151–160 of 178 posts
Just wanted to say thanks. I've been running my own homeserver for a little over two years now without any real issue. I somehow managed to convince 4 of my friends to use Riot and it's been great. We were originally using Group Me. My friends are not tech savvy and couldn't care less about software freedom or privacy, but I was able to convince them to switch by luring them with the fact that they could post unlimit…
Earlier quoted context omitted.
Looks like it's still relying on Ethereum, which IMO is irresponsible from a climate change / energy use point of view.
Do you think that ethereum won’t move to PoS soon? (I haven’t looked into the design, can’t comment on whether the construction seems sound to me)
It'll most likely be a couple of years until the transition is done so that smart contracts like Urbit can/will run under PoS.
Earlier quoted context omitted.
The contact social graph in signal is stored inside of SGX using a service called contact discovery. Signal is attempting to design the system such that Signal can never know whose contacts are in your phone as a service provider. They deal with side-channel leakage of lookups from the contact DB into the enclave using a technique called linear scan which is a constant-time bitwise XOR operation on every contact. Thi…
> If you still don't think what Signal is doing is enough, you can run your own signal (or matrix) server, but then you are running a very, very valuable server from a graph analysis perspective. ...which is precisely why we’re working on P2P matrix. No servers; nowhere for metadata to accumulate (other than the clients, of course).
Earlier quoted context omitted.
You have to deploy 3-4 services to run your own with Docker, right? Synapse, Riot, Jitsi, etc?
I just run a single Synapse server in docker. Self hosted Riot is only relevant if you want to customize it, but I've found radical [1] to be a better alternative since I'm the only one using the server. You can always fall back to using the Matrix-hosted Jitsi and TURN instances if you don't host your own (although I don't end up video calling with riot anyways). [1] https://github.com/stoically/radical
Earlier quoted context omitted.
sounds perfect for state sponsored troll armies, who have way more money/btc/eth than any of us.
That's true for anything where difficulty is measured by a continuous function -- that is, everything is easiest for a state sponsored anything, good or bad, unless it can't be done at all. You're really just saying states have more resources than individuals... which is true almost by definition (they aggregate individuals within their realm)
This is exciting - I'm looking forward to it. I've been nerding out a bit playing with Matrix/Riot and Urbit - there's a lot of exciting stuff happening in this space. If you like what Matrix is doing consider paying $10/month for your own server via Modular.im ( https://modular.im/ ). It supports the Matrix devs and you get your own high performance federated server to use on the network. Their automation makes it e…
> > "Hooking up E2E Encryption APIs in Dendrite (not that it buys us much in a pure P2P world)" > Doesn't this still matter if the internet traffic itself is tapped? If I'm understanding this correctly we'll still want E2E for things like deep packet inspection in China (or bulk collection by western governments). If TLS has been compromised between your nodes, then yes - E2EE would give another level of protection;…
This is exciting - I'm looking forward to it. I've been nerding out a bit playing with Matrix/Riot and Urbit - there's a lot of exciting stuff happening in this space. If you like what Matrix is doing consider paying $10/month for your own server via Modular.im ( https://modular.im/ ). It supports the Matrix devs and you get your own high performance federated server to use on the network. Their automation makes it e…
> > "Hooking up E2E Encryption APIs in Dendrite (not that it buys us much in a pure P2P world)" > Doesn't this still matter if the internet traffic itself is tapped? If I'm understanding this correctly we'll still want E2E for things like deep packet inspection in China (or bulk collection by western governments). If TLS has been compromised between your nodes, then yes - E2EE would give another level of protection;…
Earlier quoted context omitted.
The point I'm trying to argue, poorly, is that implementing a feature where you can right-click and explicitly choose to download something a bit faster is... probably not worth the sheer amount of arguing for "integrate IPFS into Matrix" that I've seen at every turn, for the past few years. People largely seem to want IPFS because IPFS is their pet project , not for any particular edge that it'll give Matrix, and al…
> people turned up in #matrix-dev Honestly, for a "normal" homeserver it does not make as much sense as for the p2p version of it. For the "actual server" synapse, I am more interested now in the multi-home-repo that I saw posted also on this thread. > Sharing multi-gigabyte files with groups of people in a public way is, yes, maybe something some people do Microsoft executives in the 90s: "Internet search is a silly…
Earlier quoted context omitted.
> > "Hooking up E2E Encryption APIs in Dendrite (not that it buys us much in a pure P2P world)" > Doesn't this still matter if the internet traffic itself is tapped? If I'm understanding this correctly we'll still want E2E for things like deep packet inspection in China (or bulk collection by western governments). If TLS has been compromised between your nodes, then yes - E2EE would give another level of protection;…
TLS isn’t everything, you might not trust the server operator. In fact you probably shouldn’t if you’re sending a PM.