News for hackers. Stuff that matters.
Re:DuckDuckGo just launched a DDG branded XMPP service by ritonlajoie on Friday May 13, 2011 @10:35AM (#2544777)
I'm sorry but I don't really understand the utility of that service ? Is there any link to other protocols ? What are the benefits of using this server instead of something like gtalk or some other widespread service ? Why should I jump to this service and make my friend so the switch as well ?

Thanks :)

edit: I know perfectly what is DDG and I really love this search engine, but still.. don't get me wrong, I'm just asking for answers there, not being rude

Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:57AM (#2544851)
You dont need to convince them to switch! You can still talk to your gtalk friends, its all XMPP/Jabber! This is not a service just for inside duckduckgo. Inform yourself a bit more about XMPPP/Jabber :-).
Re:DuckDuckGo just launched a DDG branded XMPP service by pbhjpbhj on Saturday May 14, 2011 @09:00AM (#2547598)
>Inform yourself a bit more about XMPPP/Jabber :-).

I think that perhaps, like me, they were hoping that you would be interested in sharing a couple of use cases for XMPP with us ...?

Re:DuckDuckGo just launched a DDG branded XMPP service by Estragon on Friday May 13, 2011 @11:03AM (#2544877)
I'm confused about this, too. Is this mostly to replace discussion about DDG on IRC? Why is this exciting? (As with the parent comment, I'm not trying to tear anyone down. People are clearly excited about this, and I'm wondering what coolness I'm missing out on.)
Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @11:08AM (#2544893)
I have an account on my own XMPP server. I just added "[email protected]" and I can now do DDG searches through my chat client. Not sure how useful that is, but nice nontheless. And all without having to sign up for an account directly with their XMPP service, because of federation.
Re:DuckDuckGo just launched a DDG branded XMPP service by Estragon on Friday May 13, 2011 @11:49AM (#2545025)
Ah, thanks for the explanation.
Re:DuckDuckGo just launched a DDG branded XMPP service by AdamGibbins on Friday May 13, 2011 @08:34AM (#2544381)
For those that haven't tried before, running your own XMPP server is incredibly easy on even a small VPS. I'd recommend ejabberd, its pretty solid, light weight and fast.
Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:21AM (#2544713)
I always suggest prosody :-) And we use this as our XMPP server cause its the modern way to use XMPP :)
Re:DuckDuckGo just launched a DDG branded XMPP service by HedgeMage on Friday May 13, 2011 @05:13PM (#2546215)
I second the Prosody recommendation. I'm in the process of migrating my Jabber server to it, and it's quite slick.
Re:DuckDuckGo just launched a DDG branded XMPP service by thristian on Friday May 13, 2011 @09:53AM (#2544599)
I'm most interested this oblique reference: "...add our DuckDuckGo Jabber Conference, it will soon be linked to the IRC channel #duckduckgo on freenode".

Where's the technology for linking an XMPP conference to an IRC channel? I lurk in some IRC channels that would love to migrate to a more modern protocol, and that seems a good way to bridge the gap.

Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:21AM (#2544706)
We use a Perl Bot for this. It will uses POE-Components to connect to the IRC and to the XMPP and then dispatches the messages to one from the other.

If you are interested, just join us on IRC and we talk about it :)

Re:DuckDuckGo just launched a DDG branded XMPP service by p4bl0 on Friday May 13, 2011 @10:37AM (#2544786)
A friend did this: https://gitorious.org/irctk ("irctk is a general-purpose IRC wrapper written in C with libircclient"). I think it could be pretty straightforward to do the job using it.
Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:41AM (#2544803)
We prefer Perl, cause we got one solution for everything and can easily combine the thousands components offered. Just cause a lib does IRC doesnt help us much :-) It must be easy! :)
Re:DuckDuckGo just launched a DDG branded XMPP service by agazso on Friday May 13, 2011 @10:54AM (#2544837)
XMPP has a concept of transports, that are gateways to other networks. Gateways exists for MSN, ICQ, AIM and IRC.

And to answer your question, taka a look at

http://xmpppy.sourceforge.net/irc/

Re:DuckDuckGo just launched a DDG branded XMPP service by cdr on Friday May 13, 2011 @10:24AM (#2544727)
At one of my internships they had written a simple server in Java to bridge XMPP and IRC. Sounds like it's been re-invented a few times.
Re:DuckDuckGo just launched a DDG branded XMPP service by va_coder on Friday May 13, 2011 @08:21AM (#2544359)
There are many secure ways to use XMPP. What is so great about ddg doing it?
Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @08:24AM (#2544367)
I can't answer that question. However, I did leave the following comment on their announcement page:

Will you be following the same principals in regard to privacy as the DDG search engine follows? Personally, I would love to see the following:

1.) No connection logging. Ie, don't log when people log in and from which IPs

2.) No chat logs

3.) High profile information and instructions on how people can use OTR (Off the Record) for end to end chat encryption

4.) A Tor hidden service gateway to the XMPP server

Regarding 1 and 2, the least that is required IMO is a privacy policy detailing which information is stored and for how long.

Re:DuckDuckGo just launched a DDG branded XMPP service by drdaeman on Friday May 13, 2011 @09:15AM (#2544482)
I think, general (tech-savvy) audience would more enjoy encrypted logging (message archiving), using some variant of XEP-0136, but storing messages encrypted to user's public PGP/GPG key.

