[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kopete-devel
Subject:    Re: [Kopete-devel] MSN: blocking contacts and info leakage
From:       Martijn Klingens <klingens () kde ! org>
Date:       2003-07-11 18:15:14
[Download RAW message or body]

On Friday 11 July 2003 17:33, Pedro Morais wrote:
> Maybe a 'Do not show this again' message box when you block someone,
> warning about the problem.
> Then again, Microsoft Messenger users could think that this is a problem
> with kopete, so the message needs to be very clear.

Righto :)

There are more subtleties in the protocol that many mindless MSN users are not 
aware of that can lead to minor information disclosure.

One of them is the 'user opens a chat but hasn't typed a message' because the 
socket is opened way earlier. The resulting chat window popup that we used to 
have might be highly annoying 99% of the cases, it also shows the problem 
very clearly.

And I have to admit it's highly funny to type 'hi' in such a popup and see the 
'I was just about to type you...' reply... (Not to mention the silence 
following your "I know" response ;-)

Hmm, this one actually under client control. Maybe Kopete should wait with 
socket creation until there is ALSO a message to send and send both together? 
Upside is no information leakage; downside is that error notifications are 
not available until you attempt to send a message. A bit of a tradeoff...

-- 
Martijn

_______________________________________________
Kopete-devel mailing list
Kopete-devel@mail.kde.org
http://mail.kde.org/mailman/listinfo/kopete-devel
[prev in list] [next in list] [prev in thread] [next in thread]