this post was submitted on 18 May 2024
228 points (92.9% liked)

Privacy

32173 readers
144 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I didn't know my city was cool enough to put signal flyers.

you are viewing a single comment's thread
view the rest of the comments
[–] qaz 37 points 7 months ago* (last edited 7 months ago) (2 children)

Signal isn't perfect but it's still one of the best options.

[–] [email protected] 13 points 7 months ago (1 children)

It’s the bare minimum for passable due to E2EE, not being owned by a corporation, & mostly open source--not “best”. We have better.

[–] [email protected] 4 points 7 months ago (1 children)
[–] [email protected] 12 points 7 months ago* (last edited 7 months ago) (3 children)

XMPP is an extensible protocol that has over a decade of battle testing from the casual chat to massive industrial communications applications (Zoom, Jitsi, almost certainly any online game you’ve played). It has E2EE in modern clients. It’s decentralized by nature & relatively easy to self-host. Both servers & clients use very few resources like bandwidth, storage, processing, memory (consider conditions of the time of invention). It doesn’t take minutes to join & sync chatrooms (MUCs). Gateways allow folks to talk across non-XMPP platforms. Governance is distributed in the open & not tied to a single entity. There are even projects like Snikket that can be rolled out for a family that is close to turn-key for set up. Along with something like Movim can create a self-hosted social network built atop an XMPP server for posts to share stories & media for a longer-term storage.

If E2EE encryption isn’t seen as a must relying on TLS + self-hosting: lighter, simpler IRC (good feature set with v3) which has been around since the ’80s can be a good choice. Zulip which is a forum/chat platform that has the most usable UX for trying to actually hybridize both (it’s not amazing UX, but better than the rest); this can work for a great for certain communities that desire this behavior.

Distributed (not to be confused with decentralized) encrypted chat there is Briar with a mesh network not even requiring internet, but has limited platform support & last I used years ago had massive battery drain issues.


If you must, there is Matrix which decentralized & offers E2EE but is relatively expensive to run from the clients, to servers, to the design generally being that it replicates the room messages & attachments & state across all servers for all users. While that duplicated data is great for resilience, can be expensive to store & is what takes minutes to join any room. I think it was a design decision ‘miss’ to try copy Slack/Discord/Telegram-but-FOSS as doing too much & none of it that well--where I think chat is better to be a bit simpler + expected to be ephemeral & a different service like a forum for important, permanent discussions & FAQs. Mastodon suffers similar issues with replication that makes some have to shutdown their self-host due to cost--which has led to Matrix in practice centralizing around Matrix[dot]org (who has a history of Israeli intelligence funding) & the servers they provide to others funneling all the metadata thru their org since they offer free accounts, are big enough to scale, & have most of the users. Folks act like Matrix is great just for being newer, but the aforementioned already cover its uses while being more mature.

[–] [email protected] 3 points 7 months ago (1 children)

Wao, you really let'em have it. Love it.

There's also Session, Simplex, Riot, Delta Chat, etc.

There are plenty of options. Yes, Signal is one of the lesser evils, but certainly not the holly grail as some would make it look.

[–] [email protected] 5 points 7 months ago (1 children)

It isn't the holly grail but it is simple to use

[–] [email protected] 1 points 7 months ago

Absolutely. It's probably the most likely to be accepted by people that are in the mainstream apps life, for sure.

[–] [email protected] 3 points 7 months ago (1 children)

Good luck getting people to use XMPP. It is complex and doesn't even properly support photos and other media.

[–] [email protected] 2 points 7 months ago (1 children)

?

Images & video work fine on Cheogram, Dino, Gajim, & can be piped from Profanity

[–] [email protected] 2 points 7 months ago (1 children)

And your response brings up another reason why no one is going to adopt XMPP. There isn't a central app or server for someone to use.

[–] [email protected] 1 points 7 months ago

So one of the best features is a bad thing? Is the irony lost on you that Lemmy is a decentralized system without a central server or app?

[–] [email protected] 2 points 7 months ago (1 children)
[–] [email protected] 4 points 7 months ago* (last edited 7 months ago) (1 children)

Balisage Paper: Fat Markup: Trimming the Fat Markup Myth one calorie at a time

Old paper, but so are these specs which haven’t really changed. I know there are more formats than XML vs. JSON but they are two of the most common, and relevant to the battle of XMPP/XML vs. Matrix/JSON.

[–] [email protected] 1 points 7 months ago

It's not just the verbosity, it's also the complexity

[–] [email protected] 0 points 7 months ago (2 children)

one of the best

(link in alt text) https://github.com/signalapp/Signal-iOS/issues/641

And then for no good reason a "FOSS" app's binary grows by a couple MB...

[–] [email protected] 9 points 7 months ago

This argument implies there's an easy way for you to perform the reproducible builds on iOS, but it's quite involved and requires a jailbroken iPhone. Overall this is more a limitation of apple and not signal.

Even if you were able to perform a reproducible build of Signal on a jailbroken iPhone, there's no way to confirm that the stock iOS Signal app will match, or has a backdoor that got added in a supply chain attack that only is delivered to non jailbroken phones. You could use a jailbroken iOS device, but then it could be lagging behind updates and be even more vulnerable from zero days.

The real pressure here should be on Apple to provide a way to verify a build of an open source app matches what is being installed via the app store, but for some reason this is being framed as a Signal issue, which is disingenuous.

[–] [email protected] -5 points 7 months ago (1 children)

You also are quoting a communist. I can't take you seriously

[–] [email protected] 2 points 7 months ago* (last edited 7 months ago) (1 children)

Don't hate them because they are a communist, hate them because they are a tankie.
Also, even if he is a tankie, this has nothing to do with it.

[–] [email protected] -2 points 7 months ago

In this case it does. He is prejudice against the US and anything but Russia maybe China. He has repeated cited cold war rhetoric such as East vs West.