Live data from Hacker News

Matrix at FOSDEM 2019

matrix.org

61–70 of 97 posts

Re: Matrix at FOSDEM 2019

#61
Can someone give me a benefit of matrix over telegram? I not 'shilling' for tg but I hear a lot about their weakness being "rolling out their own crypto" and I don't buy that argument. One downside to tg as I see is that if their key can be compromised by comprising the server then chats can be read. They have secret chat for that.

Is there anything matrix/signal etc do better?

Re: Matrix at FOSDEM 2019

#62
post #61

Can someone give me a benefit of matrix over telegram? I not 'shilling' for tg but I hear a lot about their weakness being "rolling out their own crypto" and I don't buy that argument. One downside to tg as I see is that if their key can be compromised by comprising the server then chats can be read. They have secret chat for that. Is there anything matrix/signal etc do better?

End to end encryption of all your chats by default. Telegram has you cross-device chats stored on their servers. This is not the case for Matrix (when they finally enable this) and e.g. Wire.

Telegram's "secret chats" don't solve anything because you need to convince everybody involved in secret chats to give up cross-device sync. The existence of the option doesn't solve anything if it isn't the default and comes at the cost of convenience. How many of your own chats are actually "secret"?

Re: Matrix at FOSDEM 2019

#63
post #20
post #7

Earlier quoted context omitted.

the Synapse port to Python 3 is complete :D However, the next-gen one we're working on ( https://github.com/matrix-org/dendrite ) is in Go. Nim rocks though, and it'd be wonderful for someone to write a Nim homeserver (especially as we finally have a stable release of the server-server API at last!!)

Can you give a rough idea about how long it will take for Dendrite to be ready? I want to run a homeserver for friends, but I'd like to go straight to Dendrite and not have to deal with Synapse if possible.

FWIW, I'm running Synapse on a 1/1 instance (1 core, 1 GiB RAM) alongside a bunch of other services, with 4 active (as in: daily) users, and it works reasonably well as long as people don't join large channels (cough #matrix:matrix.org cough). That said, I'm definitely looking forward to Dendrite.

Re: Matrix at FOSDEM 2019

#64
post #30

There is a bright future where individual users can trivially (like one click deployment trivial) spin up a Mastodon and Matrix container and have their own social network and IM server running in minutes that federates with all the others in a giant decentralized web. Again. I'll keep pressuring everyone I know to migrate to federated replacements for monolithic proprietary alternatives.

What are you using for "one click deployment" of Mastodon and Matrix?

Have you ever heard about docker, cr-io (not sure if this one can be used standalone), buildah, podman?

It probably won't be docker itself, but if you start deploy your stuff as docker containers now there will probably be a migration path to whatever it will be.

Re: Matrix at FOSDEM 2019

#65
post #20
post #7

Earlier quoted context omitted.

the Synapse port to Python 3 is complete :D However, the next-gen one we're working on ( https://github.com/matrix-org/dendrite ) is in Go. Nim rocks though, and it'd be wonderful for someone to write a Nim homeserver (especially as we finally have a stable release of the server-server API at last!!)

Can you give a rough idea about how long it will take for Dendrite to be ready? I want to run a homeserver for friends, but I'd like to go straight to Dendrite and not have to deal with Synapse if possible.

Note that Dendrite is doing a bit more fancy architecture. https://github.com/matrix-org/dendrite/blob/master/DESIGN.md -- there's a bunch of readers and writers, with Kafka in-between to mediate flow of messages.

Whether that's a good or bad thing remains to be seen, but I'm a bit skeptic towards complicating things from the get-go.

Re: Matrix at FOSDEM 2019

#66
I tried to use Matrix a while back, but I got put off when it asked me to agree to its Terms of Service... what kind of decentralised system has a terms of service? It's meant to serve the user, not the developer.

I found Ricochet IM (https://ricochet.im/) to be much more to my taste. Your Ricochet ID is just a Tor hidden service, and when someone wants to chat to you their client connects to your Tor hidden service.

Using Tor gets you encryption and onion-routing for free. That means anyone MITM'ing your network traffic can't tell who you're speaking to or what you're saying.

It also gets NAT-traversal as a happy side effect.

Re: Matrix at FOSDEM 2019

#67
post #40

Earlier quoted context omitted.

I bear no ill-will towards the Matrix project, but this fact pattern (I knew about it in the abstract but hadn't seen it laid out like this) makes me actually angry about the people who have recommended Matrix as a replacement for the Signal Protocol messengers like Signal, WhatsApp, and Wire. Telling people to switch to Matrix from those is simply malpractice.

tptacek: the reddit article there is a bit flawed (as uhoreg tries to gently point out in the response). the reality is that we provide decent E2EE stacks on web, iOS and Android which get used in the flagship client (Riot) that most people use. These are pretty solid and getting better, as per the SAS verif and cross-signing work. Other clients like Seaglass which build on the same SDKs obviously get the same experi…

> Now, there’s a long tail of other random clients which don’t do E2EE, which is inevitable given doing a good secure job of an independent E2EE implementation is obviously tough. But is that actually a problem, given the most usable mainstream clients do have it?

Well, given that decentralisation is the primary differentiator from Signal (as far as I can see), everybody having to use the same client to get it is a bummer. I would even go as far as to say that it's a clear example of the problems Moxie sees with making Signal decentralised.

Re: Matrix at FOSDEM 2019

#68

I tried to use Matrix a while back, but I got put off when it asked me to agree to its Terms of Service... what kind of decentralised system has a terms of service? It's meant to serve the user, not the developer. I found Ricochet IM ( https://ricochet.im/ ) to be much more to my taste. Your Ricochet ID is just a Tor hidden service, and when someone wants to chat to you their client connects to your Tor hidden servic…

The Matirx ToS is for using (or federating to) their servers. You can setup your own homeserver and there is no ToS.

Re: Matrix at FOSDEM 2019

#69

I tried to use Matrix a while back, but I got put off when it asked me to agree to its Terms of Service... what kind of decentralised system has a terms of service? It's meant to serve the user, not the developer. I found Ricochet IM ( https://ricochet.im/ ) to be much more to my taste. Your Ricochet ID is just a Tor hidden service, and when someone wants to chat to you their client connects to your Tor hidden servic…

"Using Tor gets you encryption and onion-routing for free."

But not end-to-end encryption ... (unless Tor changed that?)

Re: Matrix at FOSDEM 2019

#70

I tried to use Matrix a while back, but I got put off when it asked me to agree to its Terms of Service... what kind of decentralised system has a terms of service? It's meant to serve the user, not the developer. I found Ricochet IM ( https://ricochet.im/ ) to be much more to my taste. Your Ricochet ID is just a Tor hidden service, and when someone wants to chat to you their client connects to your Tor hidden servic…

The Matirx ToS is for using (or federating to) their servers. You can setup your own homeserver and there is no ToS.

Unfortunately it's illegal under GDPR to run a web service without telling users how their data is used and getting them to confirm they understand. We hate it too, but we have no choice. In future as Matrix becomes more P2P (like Ricochet) then this will go away, unless you choose to store your data on someone else's server.

Most people are happy that we actually spent the time & effort to explain what happens to their data in Matrix (especially given it's unusual relative to a centralised service), and to do so in non-legalese. https://github.com/vector-im/policies/blob/master/docs/matri... is the doc in question fwiw.

Post reply on HN