as if you needed more reasons to switch to Signal
You’re telling me the messaging serving with a roll-your-own encryption that hasn’t been audited and doesn’t enable end-to-end-encryption by default, instead requiring you to initiate 1-to-1 “secret chats” isn’t secure or trustworthy?? Holy balls!
I can’t believe it! 😱
/s
I am shocked I tell you! Shocked!
why people don’t use matrix is beyond me
There’s privacy and then there’s user experience. UX on Matrix is awful. Not to mention Matrix collects all the metadata, and the vast majority of it sits on a single server (matrix.org), which is owned by a private company and subject to subpoenas.
open stuff scares people. plus with messengers, we’re kind of bound to what our friends use. I’ve been slowly converting friends to Signal, and but people are very reluctant to change when the thing they have already works. Can’t imagine how much friction I would hit with something like matrix.
How slow friends are blows my mind. Like a cool new app they is secure and private?! Who wouldn’t jump on that?! I tell everyone" I don’t do SMS. Signal is the only way to get a hold of me. If you have a more secure app I’ll look into it. "
I’m a fan of self-hosted Matrix server. You can get a dozen of bridges for those stubborn people that refuse to leave messenger/whatsapp/telegram (at a loss of encryption, and they still get your convos, but at least you don’t have their spyware on your mobile and you can have everything in one app), while also being decentralized.
Self-hosting a server is actually really, really easy. It took me like half an hour, because there is an amazing Matrix Ansible Deploy script, that has a pretty easy to follow documentation, and is also one of those super-rare projects that just works. Even if I forgot to update my server for several months, I could literally “just update”, and the script is clever enough to figure out what changed, tell me what I need to update in the config files (which are still only like four rows of stuff I needed to setup), and it is a really smooth experience. Even when you want to set up some bridges, for most it’s literally just adding “<service>_bridge_enabled: true” to the ansible yml config file. I’ve already set up Telegram, WhatsApp, Discord and Messenger this way, and it was effortless.
unable to decrypt message
I’ve used matrix for the better part of a decade, and I get that reference.
That said, while the matrix crew have worked hard on the decryption issues, I’d much rather feel that particular pain on a federated network where I can change servers than be stuck with Signal if/when the single server’s policies turn evil.
Impressive!
What is that?
What problem does it solve
Matrix is a new-ish decentralized, private, E2EE encryption protocol. It’s pretty neat. It still has some issues (at least that I experience. Mainly the Android app is constantly being super slow to receive messages), but it’s super promising.
They also have some goals to improve email infrastructure by integrating the matrix protocol, but not sure if that will go anywhere. I remember reading this off hand remark on their blog. Can’t find the source.
As the original comment said, there’s the concept ifa “bridge” which allows you to bridge other services to a matrix chat. So you could have a discord channel and matrix room bridged, as an example. A ready to go option with bridges is Beeper. But you can also setup your own stuff, as they said.
If I give my Discord chats to Beeper, and authorities subpoena Beeper, will the authorities get my Discord chats?
Theoretically no, all of your messages stored on Beeper servers are encrypted. But they will get all your metadata.
But I wouldn’t worry about that anyway since Discord not only has access to all of your messages but sells them to companies to process for AI. So that’d be the far easier and faster route for them.
I feel like introducing another attack surface for a minimal gain inconvenience just isn’t worth it. I’ll be passing, thanks
If I’m honest, it’s not convenient either. I stopped using it years ago because I kept getting logged out of my accounts and flagged for “automated activity”. Plus they straight up lie about supporting SMS and RCS. The only “support” they have is connecting it to your Google account.
I read that all the popular chat services provide similar information to law enforcement agencies. I don’t think telegram is special in this regard.
Depends if you consider Signal “popular”, because based on your own link, the only information they provide is:
No message content., Date and time a user registered. Last date of a user’s connectivity to the service.
A perfect example of why SimpleX is a great choice for messaging
Isn’t simplex also funded by venture capitalists like Jack Dorsey? I don’t think I’d trust then not to sell out users when it comes time to pay back the investors.
Dorsey, Zuck, Bill Gates. All the venture capital interests already got they teeth in Simplex Chat.
i would love an analysis of their federation because it seems built to make that impossible.
Not only is it possible, but people are already doing it.
without linking to examples or analyses this is unhelpful.
Proton up people. And get your people on Signal or WIRE.
We’re probably the most boring people day to day and we’ve dove it for a while on general principle. Now, it feels important to have already made that shift.
also XMPP and Matrix/Element.
Also your choices should be impacted by your threat model. Not everyone needs to lock up like they’re James Bond.
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
I have two friends on Signal!
No one else believes me. Gonna be a weird future
I managed to get my entire family onto this service and even some friends. That said, they are almost all also using at least WhatsApp, because they are only using Signal to stay in touch with me (since I’m not on WhatsApp).