141–150 of 204 posts
Earlier quoted context omitted.
An interesting number would be how many GCM/APN devices are registered in the matrix.org sygnal server. All of the Matrix/Riot users I know use private, non-federated home servers, but still rely on the project's Sygnal server(s) for push notifications.
Phone number/email verification is also still centralized as no one has worked out any other way.
well, this is what scares me. because, the conversation may be encrypted (protocol, packets), but still messages can be accessible by the powers that be through variety of means. especially considering they "forked" it, who knows what they will do with it (log keystrokes, take screenshots, in the disguise of diagnostic reasons?). anytime you are reading a message from your app, or sending a message, the app have all…
I won't be using a 'secure' messaging app built by the govt any time soon...
AFAIK, this is mostly intended as a secure messenger _for_ the government. Which makes sense - what are they supposed to use? WhatsApp? Twitter DM? Skype for Governments? But even if you’re not in the target demographic, you might benefit: The government will run a large installation and hopefully some code will find its way back to the OS version.
I want to type this into a search bar to see if it's a thing... but simultaneuosly I'm terrified of the prospect of discovering that it is.
Why is the world so desperate to pretend that irc doesn't exist? Why can't we just get a new irc spec with e2e in mind? Matrix is an extremely immature project and the French gov is making an irresponsible move here to prop it up as a solution in any capacity. It's beta software! Where are the audits? Where are the formal verifications? Not that irc has those, I don't mean to juxtapose one not-good-enough product wit…
What surprised me is that Matrix is practically a modern IRC spec with e2e in mind. What's better is that the Matrix devs acknowledge this heritage. They don't pretend IRC doesn't exist. They're very up-front about loving IRC, and they have successfully brought over nearly every good feature of IRC into Matrix.
At first I thought it was too good to be true, but it keeps on being good. I have waited for years for a decent IRC alternative which I can convince even my less technical friends and family to use, and Matrix is it. I truly feel like I'm on IRC with my family. It's insanely good. I even use the same client for both.
Matrix can replace your Signal. It can replace your Telegram. It can replace your WhatsApp. It can replace your Facebook messenger. It can even replace IRC. It is that complete.
Earlier quoted context omitted.
The E2EE in matrix is actually based on the double ratchet from the Signal protocol. So you could think of the E2E in matrix as just a federated version of Signal. :)
A point in moxie's favor is that the e2ee ux in matrix is currently extremely painful. I'm willing to use it on a couple rooms that consist entirely of geeks, but don't want to subject non-geeks to the whole verification process.
I ran Synapse on a resource-limited machine, so it had sort of "lagged behind" (or something like that) a little bit now and then. And I saw a number of "error decrypting image" and similar issues. It had self-resolved somehow after a while (saw the message decrypted the next day) but that's still a problem.
Haven't reported this because I have no idea how to collect any useful information.
Earlier quoted context omitted.
It's pretty common. Almost all EU governments reserve the right to decrypt encrypted communications by law, also India, Russia, China, Australia. Here's a map https://www.gp-digital.org/world-map-of-encryption/ , click 'Powers to intercept...'
I've always wondered about that. The law says Criminal Procedure Code: Article 230, modified by Law No. 2001-1062 and Law No. 2014-1353 requires the disclosure of encryption keys upon the authorization of a judge. So what happens if the connection uses diffie-hellman or double ratchet (as Matrix can use)? the intermediate doesn't have any useful keys to turn over.
Earlier quoted context omitted.
I discovered Matrix through the Godot Game Engine community. It was described to me as the next-gen irc freenode chat platform for open source devs ;) Just wondering about discovery. How do I find interesting channels?
One of the community members has a bot that travels from room to room anytime somebody mentions a room link. The list (and graph!) of all indexed rooms is here: https://t2bot.io/voyager/
Earlier quoted context omitted.
>In fact before Moxie went on his silly "only I can do security right" rampage Do you have link or source for that? (I'm always interested in listening or watching stuff from Moxie)
Probably https://signal.org/blog/the-ecosystem-is-moving/ >Nothing about any of the protocols we’ve developed requires centralization; it’s entirely possible to build a federated Signal Protocol-based messenger, but I no longer believe that it is possible to build a competitive federated messenger at all.
Fortunately there are solutions that incentivize modern features in federated protocols too, like SSLLabs HTTPS checker or https://conversations.im/compliance/ for XMPP.
So what's wronng with signal?
You can't run your own signal server. If that isn't huge then nothing is.
Source code here: https://github.com/signalapp/Signal-Server