Not ideal, but it does work pretty well for one-off smaller files.


This is one of the big trade offs: Matrix has a big VC funded client/server implementation that gets new features right away. On the other hand, because of this it only has a few alternative clients and servers. XMPP on the other hand has a large and vibrant client/server ecosystem, but no single client/server pair that are funded and get new features right away. Generally speaking I think this is a good thing and it’s one of the reasons I decided to start doing XMPP development over Matrix development back when I was comparing them initially, but YMMV.


Anyone want to make an icon for the support room?
Over on /r/xmpp they get a lot of questions about how to configure a server and what not, so I decided to make a home for those sorts of questions here when the community isn't on Lemmy over at /c/support. Would anyone like to design an icon or possibly a header banner for /c/support community? It would be nice to spruce things up a bit!
fedilink

The “not actively developed” is wrong too; XMPP is very active and has been for a lot longer than matrix, meaning it generally has a lot of problems solved that Matrix is still working on re-inventing the wheel on.


XMPP has supported bridges for a long time too (since the early 2000’s, at least), for example, jmp.chat runs bridges between it and the telephone network, SMTP, IRC, and probably others that I’m forgetting. Disroot also runs an IRC bridge, as do a lot of XMPP servers.


What types of communities should be allowed?
If someone creates a community for their XMPP project, that should obviously be allowed. But what about tangentially related technologies or XMPP-focused general discussion communities? Eg. would an IETF KITTEN Working Group community be disallowed because it's not specific to XMPP (not that they're likely to create a group, I was just trying to think of something tangentially related)? What about a group to discuss XMPP Security or XMPP UX that's not specifically tied to a project or group? It may be worth us developing a policy on this early on to stop conflicts before they arise and to stop having to grandfather in to many groups if we decide later that they're out of scope.
fedilink

oh drat, doesn’t look like their federation support actually lets you subscribe to groups in other lemmy instances yet? Oh well, soon I hope!


How should local moderation decisions be handled?
Each community can appoint its own moderators and make its own separate decisions about what sort of content is allowed, but we should also likely think about an instance wide way of determining what sorts of content are and are not allowed and how moderation decisions are made. It's not a problem yet, but I figure it can't hurt to go ahead and get feedback from the community about what sorts of communities have good or bad moderation practices that we can emulate. What do others think?
fedilink

The [budget to implement OMEMO](https://opencollective.com/mellium/projects/omemo) has just reached $100 USD! If you'd like to work on OMEMO encryption in Mellium, you can reach out on our [chat](https://mellium.chat/). We should decide as a community if we want to allocate this as a bounty, or provide other resources like servers to test with and the like!
fedilink

Welcome to Lemmy!
Oops, hi again all; I am just learning to administer a Lemmy instance and accidentally deleted all my posts. Not to worry though, feel free to re-introduce yourself here, and welcome to lemmy!
fedilink