search

thepug / Speeqe

A multi-user chat application over XMPP.
GNU Affero General Public License v3.0
135 stars 47 forks source link

JIDs should not be random #14

Open neckcen opened 13 years ago

neckcen commented 13 years ago

Currently if someone connects using speeqe anonymously, they get this "[random numbers]@speeqe.com/[random numbers]". The problem is that this is really abuse prone, you cannot ban anyone because they can just reload the room and they'll get a new random JID.

I suggest that the JID to be the person's IP and the resource to remain random. This would allow both a proper ban (at least for a while) and some tracking if the person is really pushing it too far. Alternatively, if concerned about privacy, the JID could be a hash of the IP + salt which still allows proper ban but doesn't let you track who is behind.

GreenLunar commented 12 years ago

I guess that this is related to the XMPP server software itself, not to the XMPP client Speeqe. You might like to search and report on this issue to ejabberd, Prosody or any other XMPP server which provides an anonymous/random login feaure http://xmpp.org/xmpp-software/servers/

GreenLunar commented 11 years ago

Reference: https://github.com/jappix/jappix/issues/217