Search
Items tagged with: Synapse
Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage
### Impact A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.105.1, can dispatch specially crafted events to exploit a weakness in how the auth chain cov...GitHub
I wish that #Matrix (and #Synapse) were better designed.
It has become among the most popular open messaging protocols, but it remains a scalability nightmare.
It's literally the Blockchain of messaging. Its current state is given by the sum of the whole chain of events received since t=0. It's a brittle append-only ledger, and any modifications you do to it are very likely to break it.
Do you have a huge 100GB database and you want to clean up old stuff? Sorry, you can't. There are some non-official solutions for compacting the events, but they're all likely to break your db - and none worked so far in my case.
Do you have users on your instance that entered a busy room on matrix.org? Then you'll get all the join/leave events of that busy room on your db, with no way of deleting them, and nothing to do unless your users exit those rooms.
Did you start your instance by toying with the default SQLite backend, and now that it's become big you want to move to Postgres? Sorry, no official guides provided, only unofficial procedures scattered across a bunch of blogs.
Do you want to change the name of your server? Sorry, you can't. All the events are tightly coupled to your server name. The advised solution is to simply start a new instance.
Do you want to keep the same server name but spin off a new instance? Sorry, you can't, because your server name, your keys and the events sent to other servers are all tightly coupled, so your new instance may not be able to reliably exchange messages with servers that were federated to your previous one.
Do you want to migrate your account and conversations to a new server, or even just get a backup of your data? Well, you can just forget it, because there's no way of disentangling the thick mesh of events and moving it somewhere else.
Such a rigid and brittle implementation shouldn't have become an open de facto standard without much questioning about its poor design decisions.
At the very least, some official tools must be provided to enable admins to compact events. If the size of the database is guaranteed to increase indefinitely, then entry barriers against self-hosting are only going to increase.
#FluffyChat is now given a proper #IntegrationTests setup via MR gitlab.com/famedly/fluffychat/β¦.
The changes include:
- testing full features against all homeservers (#Synapse, #Conduit & #Dendrite)
- normalize the app's behavior independent of platform (currently Android FLOSS, Android proprietary and Linux supported)
- set of built-in helpers in order to simplify user login, logout or bootstrap processes in all future test cases
Platform-specific workarounds just took around 30 h of work.
chore: add integration tests (!1062) Β· Merge requests Β· Famedly / FluffyChat Β· GitLab
Description Fixes # Please mark on which platform you have tested the changes:GitLab
I put together a basic proof of concept for using existing #Mastodon installations as SSO for #Matrix, using #Synapse. Here's what the authentication and authorization flow for that looks like!
While Mastodon doesn't support #OpenlD Connect, OIDC is just OpenlD on top of OAuth2.0. If your app allows configuring all URLS for your ldP you can use nearly any OAuth2.0 provider.
Avatars currently aren't supported via this (| added one) but can be! Working on a patch for Synapse!
#Dendrite [Matrix] server has arrived to @yunohost ( π thanks **tituspijean**)
#matrix server much lighter than #synapse
Dendrite is beta software
forum.yunohost.org/t/dendrite-β¦
[Dendrite] A second-generation Matrix homeserver
Dendrite for YunoHost Overview Dendrite is a second-generation Matrix homeserver written in Go.YunoHost Forum
RT @twicechild41@twitter.com
Bringing up a #synapse (Matrix.org) stack with @traefik@twitter.com, @PostgreSQL@twitter.com, #elementio, #facebook and #telegram bridges from #mautrix and a bot manager from #maubot, with #dockercompose. My first ever guide! github.com/twicechild/matrix-sβ¦
#matrixorg #traefik #PostgreSQL #homelab
π¦π: twitter.com/twicechild41/statuβ¦
Matrix.org
Matrix is an open standard for interoperable, decentralised, real-time communicationMatrix.org
RT @codingfield@twitter.com
Weekend experiment : run a @matrixdotorg@twitter.com #Synapse server on the @thepine64@twitter.com #Quartz64 #ARM SBC!
Meet me @jf002@twitter.com:quartz64.codingfield.com !
π¦π: twitter.com/codingfield/statusβ¦
The #FSFE opens its own #Matrix server! Supporters and registered volunteers can get their :fsfe.org account, and everyone can join our community chatrooms π
A must-have to attend #FOSDEM this weekend!
β‘οΈ fsfe.org/news/2022/news-202202β¦
@matrix @fosdem #freesoftware #softwarefreedom #opensource #synapse #element #federation
Welcome to the Matrix: the FSFE now runs its own server - FSFE
The FSFE is eager to support its community with diverse Free Software communication channels. We are happy to announce that we have recently added Matrix t...FSFE - Free Software Foundation Europe