News for hackers. Stuff that matters.
Re:An Apology and an Update by orthecreedence on Friday December 21, 2018 @09:35PM (#18738569)
Yep. Going to go ahead and throw Matrix/Riot out there as a great alternative.
Re:An Apology and an Update by sftwds on Friday December 21, 2018 @10:23PM (#18738726)
We use Mattermost at my company, which works well for us and is entirely self hosted.
Re:An Apology and an Update by SomeHacker44 on Friday December 21, 2018 @11:05PM (#18738844)
Seconded. I like controlling things myself and hosting them myself. Nobody (um, but AWS, our ISP, our DNS registrar, ARIN, oh and heck tons of others) can shut me down now.
Re:An Apology and an Update by Crosseye_Jack on Saturday December 22, 2018 @07:49AM (#18740353)
> Nobody (um, but AWS, our ISP, our DNS registrar, ARIN, oh and heck tons of others) can shut me down now.

But in theory all of those can be replaced, a site that was recently in the news for being kicked off Godaddy, Google, tucows, Cloudflare, the Russian media watchdog, namecheap, DreamHost and a ton of others. Today its online using a Chinese based provider.

But yeah, if SV takes a disliking to you, it can be a right PITA to find some where to get back online.

But you are right, Someone somewhere has to host you and/or provide you with services (even if you self host) you are still dependant on to be able to stay online.

Re:An Apology and an Update by miaklesp on Friday December 21, 2018 @09:57PM (#18738645)
Which platform would be better today from practical standpoint? for a remote team of developers. Matrix?
Re:An Apology and an Update by orthecreedence on Friday December 21, 2018 @10:06PM (#18738676)
Matrix is the protocol, Riot is a Slack-like implementation of the protocol: https://riot.im/

You can use the default (free) Matrix homeserver with Riot and you'll basically have a free chat system without any setup (besides installing the client).

I've been using Riot for a while now, and while Slack does seem a bit more polished, having client-side encryption for all my messages gives Riot the upper hand: I don't worry about sending passwords or sensitive info as much as I do with Slack.

Re:An Apology and an Update by sandGorgon on Friday December 21, 2018 @11:50PM (#18738981)
Modular.im is their hosted product. Much cheaper than slack as well.
Re:An Apology and an Update by qwertay on Saturday December 22, 2018 @01:53AM (#18739355)
I thought it was kind of expensive at first but then I saw the price of slack. ~$1.50/user/month seems very fair when you see what slack and email cost per user
Re:An Apology and an Update by sandGorgon on Saturday December 22, 2018 @04:31AM (#18739824)
the new redesigned UI is at https://riot.im/experimental/

you can participate in the discussion at https://riot.im/experimental/#/room/#modular:matrix.org to understand more if you want.

Re:An Apology and an Update by techntoke on Saturday December 22, 2018 @01:28AM (#18739300)
I'm still hoping they'll implement an SMS gateway. If Matrix could replace Google Voice too, that would rock my world.
Re:An Apology and an Update by mikenew on Saturday December 22, 2018 @03:10AM (#18739580)
There is one. I'm using it, it works, but it's a little buggy: https://github.com/tijder/SmsMatrix. I haven't been able to ignore my message app and trust the bridge 100% yet.

I'm hoping to spend some of my christmas break contributing some work to the project. I agree, bridging SMS into a chat service that you can use from anywhere is a killer feature.

Re:An Apology and an Update by xf86alsa on Saturday December 22, 2018 @05:08PM (#18742747)
If you do make any updates, feel free to throw them into the This Week in Matrix room which may catch some more dev's attention!

https://matrix.to/#/#twim:matrix.org

Re:An Apology and an Update by mikenew on Saturday December 22, 2018 @05:12PM (#18742775)
Awesome, will do!
Re:An Apology and an Update by derf_ on Friday December 21, 2018 @10:12PM (#18738692)
I pretty much gave up on Matrix after the following exchange: https://news.ycombinator.com/item?id=8697151

Perhaps I am overreacting, but that sort of attitude on matters core to basic privacy in the post-Snowden era seems both problematic and incurable.

Re:An Apology and an Update by Arathorn on Saturday December 22, 2018 @05:26AM (#18739979)
Yup, you’re overreacting, especially given I wrote that >4y ago when we hadn’t even started implementing E2E encryption. Nowadays it’s almost complete and as others have said we will be turning it on by default for private comms in the coming month(s). (There is little point in E2E for a conversation which is public and being indexed by Google etc). Some deployments already have E2E on by default in fact (eg the french government deployment).
Re:An Apology and an Update by mikenew on Saturday December 22, 2018 @03:22AM (#18739608)
Yes, you are overreacting. Perfect is the enemy of good. Encryption is not so easy when you have a room with potentially hundreds of users, each with many devices, and you have to safely share keys between all of them. I'm using it, and even in a 1 to 1 chat it can be a burden. They are working on it, and it will be default once it's out of beta. But there are reasons why you may not want to use it. And that's a personal choice that people should be allowed to make. Would you also disallow public rooms? Or bridges into non-encrypted services?

I care about encryption, you care about encryption, and they care about encryption. "Giving up on them" and saying their attitude is "problematic and incurable" is hurting, not helping.

Re:An Apology and an Update by ndnxhs on Saturday December 22, 2018 @12:50AM (#18739165)
It is planned to make riot enable encryption by default when it is fully stable but I totally understand why the protocol would allow it to be disabled. Matrix is about more than instant messaging and there are possible use cases where you may be using it for something that needs no e2e. Maybe you are using it to control the lights in your house and you want to write an SQL script that can read the commands sent to your light over matrix and tell you how long they were turned on for last month. You can't do that if the commands were e2e encrypted and you gain nothing by encrypting them.
Re:An Apology and an Update by bdefore on Friday December 21, 2018 @11:09PM (#18738854)
Matrix E2E encryption is opt-in per room while its support is in beta, with the intent to have on by default when it's out. https://www.uhoreg.ca/blog/20170910-2110
Re:An Apology and an Update by PavlovsCat on Saturday December 22, 2018 @07:39AM (#18740312)
Anything I consider important that I post online is pretty much public. I also wrote private messages on Facebook, but I didn't upload photos or text posts that I didn't want the world to see. For that kind of stuff, encryption is just a giant waste of resources, in my case, so if I ran mastodon on my server, I would be glad that I can turn that off.

I still fell victim to apparently being reported as non-human (after 9 years of using FB with over a hundred RL friends and former class mates, many photos of me, real name from day one, and so on), and while I could send a photocopy of my ID to Facebook, as a matter of principle I didn't and won't, not without even having the right to confront my accusers. For all I know, they're bots, at best some people who didn't like a comment I made on some article -- and from the accounts of others, even showing your ID doesn't mean you won't get fucked over in a similar way again. There is just no real recourse, so why even start jumping through hoops, I'm not going to be party to normalizing that nonsense.

I also don't believe in technical solutions to social problems. Encryption gains me nothing in a world where my neighbours just shrug when I get carted off for having using encrypted communication -- or get booted off Facebook -- so that needs to be "fixed" anyway, and should it ever be, encryption would be something that protects you against criminals and assholes, not something that protects you against big brother. IMO it's lethal to assume it ever could or should. It's something we can and should use on our way to social solutions to social problems, but not something to rely on. I know that many people in other countries or very different circumstances NEED encryption, so they should have it, and I might use it out of solidarity and to give them cover even -- but that won't fix the problem anymore than Napster fixed the music industry.