17 Mar 2025 |
nex (she/it)π¦ποΈ | It's definitely possible, but a lot of work | 18:36:43 |
nex (she/it)π¦ποΈ | and unreliable at best | 18:36:46 |
Gnuxie ππ | mandating that join events are signed helps a lot though because then you can restrict the number of users who can be involved in a leak | 18:37:07 |
Gnuxie ππ | * mandating that join events are signed helps a lot though because then you can restrict the number of banned members who can be used in a leak | 18:37:45 |
Gnuxie ππ | * mandating that join events are signed by a via server (or whatever it's called in knock) helps a lot though because then you can restrict the number of banned members who can be used in a leak | 18:38:05 |
Gnuxie ππ | * mandating that join events are signed by a via server (or whatever it's called in knock) helps a lot though because then you can restrict the number of members from banned servers who can be used in a leak | 18:38:31 |
Gnuxie ππ | * mandating that join events are signed by a via server (or whatever it's called in knock) helps a lot though because then you can restrict the number of members from banned servers who can be used in a leak without the leak being obvious | 18:38:41 |
Gnuxie ππ | the issue is there are a few different ways for servers to pull in events so there's a lot of wiggle roam to troll everyone trying to look for a leak | 18:40:11 |
tulir | that size limit section is wrong | 18:40:21 |
Gnuxie ππ | * the issue is there are a few different ways for servers to pull in events so there's a lot of wiggle room to troll everyone trying to look for a leak | 18:40:22 |
Gnuxie ππ | it says that it is innacurate in the proposal | 18:41:07 |
Gnuxie ππ |
It is theorized by me completely from thin air
| 18:41:10 |
strawberryπ (it/pup/she/they) π³οΈββ§οΈ π 𦴠(puppygock.gay) | is there any reason why a server can't dedupe ACLs
:blobcat_rich_monocle: | 18:41:32 |
tulir | I think matrix.org's ACL event already has more than 512 entries | 18:41:51 |
Tom Foster [he/him] | i wannit | 18:42:04 |
tulir | you should theorize from math instead of thin air | 18:42:04 |
Gnuxie ππ | yeah it's probably more likely double that but | 18:42:11 |
Gnuxie ππ | i shouldn't but i couldn't be bothered at the time and i disclosed that x3 | 18:42:26 |
Gnuxie ππ | * i shouldn't but i couldn't be bothered at the time and i did disclosed that x3 | 18:42:54 |
Gnuxie ππ | * i shouldn't but i couldn't be bothered at the time and i did disclose that x3 | 18:43:00 |
tulir | 64kb / 20 bytes per server = 3k | 18:43:17 |
nex (she/it)π¦ποΈ | I currently have 968 ACLs in my offtopic room | 18:43:42 |
tulir | or if someone attacked the system with max length domains (63 bytes + tld = 75 or so in total) the limit would be 873 | 18:44:11 |
tulir | yeah my ACL event is around 16kb with some 900+ entries | 18:44:57 |
Gnuxie ππ | okie | 18:46:10 |
Gnuxie ππ | i've added a comment to the MSC to update it next time i'm there | 18:46:35 |
Cat | ACL slots was Cats dumb break glass idea on this front at one point. | 18:58:32 |
Cat | That MSC is practically abandonware from cats perspective tho. | 18:58:40 |
Gnuxie ππ | it's probably the one that will get used just because it's the easiest | 19:00:28 |
Gnuxie ππ | unfortunatley | 19:00:34 |