So the messages are kept (in case you want to refresh your memory, but don't have locally-stored history), but are unaccessible by third parties.

Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @09:21AM (#2544496)
I'm not sure about that. People who want chat logs can simply generate them on the client side. That way, even if they're using OTR they still get the chat logs.
Re:DuckDuckGo just launched a DDG branded XMPP service by ZoFreX on Friday May 13, 2011 @10:21AM (#2544712)
> People who want chat logs can simply generate them on the client side.

That wouldn't fulfil 90% of the purpose of keeping logs, for me at least. Not everyone has the same requirements as you - I for one very rarely bother with OTR, but I have to search my chat logs for something on an almost daily basis. I use XMPP on my work PC, on my laptop and desktop at home, and on my phone. Splitting the logs across all those devices would make them literally useless.

Re:DuckDuckGo just launched a DDG branded XMPP service by drdaeman on Friday May 13, 2011 @09:28AM (#2544515)
Yes, but how they're going to access logs when connecting to XMPP service from multiple machines?
Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @09:34AM (#2544530)
By checking the logs on the machine the logs are on.

Besides, anyone who is tech savvy enough to mess with public key encryption is going to be using OTR anyway, making server side logs useless.

Re:DuckDuckGo just launched a DDG branded XMPP service by drdaeman on Friday May 13, 2011 @10:01AM (#2544629)
I'm using OTR, but only for conversations that are worth protecting. IMHO securing typical chat with friends (mostly consisting of funny/interesting link exchanges) is almost pointless.

But having the history is still useful ("remember that article I've sent you yesterday").

Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @10:12AM (#2544671)
Not as pointless as most people intuitively think. What if the chat server you're using is compromised by a hacker trying to make a name for themselves and they publish all of the chat logs on bittorrent?

Some examples of comments in a private chat that might at first appear like they don't need encrypting, but might come back and bite you in the arse if they ever get published:

"God work is boring today. Need to update my CV/Resume"

"Bob was a bit of an idiot last night wasn't he"

"Thinking of skiving off work tomorrow."

"The wife has been nagging at me all afternoon. Fancy a pint later?"

Re:DuckDuckGo just launched a DDG branded XMPP service by mnutt on Friday May 13, 2011 @04:07PM (#2545980)
Depending on how secure you want to be, the existence of encrypted/non-encrypted information reveals things as well. Someone could infer something by just knowing that you turned on OTR at a certain time.
Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:23AM (#2544721)
We at DuckDuckGo assure the same anti-tracking policy on our XMPP server. There is nothing greater about DDG then other sites following the same policy :-). But its DDG :-)
Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @10:29AM (#2544755)
That's cool. But I've no idea if you're retaining IP logs and chat logs. You really need a service specific privacy policy which details exactly what you store and for how long.
Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:37AM (#2544789)
We definitly will add such a page, so far i can point you to the statement on our forum, you can see it here:

http://duck.co/topic/duckduckgo-s-new-public-xmpp-jabber-ser...

See down under the comments, i explained there what is so far logged, but we will tune this now over the next days.

Re:DuckDuckGo just launched a DDG branded XMPP service by throwaway32 on Friday May 13, 2011 @09:06AM (#2544451)
apparently Google pointed duck.com at the Google search main page after Duck Duck Go inquired about it. I guess this is why its duck.co

EDIT

See this post by yegg, the duck duck go founder

http://www.reddit.com/r/technology/comments/epd59/google_poi...

Re:DuckDuckGo just launched a DDG branded XMPP service by jimktrains2 on Friday May 13, 2011 @09:08AM (#2544460)
The URL make me cry:(
Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:26AM (#2544741)
Why?! :-)
Re:DuckDuckGo just launched a DDG branded XMPP service by jimktrains2 on Friday May 13, 2011 @10:46AM (#2544816)
https://duck.co/#Topic/28469000000637077

Note the #. Now, remove it and everything after it and reload the page.

Why am I being downvoted? Didn't we all just throw shit at gawker for doing the same thing?

EDIT: This fundamentally breaks the web. The # and everything after it are _not_ sent to the server. It relies on javascript and extra-protocol information to get the document, which breaks the idea of a resource having its own name. The # was suppose to denote a section of a resource, not a resource in-and-of itself. I'm sure everyone here knows this, but I had to get it off my chest.

Re:DuckDuckGo just launched a DDG branded XMPP service by almost on Friday May 13, 2011 @09:03AM (#2544440)
Very cool, although it could probable use a name. Maybe "DuckDuckChat"? "DuckDuckGo XMPP Service" is not going to be used by all but the most technical of users I think...

Even "DuckDuckGo Jabber Service" is better, XMPP just sounds so unfriendly.

Re:DuckDuckGo just launched a DDG branded XMPP service by sudont on Friday May 13, 2011 @09:18AM (#2544488)
Quack?
Re:DuckDuckGo just launched a DDG branded XMPP service by gettygermany on Friday May 13, 2011 @10:24AM (#2544729)
We will see :-) So far we dont have a place where we put the name lol :-) All step by step! :-)
Re:DuckDuckGo just launched a DDG branded XMPP service by newman314 on Saturday May 14, 2011 @07:23AM (#2547507)
DuckDuckJab