Live data from Hacker News

Briar Desktop for Linux

briarproject.org

61–70 of 87 posts

Re: Briar Desktop for Linux

#61

I don't feel comfortable trusting a new "secure" messaging platform or interested in doing the work to dig through the sources to see if it's legit or not combined with the fact that I don't even know if the source they provide generates the same binary they distribute to many. Just use Matrix instead.

Briar is older than Matrix. It has been around since at least mid-2012, whereas Matrix is from 2014. Disclosure: I was an intern for them in mid-2012.

Thanks that's really interesting. Does Briar have multiple client implementations like a documented protocol or something too?

Re: Briar Desktop for Linux

#62

Earlier quoted context omitted.

Briar is older than Matrix. It has been around since at least mid-2012, whereas Matrix is from 2014. Disclosure: I was an intern for them in mid-2012.

Thanks that's really interesting. Does Briar have multiple client implementations like a documented protocol or something too?

briar is built on a p2p syncing protocol called bramble, you can read more here: https://code.briarproject.org/briar/briar/-/wikis/A-Quick-Ov...

Re: Briar Desktop for Linux

#63

It's great that the messaging works over bluetooth and local wifi, but I really wish the phone app would be able to cache and relay encrypted messages to others. Or does that somehow work through the posts and forums in the app?

Apparently being worked on: https://news.ycombinator.com/item?id=30025858

It requires someone running a server device. I don't think that's a good direction to take unless it's really easy to enable that within the mobile app :(

Re: Briar Desktop for Linux

#64

Since I needed brief intro myself, Wikipedia says: "The initial target audience for Briar includes "activists, journalists and civil society" with plans to make the system "simple enough to help anyone keep their data safe." As the ability to function in the absence of internet infrastructure may also make the project valuable to disaster response and aid organisations, the developers are working with the Open Humani…

is there already some compare available that shows differences with other messengers like Telegram or Signal?

It's been awhile since I used Briar, but unlike something like Signal, Briar is decentralized. So you can communicate with other Briar users in the absence of a central server. Briar at least used to be very strict about how you established contacts, so, for example, to add a contact you had to have them physically in your presence and exchange QR codes on your phone. You couldn't just add someone from your phone contacts, for example, or look up their phone number.

The downside to these things is that Briar tends to use up battery on mobile devices, because it's constantly running to handle the decentralized communications. Also, having to have someone physically in your presence makes it difficult to add someone casually like some other apps.

Some of these things might have changed, as they've been pretty consistent and active in developing the software, and it has evolved over time into offering more and more functionality. In general, Briar development tends to be very conservative about security, but also very encouraging of "robustness" development for lack of a better way of putting it (I think at one time they had an API so that it could be extended to general "off grid" communication protocols, or at least were discussing it).

I'm a little surprised it hasn't gotten more attention over the years, because I think it has been audited and seems very very secure. It also pops up on places like HN from time to time. On the other hand, that conservativism about security makes it sort of impractical for someone who, say, just wants to chat with friends and family.

I think the best comparison is probably with Matrix rather than Signal or Telegram, but Briar lacks the federated component at the moment.

This desktop release is interesting to me because in some ways it represents a major expansion of the software. As I said, they've tended to be very conservative and it's interesting to see it added. It also probably makes it more feasible to treat the desktop instance as a sort of "permanent on" server with access to a power supply instead of running off a battery (to be honest, starting with a desktop service kinda makes more sense to me given the power requirements).

Take this all with a grain of salt because, although I have it on my phone, I haven't actually used it in some time and haven't actively kept up with development in a couple of years.

Re: Briar Desktop for Linux

#65

Since I needed brief intro myself, Wikipedia says: "The initial target audience for Briar includes "activists, journalists and civil society" with plans to make the system "simple enough to help anyone keep their data safe." As the ability to function in the absence of internet infrastructure may also make the project valuable to disaster response and aid organisations, the developers are working with the Open Humani…

If you understand German, then I recommend the review by Mike Kuketz (https://www.kuketz-blog.de/briar-anonymitaet-und-sicherheit-...). Maybe you get a decent translation with Deepl, though I stay wary.

There is also a comparison to other messenger systems on https://www.freie-messenger.de/systemvergleich/. They have a PDF in English available, but it doesn't really tell much.

Re: Briar Desktop for Linux

#66

Never heard of Briar. Title made me think it was some new cool desktop environment for linux. It took me longer than I care to admit before I realized Briar is just a messaging app.

A new environment with just a handful of apps comes every so often. In that regard, what are other apps like Briar? The premise is: > Briar is a messaging app designed for activists, journalists, and anyone else who needs a safe, easy and robust way to communicate. Unlike traditional messaging apps, Briar doesn’t rely on a central server - messages are synchronized directly between the users' devices. If the internet…

Jami comes to mind.

https://jami.net/

Re: Briar Desktop for Linux

#68

Never heard of Briar. Title made me think it was some new cool desktop environment for linux. It took me longer than I care to admit before I realized Briar is just a messaging app.

A new environment with just a handful of apps comes every so often. In that regard, what are other apps like Briar? The premise is: > Briar is a messaging app designed for activists, journalists, and anyone else who needs a safe, easy and robust way to communicate. Unlike traditional messaging apps, Briar doesn’t rely on a central server - messages are synchronized directly between the users' devices. If the internet…

There is also https://Berty.tech

Re: Briar Desktop for Linux

#69
post #42

Earlier quoted context omitted.

A new environment with just a handful of apps comes every so often. In that regard, what are other apps like Briar? The premise is: > Briar is a messaging app designed for activists, journalists, and anyone else who needs a safe, easy and robust way to communicate. Unlike traditional messaging apps, Briar doesn’t rely on a central server - messages are synchronized directly between the users' devices. If the internet…

There's some overlap with P2P Matrix (which isn't yet done but is in the works).

I'm very curios about p2p matrix as well because I hope it will bring privacy mainstream. The closest now is signal which is, at best, very far away from whatsapp.

I hope this will change with p2p matrix...

Re: Briar Desktop for Linux

#70
post #14

Do any of these "decentralized" and "end to end" encryption communication systems actually solve the fundamental problem which is that you have to trust the person you're communicating with to not give up the content of the messages they've sent and received. People's telegram and signal comms are always showing up in subpoenas because someone unlocks their phone for the feds. I guess what I'm thinking here is that t…

There is a word for "You can't prove I said that", and even though English is my only language, I can't remember the word. It feels like "repudibility". I think I'm on the right track: https://en.wiktionary.org/wiki/repudiate I think it is related to forward secrecy. Maybe the E2EE apps should have a button for that, call it something snazzy like "The 5th Amendment button" and right next to that is a button for trivi…

The Signal protocol already guarantees repudiation: https://en.wikipedia.org/wiki/Signal_Protocol#Properties

But this is just cryptographic repudiation, meaning that a receiver cannot prove that they didn't tamper with their Signal data to fake having received a message from a certain sender. OP is talking about something else: preventing any data the receiver might have received to be transferred to a 3rd-party, but that's impossible.

Post reply on HN