Can You Refuse Unsecured Connection W/ Ejabberd? [on hold]

I am undertaking a project of setting up a secure messaging server, I have decided to go down the XMPP route hosted offshore with Ejabberd as the server software.

To make sure that the server does indeed stay secure and there aren’t any unencrypted communications flying around I was hoping I could refuse connection to any client not using OMEMO/PGP/GPG/OTR.

Is it possible to do this with an Ejabberd server?

Continue reading Can You Refuse Unsecured Connection W/ Ejabberd? [on hold]

Does an SSL certificate have to cover the server hostnames returned by an SRV lookup on the domain?

I have XMPP service running on the domain xmpp.mydomain.com.

The XMPP service runs on two back-end servers, im1.mydomain.com and im2.mydomain.com. Clients find out about these servers by an SRV lookup on the XMPP address:

c… Continue reading Does an SSL certificate have to cover the server hostnames returned by an SRV lookup on the domain?

Why Jabber reigns across the Russian cybercrime underground

Much of the Russian cybercrime underworld is an enigma, but one technology serves as a crucial common link across all of it: Jabber. In a space of cutting-edge tech, creativity and crime, the 18-year-old instant messenger is the most popular communication tool among Russian-speaking cybercriminals, according to new research from the security firm Flashpoint. It’s how hackers make deals, share intelligence and offer tech support on their malware products. While it already reigns in Russian communities, Jabber is simultaneously rising in popularity for cybercriminals around the world. It’s a testament not only to the quality of the technology, but also to the influence of hacking trends set in Russia. “In the cybercriminal economy, Jabber is seen as the gold standard for communication,” Leroy Terrelonge III, a senior researcher at the security firm Flashpoint, told CyberScoop. Jabber (also known as XMPP or Extensible Messaging and Presence Protocol) is an open-source, federated instant messenger with thousands of independent servers and […]

The post Why Jabber reigns across the Russian cybercrime underground appeared first on Cyberscoop.

Continue reading Why Jabber reigns across the Russian cybercrime underground