• 8 Posts
  • 36 Comments
Joined 1 year ago
cake
Cake day: February 10th, 2024

help-circle
















  • mox@lemmy.sdf.orgtoPrivacy@lemmy.mlOpinion on the Matrix protocol
    link
    fedilink
    arrow-up
    6
    arrow-down
    2
    ·
    edit-2
    9 days ago

    Matrix literally syncs the entire data/metadata history to all other servers where someone pops in

    How else would you expect a decentralized and persistent chat room to work? If that stuff wasn’t synced among the servers that were invited to participate in a room, then it wouldn’t be decentralized; one server going down would kill the room (or at least lose data).

    The only way I can think of is not to use servers at all, but go fully peer-to-peer. Matrix has done some proof-of-concept work toward this, but I’m not aware of any service that does it successfully while being practical for most people, yet.

    chat is meant to have an ephemeral aspect to it.

    There are use cases where that makes sense, but for general use? No thanks. When I lose my account password or my phone breaks, I want to be able to sign in on another device and still have my message history.

    It sucks so much RAM, so much storage,

    Synapse is indeed a heavy server implementation. Several lighter ones are in development, some of which people are using already.


  • encryption regularly breaks in weird ways, usually you see a message that you can’t read

    This was once common, but it’s somewhat rare now in my experience, and the upcoming Matrix 2.0 apparently addresses most (all?) of the remaining causes.

    if you enable encryption in a chat room you cannot disable it

    I consider this a good thing, for the sake of the people who joined or wrote in the chat with the understanding that what they write is and will remain encrypted. If you want to abandon encryption, you can always create a new room.

    we now have two official clients for Android (Element and Element X) in the first one encryption breaks in weird ways, in the later there is no way to use Spaces properly

    No, there is one officially released client for android: Element. Element X is in beta. When it leaves beta, it will take over as the one officially released client.

    direct messages between people don’t work well - it is like they are a room with the two people

    It works well for me. How is it a problem for you? It looks just like the person-to-person chats on other platforms I use, including SMS.

    privacy wise matrix is weak,

    Privacy of message content is not weak at all.

    leaks metadata,

    It’s true that some metadata can be read by admins of the servers that have been invited into a chat. Given all the features that Matrix uniquely offers, that’s an acceptable tradeoff for many of us. Also, the developers have stated that moving most of that metadata to the encrypted channel is planned.

    attachments are not encrypted, etc.

    This is just plain false.

    https://spec.matrix.org/latest/client-server-api/#sending-encrypted-attachments



  • mox@lemmy.sdf.orgtoPrivacy@lemmy.mlOpinion on the Matrix protocol
    link
    fedilink
    arrow-up
    10
    arrow-down
    2
    ·
    10 days ago

    Matrix is good for private general messaging. The fact that it’s decentralised means it can also withstand things like government-ordered shutdowns or back doors, since there is no central point that controls the whole network.

    Two things to be aware of:

    • Some non-message bits (e.g. room topic text and membership) have not yet been moved to the encrypted channel, so those could be read by the administrator of a homeserver that participates in your chat room. Since most people care primarily about keeping the message content private, this is an acceptable trade-off to get all the things that Matrix offers.
    • The upcoming Matrix 2.0 features and design choices simplify the UI and fix some occasional errors. It might be worth waiting until this stuff officially lands in the client apps before bringing your contacts to Matrix, for a better experience all around.



  • Indeed. Tucked away in a corner of their web site, where it isn’t easy to find unless someone else guides you to it, below a large bold warning that discourages people from actually using it:

    Danger zone

    Advanced users with special needs can download the Signal APK directly. Most users should not do this under normal circumstances.

    This ensures that nearly nobody uses that build. Consequently, almost all chats on Signal will have an app store build running on at least one endpoint.


  • It’s not false.

    Signal’s default, well-supported installations use Google services, so unless you’re an extremely atypical user, those services are present on most of your contacts’ devices. You might have the knowledge, skill, and motivation to remove those services from your own device, but since they’re still present at the other end of most chats, you haven’t escaped them.

    Let’s also remember that E2EE doesn’t protect the endpionts, and that Google Play Services run with system-level privileges.