21–30 of 71 posts
there is something i never understood, maybe someone can help me: what makes wire better than xmpp? why do we need yet another protocol for chat?
Earlier quoted context omitted.
Weirdly I think free licenses are great for businesses to use and open licenses are great for personal projects. If I'm writing a hobby project, I want it to help the ecosystem as much as possible. If businesses want to use it then great! So MIT. If I'm running a business my main goal is to survive. I want to help the community as well, but I obviously can't do that if I go broke. "Put on your own oxygen mask before…
I'm not arguing against it or anything just pointing it out. AGPL keeps the lights on whilst still letting others play with it and contribute.
Also, holy shit they're storing a lot of information about their users:
* All of your contacts.
* Unencrypted profile information for everyone.
* Every active conversation you have.
* Every archived conversation you have.
* The frequency that you communicate with your contacts ('top contacts').
* Every group that you're in.
* The unencrypted titles and avatars of everyone's groups.
Wonder what will be in the rest of the database schema if they open source it.
This is fantastic news. If I understand things correctly, we can now host the Wire server on our own VM, and use the clients to connect to it, correct? We'll have full control over the end-to-end encrypted network?
I'm supper happy about Wire taking this step. Has someone done a security analysis/review of Wire yet? It would be interesting to read.
https://medium.com/@wireapp/wires-independent-security-revie...
Hoping more and more people start to show their support for services such as this one by joining and bringing friends. They are running circles around Signal lately.
there is something i never understood, maybe someone can help me: what makes wire better than xmpp? why do we need yet another protocol for chat?
XMPP is terribly fragmented and the clients all suck.
The title for this post should be changed to "a piece of the wire messenger server code open sourced." Most of the source is not open source, you can't run your own. Also, holy shit they're storing a lot of information about their users: * All of your contacts. * Unencrypted profile information for everyone. * Every active conversation you have. * Every archived conversation you have. * The frequency that you communi…
* All of your contacts.
Wire contacts, they only store non-wire contacts in a hashed form, and there's an opt out for non-wire contacts.
* Unencrypted profile
(Isn't this just profile picture (which is shown to people you haven't connected with), and name anyways?) They do say so in the privacy policy.
* Every active conversation you have.
Specifically they claim to store:
Who/when it was created, who is involved (which seems critical to be able to route messages), and conversation name
* Every archived conversation you have.
I assume they store the same as for non-archived conversations, seems necessary to be able to add new devices.
* The frequency that you communicate with your contacts ('top contacts').
Ya... that's not listed as far as I can tell. Arguably "aggregated usage statistics"... but it's not really aggregated.
* Every group that you're in.
This is the same as conversations... they clearly need to know this to route messages.
* The unencrypted titles and avatars of everyone's groups.
Titles is listed. Avatars of groups isn't... seems like a minor oversight though given that they're like a profile picture, and profile pictures are publicly available.
[0] https://wire.com/resource/Wire%20Privacy%20Whitepaper/downlo...
Hoping more and more people start to show their support for services such as this one by joining and bringing friends. They are running circles around Signal lately.
I was hopeful at first. A large VC funded company with a big full time team should run circles around a small open source effort, but their security is still way behind Signal. I was also quickly put off by their "less than honest" marketing.
Edit: found previous discussion, https://news.ycombinator.com/item?id=13132157