[tor-talk] PSI Jabber leaking the client hostname?

[phillip at bailey.st]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/12/2011 02:34 PM, Jeroen Massar wrote:
> On 2011-10-12 14:14 , phillip at bailey.st wrote:
> [..]
>> Opened session for test2 at xxxxxxxxxxxxxxxxx.onion/foobar
>>
>> I guess is not normal to have your hostname going to some tor end point,
>> is this leak related to PSI or maybe some other misconfiguration.
> 
> That 'foobar' portion (or the long number in the other session you had)
> is called the 'XMPP resource'. Generally this is custom definable.
> 
> In PSI you can change this under Menu General -> Account Setup -> select
> the account, hit Modify => Misc
> 
> Then unselect the "Use hostname as a resource" option and enter
> something gibberish.
> 
> In XMPP this 'resource', along with it's priority, allows message
> routing to work when one is logged in multiple times.
> 
> Greets,
>  Jeroen



Hi Jeroen,

fixed as as suggested,

Opened session for test2 at xxxxxxxxxxxxxxxxx.onion/36695412361318423038617

Anyway scary stuff.


Thanks,

Phillip

- -- 
www.bailey.st

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEcBAEBAgAGBQJOlYrRAAoJENNBJKHbaDgTT0cH/RX0ksK/1UkOU337qF0CE3Qt
2jNJjQ/auqF+UYOnbwJce3eNDAhwxwoJrN2bR1wqGAXXJ69fanLWL78s9E8MdNij
I6ESXo+HML2KHcFHxm7oY0gMFRizwL64cY4KojfTLGlfuDKavkaYsAaHVsKmoKLb
OkuptUdbB3Ti/4eP7UNHeuVE9KCM/IfmknlXJXY/+F/0SPncRSMgtkZjReqiVSwy
gdqXYwbhHcbQVCA7/4cYb2tswfBtP5pIW4CRk4u+8+PdYFSWj3MFOeF8w0i1BeuX
OqOfU7RKtAlDuv5j6pOBVqnxGtIB+HMb4QphCDt6rbdkzq2NTAvSboTdE5JVC3Q=
=sRsm
-----END PGP SIGNATURE-----