The keylogging, screenshot sharing and remote command execution was in the Linux version of the plugin too https://x.com/ESETresearch/sta...

in this case OTR wasn't compromised, this new plugin was just remote running commands and uploading screenshots to a command and control server.

Are they also reporting about when it'll end up in the graveyard. 2025? That's the most exciting bit they've left out!

The thing I'm loving the most about the update is that it no longer uses http-long polling for incoming messages, instead using websockets (using a reverse webhook system aka trouter) which means there isn't long delays sometimes for messages when the server stops responding to long-polls. You can see it sometimes when you're logged in to teams on two devices and one might get a message straight away and another one doesn't get it until a minute later. Looking forward to adding this in to the Pidgin plugin for Teams :D

I'm on build 22000.1574 and i have it showing on mine.

I have this happening on my gaming rig. It says "System requirements not met. Go to Settings to learn more. " The hardware does support everything (AMD Ryzen 5 5600X, 32GB RAM) however its probably because I used rufus to build a TPM-less version of the Windows installer in order to deal with the performance/stuttering problems that AMD cpus were having back in the day.

From what I understand, they're switching off old versions of TLS support in their client but not providing newer TLS support in their non-subscription server. Would this be something that stunnel could sit in the middle of and upgrade TLS? (also, is it ironic that an article complaining about subscriptions needs a subscription to read it?)

Can't they just make their own RCS app? I've seen them say they can't make an SMS replacement app on iOS..... so just don't include SMS?

Whoops, sorry that the Google Chat plugin is failing for you. Can you open an issue on the githubs and I'll take a look at what's going on?

The "extract an oauth cookie hack" is because the APIs i use in the plugin aren't public so there's no way to request scope to them. Instead we get an "uber auth" token that lets you have access to every Api in Google, whether it's public or private. It used to be easier to set up, once upon a time, but after Pokemon Go was found to have been using the same uber auth a few years ago, there was a bit of a crackdown from Google to make that a bit tougher. Could have been easier if Pidgin had an embedded web browser, but the whole point of using pidgin is to keep away from web browsers and their high memory use :)

"thank fuck" indeed. Just as a reminder, when National enacted emergency powers after the 2011 Christchurch earthquakes, they used their power to fast track a controversial "three strikes and you're out" copyright law. Labour, on the other hand, used their emergency powers in 2020 to "cross party lies" and form a joint committee from multiple political parties. People can blame whichever party they like for the outstanding success, but in the end everyone had their fingers in the mouse trap

I've been trialling heap segments with Pidgin to see if I can squeeze more memory performance out of it. Memory usage dropped from about 150MB to just under 100MB when connected to 14 accounts (mostly XMPP and IRC, but a few slack and discord accounts too). Considering making it the default option for future builds (disclaimer: I'm a pidgin dev)

What this anzacathon website really highlights is the blatant disrespect of the Australian public, including this pocock fellow, to the "other country" in the word ANZAC. The quote in the post here even shows this disrespect, talking only about single buried *austalian* soldiers. The website only adds to this frustration being completely filled with links to only-Australian websites and legals. Chur bro.

I have a few buddies who work at Google but are in total fear of losing their jobs by contributing to open source projects. On the surface everything seems fine and everyone is super helpful until you hunt down the one person at Google who is the expert and then everything goes silent because they don't want to rock the boat.

One important thing to note with your setup is that the XMPP gateway for Google Talk doesn't support Hangouts group chats, so if you get invited to one you can't access it over XMPP, and you'll need to open it in your browser or using a Hangouts client.

You can however, create an XMPP-based group chat on Google Talk that Hangouts client's can't connect to, which is a bit odd, but a hangover (pun attempted!) from the old XMPP server days.

Also, accessing photos over the Google Talk XMPP server is pretty crappy having to open links to your browser rather than viewing them inline.