Every individual Matrix room is a multi-master, non-ACID database which uses its own data as security- and privacy-related configuration. Given how hard this is to get right, I'd really, really like to see Jepsen tests and a security audit done on more than the crypto aspect of Matrix.
Automattic invests in Matrix
51–60 of 114 posts
Re: Automattic invests in Matrix
#52is there some Matrix Android app with SMS support to replace Signal?
Re: Automattic invests in Matrix
#53With E2E encryption in place by default is there any real advantage in using Signal instead of Riot client for everyday communication with my friends? Riot desktop app is definitely more polished and customizable, video quality on all of my devices also seems to be a lot better. Surprisingly the only thing that I am really missing is the ability to use custom sticker packs which got added to Signal a few months ago.
I think they had more metadata collection than signal mainly due to the design. They were making progress on it however, but I dont know the status of the work.
Re: Automattic invests in Matrix
#54With E2E encryption in place by default is there any real advantage in using Signal instead of Riot client for everyday communication with my friends? Riot desktop app is definitely more polished and customizable, video quality on all of my devices also seems to be a lot better. Surprisingly the only thing that I am really missing is the ability to use custom sticker packs which got added to Signal a few months ago.
Signal supports SMS, so you don't need dedicated app and can handle them all in one app
Re: Automattic invests in Matrix
#55> Talking of moving, Hodgson says he expects Automattic to move over from Slack to Riot following this investment.
Here's hoping Automattic has enough influence to move the WordPress.org open source and community discussions (which are currently hosted on Slack, but used to take place on IRC) to Matrix too.
Re: Automattic invests in Matrix
#56This will not work. There are no incentives for different groups of people to collaborate on a single shared communication standard. The incentive is for entities to keep data to themselves. Also, this standard is too complex and unclear. Complex standards which try to bring together many different technologies under one abstraction never seem to work. Also, universal standards are not necessarily a good thing. Decen…
> This will not work. They seem to be doing fine: ~10.0M global visible accounts ~2.5M messages per day ~4.5M unbridged accounts ~500K unbridged messages per day ~2.1M rooms that Matrix.org participates in ~20,000 federated servers ~3000 msgs/s out, ~30 msgs/s in on Matrix.org ~400 projects building on Matrix ~70 companies building on Matrix https://matrix.org/faq/ They're up to 20k visible servers from about 5.5k se…
10M accounts with 2M rooms sounds odd, any explanation?
Re: Automattic invests in Matrix
#57> Imagine if every WP site automatically came with its own Matrix room or community? Imagine if all content in WP automatically was published into Matrix as well as the Web?… Imagine there was an excellent Matrix client available as a WordPress plugin for embedding realtime chat into your site?” I want to imagine it, but I really struggle to. Matrix is just too slow, bloated, and heavy. I cannot even fathom what a sn…
The main Matrix.org homeserver is pretty slow because it's usually overloaded: https://matrixservers.anchel.nl/783115140
This is IMO mainly because they've stuck with the main implementation of the homeserver (Synapse) being written in Python. Had they've gone through with developing Dendrite as the main implementation, or perhaps even gone with one written in Rust, all of this would feel much snappier.
In a way, Dendrite is now being primed to be compiled to WASM and used in a p2p setup of Matrix, but hopefully we'll also see it running on servers instead of Synapse one day.
Although, to be fair, you can't really blame them too much though, they're a casualty to the Coronavirus effects like a lot of similar services are currently.
Re: Automattic invests in Matrix
#58Earlier quoted context omitted.
> This will not work. They seem to be doing fine: ~10.0M global visible accounts ~2.5M messages per day ~4.5M unbridged accounts ~500K unbridged messages per day ~2.1M rooms that Matrix.org participates in ~20,000 federated servers ~3000 msgs/s out, ~30 msgs/s in on Matrix.org ~400 projects building on Matrix ~70 companies building on Matrix https://matrix.org/faq/ They're up to 20k visible servers from about 5.5k se…
10M accounts with 2M rooms sounds odd, any explanation?
What seems odd about that?
Re: Automattic invests in Matrix
#59Earlier quoted context omitted.
Have you tried since we relaunched encryption and turned it on by default 2 weeks ago? The UX has completely been rewritten and it should now be transparent - see https://blog.riot.im/e2e-encryption-by-default-cross-signing... . edit: To be clear, we no longer nag whenever there's an unverified login present - and unverified logins should increasingly be a thing of the past anyway given we now have cross-signing and…
Recent update is a huge leap forward, but still, no one understands, why they have to save/remember 3 passwords. Only my closest family would listen me explaining that there's encryption but there's also authentication , yet only because I force that info upon them while standing over their shoulder, making sure they write down all the recovery keys. Select few graduated to password managers and know to back the base…
There aren't three passwords; there are two: an account password and a recovery passphrase/key. It's the same as (say) macOS - where you have a login password to get into your computer, and a recovery key for FileVault in case of disasters.
However, the feedback is overwhelmingly that we need to iterate on the recovery passphrase - either making it a generated key (like macOS does), or going the whole hog and replacing the login password entirely with the cryptographic recovery one.
Turns out the UX on this stuff is tough.
Re: Automattic invests in Matrix
#60Earlier quoted context omitted.
Have you tried since we relaunched encryption and turned it on by default 2 weeks ago? The UX has completely been rewritten and it should now be transparent - see https://blog.riot.im/e2e-encryption-by-default-cross-signing... . edit: To be clear, we no longer nag whenever there's an unverified login present - and unverified logins should increasingly be a thing of the past anyway given we now have cross-signing and…
I have and it's now at the point where I can recommend it to my family :) (with e2e, the UX otherwise I found fine) edit: also, congratulations, really hope matrix can get the market share it deserves
thanks :D