Live data from Hacker News

TOX – A New Kind of Instant Messaging

tox.chat

71–80 of 110 posts

Re: TOX – A New Kind of Instant Messaging

#71

Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?

Maybe https://wire.com/ could allow decentralization someday?

Re: TOX – A New Kind of Instant Messaging

#72

Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?

> If a government wants to track me, they will find a way Things like OTR: https://en.wikipedia.org/wiki/Off-the-Record_Messaging Actually stops these people though, and is even labelled in some of the Snowden Files as being "Catastrophic" to their efforts. But you are right, if they can't get chat on you they can just target you inside the Internet and send a malware payload disguised as an update to your browser.

For high value targets yes, they can't really be safe but for avoiding mass surveillance it's good.

Re: TOX – A New Kind of Instant Messaging

#73
post #54
post #43

Earlier quoted context omitted.

That's by design to keep connections with other peers.

That is a fundamentally broken design. There is literally no excuse for a simple messenger app to suck up a gigabyte daily. How do you expect people to adopt this when they have broadband and wireless plans with data caps?

I know nothing about TOX design, but it makes (to me, at least) some privacy sense to saturate the network with noise that is in message length, their interarrival time and recipient characteristics similar to the actual communication. No idea if TOX does that.

Re: TOX – A New Kind of Instant Messaging

#74
post #35

Earlier quoted context omitted.

riot.im [1] (which is based on matrix.org) seems a good, decentralized, open messaging app. They have relatively nice mobile apps and they promise to soon release end-to-end encryption based on the OLM [2] ratchet which is similar to the Signal encryption. In contrast to Tox, Matrix relies on federated servers. Tox is pure P2P which, in my experience, never works very well on mobile devices. [1] https://riot.im/ [2]…

> Tox is pure P2P which, in my experience, never works very well on mobile devices. That's (UX) my biggest concern, honestly. UX is just too important, and it's becoming an increasingly fast moving bar. Simple things like hitting up arrow to edit your message, to more complex things like stickers and gifs, these are (unfortunately) requirements for me in my peer circles. They sound silly, i know, but Telegram has (mo…

I totally agree. My hope is that because Matrix has an open protocol, there will be more competition in the client space which will lead (eventually) to good UX.

Re: TOX – A New Kind of Instant Messaging

#75

Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?

"If a government wants to track me, they will find a way."

So just hand the data right to them?

"I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder."

End-to-end encryption is the only solution to that problem. Open source software and decentralization is nice and all but to become a mobile app it'll have to be compiled and run on a closed platform and will almost certainly use APIs of that platform.

Re: TOX – A New Kind of Instant Messaging

#76
post #49
post #4

Still no contacts sync?

It's open source, they take pull requests and donations.

What makes you think that parent has the knowledge, ability, and time to do this task?

I see this "it's open source, make pull request" type of comment quite a lot but don't understand how you'd know if the person you're saying it to could do it. If not, it's kind of a dick move, isn't it?

Re: TOX – A New Kind of Instant Messaging

#77
post #35

Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?

riot.im [1] (which is based on matrix.org) seems a good, decentralized, open messaging app. They have relatively nice mobile apps and they promise to soon release end-to-end encryption based on the OLM [2] ratchet which is similar to the Signal encryption. In contrast to Tox, Matrix relies on federated servers. Tox is pure P2P which, in my experience, never works very well on mobile devices. [1] https://riot.im/ [2]…

I second that, so far so good. And the federation is cherry on top.

Re: TOX – A New Kind of Instant Messaging

#78
post #49

Earlier quoted context omitted.

It's open source, they take pull requests and donations.

What makes you think that parent has the knowledge, ability, and time to do this task? I see this "it's open source, make pull request" type of comment quite a lot but don't understand how you'd know if the person you're saying it to could do it. If not, it's kind of a dick move, isn't it?

The way the feature was requested, come across as a dick move and very self entitled. The least the parent could have done is added some niceties or some reasoning in more than 4 words when asking something for free.

Re: TOX – A New Kind of Instant Messaging

#79
post #49

Earlier quoted context omitted.

It's open source, they take pull requests and donations.

What makes you think that parent has the knowledge, ability, and time to do this task? I see this "it's open source, make pull request" type of comment quite a lot but don't understand how you'd know if the person you're saying it to could do it. If not, it's kind of a dick move, isn't it?

> What makes you think that parent has the knowledge, ability, and time to do this task?

Okay, what about money? They also take donations.

> I see this "it's open source, make pull request" type of comment quite a lot but don't understand how you'd know if the person you're saying it to could do it. If not, it's kind of a dick move, isn't it?

No. Trying to make people feel bad for not wanting to work for free, is what I call a dick move.

Re: TOX – A New Kind of Instant Messaging

#80
post #35

Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?

riot.im [1] (which is based on matrix.org) seems a good, decentralized, open messaging app. They have relatively nice mobile apps and they promise to soon release end-to-end encryption based on the OLM [2] ratchet which is similar to the Signal encryption. In contrast to Tox, Matrix relies on federated servers. Tox is pure P2P which, in my experience, never works very well on mobile devices. [1] https://riot.im/ [2]…

We (ZeroTier) do P2P on mobile just fine. I just randomly pinged my phone over a virtual network to check.

Granted it depends on how chatty a P2P system is and how much it depends on intermediate nodes for network assist. Ours is pretty idle when nothing is happening, so it doesn't impact battery life or bandwidth quotas very much.

The best design for a P2P network with more involved nodes would probably be to allow nodes to elect their level of availability to perform network assistance roles. Another alternative would be to build a network with two kinds of nodes: 'large' and 'small.' Large nodes could assist small ones.

It's a solvable problem. To some extent "you can't do P2P on mobile" is a dated idea that came from the era when phones were pretty tiny CPU and RAM wise, networks were slower, mobile OSes were more restrictive to background processes, and the battery cost of things like CPU and network I/O was higher. All these things have improved dramatically in recent (past 1-2 years) phone models. The iPhone 7 and the latest Samsung phones have near-desktop-class processors and radios have become more power efficient.

You do have to do a few things differently. One thing we do is to temporally group / quantize background I/O. Instead of sending packets whenever we feel like it, we do it in longer spaced batches when the network is otherwise idle. This saves a lot of battery power by causing the radio to only wake from sleep once for a batch of routine network traffic instead of waking constantly.

Post reply on HN