You're telling me the messaging serving with a roll-your-own encryption that hasn't been audited and doesn't enable end-to-end-encryption by default, instead requiring you to initiate 1-to-1 "secret chats" isn't secure or trustworthy?? Holy balls!
this post was submitted on 06 Jan 2025
159 points (100.0% liked)
Technology
38636 readers
392 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 3 years ago
MODERATORS
I can’t believe it! 😱
/s
I am shocked I tell you! Shocked!
Well, not that shocked.
Proton up people. And get your people on Signal or WIRE.
We’re probably the most boring people day to day and we’ve dove it for a while on general principle. Now, it feels important to have already made that shift.
also XMPP and Matrix/Element.
Also your choices should be impacted by your threat model. Not everyone needs to lock up like they're James Bond.
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
unable to decrypt message
I have two friends on Signal!
No one else believes me. Gonna be a weird future
I managed to get my entire family onto this service and even some friends. That said, they are almost all also using at least WhatsApp, because they are only using Signal to stay in touch with me (since I'm not on WhatsApp).
I'm a fan of self-hosted Matrix server. You can get a dozen of bridges for those stubborn people that refuse to leave messenger/whatsapp/telegram (at a loss of encryption, and they still get your convos, but at least you don't have their spyware on your mobile and you can have everything in one app), while also being decentralized.
Self-hosting a server is actually really, really easy. It took me like half an hour, because there is an amazing Matrix Ansible Deploy script, that has a pretty easy to follow documentation, and is also one of those super-rare projects that just works. Even if I forgot to update my server for several months, I could literally "just update", and the script is clever enough to figure out what changed, tell me what I need to update in the config files (which are still only like four rows of stuff I needed to setup), and it is a really smooth experience. Even when you want to set up some bridges, for most it's literally just adding "_bridge_enabled: true" to the ansible yml config file. I've already set up Telegram, WhatsApp, Discord and Messenger this way, and it was effortless.
unable to decrypt message
I've used matrix for the better part of a decade, and I get that reference.
That said, while the matrix crew have worked hard on the decryption issues, I'd much rather feel that particular pain on a federated network where I can change servers than be stuck with Signal if/when the single server's policies turn evil.
What do you do when you get that message.
Ive lost contact with friends because of that message. They just can't read anything I send them anymore.
I verify my sessions. its a hassle, but it's getting rarer and easier.
My contacts said they did verify their sessions. I never understand why this happens or how to fix it
A perfect example of why SimpleX is a great choice for messaging
Isn't simplex also funded by venture capitalists like Jack Dorsey? I don't think I'd trust then not to sell out users when it comes time to pay back the investors.
Dorsey, Zuck, Bill Gates. All the venture capital interests already got they teeth in Simplex Chat.
i would love an analysis of their federation because it seems built to make that impossible.
Not only is it possible, but people are already doing it.
without linking to examples or analyses this is unhelpful.
Herpes simplex?
I read that all the popular chat services provide similar information to law enforcement agencies. I don't think telegram is special in this regard.
If it’s stored on their servers then it isn’t private
I'm generally given to trust Malwarebytes regarding cybersecurity, but they don't mention at all that E2E encryption is not the default messaging style on Telegram. That, plus the article being from 2021, makes me distrustful of that source.
Signal is still the only service I am aware of that does not store logs of user messages on servers. Messages only exist on the devices of individual users.
Depends if you consider Signal "popular", because based on your own link, the only information they provide is:
No message content., Date and time a user registered. Last date of a user’s connectivity to the service.
why people don't use matrix is beyond me
open stuff scares people. plus with messengers, we're kind of bound to what our friends use. I've been slowly converting friends to Signal, and but people are very reluctant to change when the thing they have already works. Can't imagine how much friction I would hit with something like matrix.
How slow friends are blows my mind. Like a cool new app they is secure and private?! Who wouldn't jump on that?! I tell everyone" I don't do SMS. Signal is the only way to get a hold of me. If you have a more secure app I'll look into it. "
There's privacy and then there's user experience. UX on Matrix is awful. Not to mention Matrix collects all the metadata, and the vast majority of it sits on a single server (matrix.org), which is owned by a private company and subject to subpoenas.
Well this was always coming!
Here we go again. Once more, folks don't fucking listen when they're warned. And the ones who should have listened just got branched again.