this post was submitted on 14 May 2021
22 points (95.8% liked)

Privacy

33192 readers
592 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
top 25 comments
sorted by: hot top controversial new old
[–] [email protected] 14 points 3 years ago (1 children)

I largely disagree with this video.

Given the license, it wouldn't even be legal for Signal to make the server closed source. AGPL prevents that.

After the huge migration in January, a lot of people asked for a payment feature, WhatsApp has that in some country and it is used a lot, mainly in India I think. And I think the criticism is way overblown, remember, this is just a feature that was introduced in beta in one country!

The goal of MobileCoin is not to provide decentralised currency without the need for central banks and all like other cryptocurrencies. The goal of MobileCoin is to provide an experience that is very similar to what WhatsApp and a few other apps already have, the crypto part is only here to make it private. The fact that there are transaction fees and that it is centralised doesn't make it any different from any other payment app like Paypal.

Anyway crypto currencies have completely failed at providing actual decentralisation. Transaction fees are way too high for them to be used for everyday payment, and they waste way too much energy. The instability is also a barrier (though I'm not exactly sure how will MobileCoin deal with it).

Most critics are also not neutral. They are often invested in other cryptocurrencies and would have greatly benefited economically from the increased demand if Signal had chosen to go with one of their cryptocurrencies.

[–] [email protected] 10 points 3 years ago (1 children)

Given the license, it wouldn’t even be legal for Signal to make the server closed source. AGPL prevents that.

This is not true. If you are the sole copyright holder to the code which the Signal Foundation AFAIK is, then you can close the source-code any time you want.

[–] [email protected] 4 points 3 years ago (1 children)

I'm pretty sure that there have been external contributions for the implementation of websocket notifications for phones without google's services, but I might be wrong.

[–] [email protected] 8 points 3 years ago* (last edited 3 years ago)

Hmm, maybe... not sure. I would guess they have a CLA in place though, which allows them to take over the copyright.

[–] [email protected] 13 points 3 years ago

This is why Moxie always seemed so dodgy to me. Wants to centralize no matter what, is or at least was hostile to Signal forks, federation seems to be a dirty word for him and now this not-Monero nonsense.

[–] [email protected] 3 points 3 years ago

Signal does have google firebase trackers

[–] [email protected] 2 points 3 years ago
[–] [email protected] 0 points 3 years ago
[–] [email protected] -1 points 3 years ago* (last edited 3 years ago) (3 children)

Recommends Matrix until he realizes that it is run by a for-profit company also with dodgy crypto-currency funding ;)

XMPP is the real alternative!

[–] [email protected] 10 points 3 years ago (1 children)

it is run by a for-profit company also with dodgy crypto-currency funding ;)

I mean, that is just not true. Matrix is "ran" by the Matrix.org foundation, which is a non-profit. The main developers are payed by Element Matrix Services which is indeed a for-profit company, but every spec change still has to be approved by the matrix.org foundation (which has multiple non-EMS members) and the main 2 server implementations (Synapse and Dendrite) fall under this organization rather than EMS.

[–] twopi 4 points 3 years ago (1 children)

He refuses to be anti-capitalist. Even though that's the only logical conclusion he can't say that capitalism is the problem because he "can't be political". Instead, he says they have a poor business model and rely on donations. The real problem is requireing a business model. He can't question the fact of having a business model and making money in the first place because you need that to survive under capitalism and that is an accepted as a "default axiom". That's "the trashcan of ideology".

It's the same for matrix and signal. They're both conpanies, but people say "that's ok" or "there's no problem". But they don't realize that is the problem.

I didn't like matrix because of the company behind it and crypto connections. I was battered before and slowly started to accept it. Thankfully, I see more people who share my view and I'll continue continue to try to push for XMPP.

[–] [email protected] 1 points 3 years ago* (last edited 3 years ago)

see my question about Jami and other Matrix hosts...

[–] [email protected] 3 points 3 years ago* (last edited 3 years ago) (2 children)

how about jami? it's distributed, no need to self host, and encryption is native. Also, wouldn't other Matrix hosts, other than Matrix itself, make it less for-profit?

[–] [email protected] 1 points 3 years ago (1 children)

Jami (and Briar) are cool, but at least in their current state of development the p2p only system is technically too limiting.

As for Matrix: sure, but development of the core system would be still in the hands of NewVector, and Matrix is far from a stable code base. Furthermore hosting Synapse is an hardware expensive effort due to high system load it has. Thus most non-profit orgs I know have disabled or restricted their matrix servers again.

[–] [email protected] 1 points 3 years ago (1 children)

I'm wondering, are there Switzerland (ch) non profit xmmp hosted server supporting omemo encryption? Also, what about psi as a client for gnu+linux? I guess several would self host, but some, including me, can't... That said, I'd prefer Switzerland hosted servers over France hosted servers... In the end, if not self hosted, then it's a centrally hosted mechanism as well, and most probably with even less users, who knows, but worth exploring for sure...

[–] [email protected] 1 points 3 years ago* (last edited 3 years ago) (1 children)

I don't think Switzerland is especially secure, but maybe this one: https://www.systemli.org/en/service/xmpp/ (edit: not 100% sure their servers are in Switzerland, might be Germany instead)

As for Psi... not sure why you would chose that over Gajim or Dino?

[–] [email protected] 1 points 3 years ago (1 children)

Ohh, because of being Qt, I tend to prefer Qt, :) Dino is mentioned not to support video here: https://joinjabber.org/clients/gnulinux. As per omemo supporting clients: https://en.wikipedia.org/wiki/OMEMO#Client_support, well psi and psi+ are mentioned, and are the only 2 Qt ones, :) I can use Gajim, though it's python + GTK, and the "official" omemo (gajim-plugin-omemo) plugin is not in Artix/Arch official repos (though python-axolotl might do, I don't know). Sadly, I don't like depending on qt-webengine (blink based), so if using psi, most probably I'd go for the non-webengine version, though not sure what limitations it would bring...

That server is hosted in Germany, while joinjabber.org is hosted in both France and Germany. Then I wouldn't know... Perhaps the France hosted one... Can't tell... In the end all would be central, since not self-hosting... I can't tell, any preference?

[–] [email protected] 1 points 3 years ago

XMPP is a federated network so even if you don't selfhost it isn't "centralized".

As for qt based clients: yeah there is a bit of a gap there. Kaidan.im looks promising but isn't there yet.

I think Gajim will work fine on your system though. At least on Manjaro (Arch based) it works great incl. OMEMO encryption.

[–] [email protected] 1 points 3 years ago

E-Mail is there too with Delta Chat.