News for hackers. Stuff that matters.
Re:Using Matrix to replace proprietary and centralized chat ... by AndrewUnmuted on Saturday November 14, 2020 @12:21PM (#25093733)
This confuses me. Those individuals who are

> very privacy and security leaning in nature

were not already on Matrix?

Re:Using Matrix to replace proprietary and centralized chat ... by gravitas on Saturday November 14, 2020 @12:25PM (#25093777)
Nope, and show reluctance to even bother trying. We communicate via Signal, which unlike Matrix has favored adoption even outside tech circles in the past few years.
Re:Using Matrix to replace proprietary and centralized chat ... by hda2 on Saturday November 14, 2020 @10:59PM (#25098137)
> Nope, and show reluctance to even bother trying. We communicate via Signal

Not all of us. Many of us realize the benefits of federation and the security implications of having a single point of failure.

Re:Using Matrix to replace proprietary and centralized chat ... by gravitas on Monday November 16, 2020 @04:04PM (#25116973)
My reply wasn't meant generically, sorry if it didn't come across - I was replying to the question about my friends in this category, not making any sort of statement about others.
Re:Using Matrix to replace proprietary and centralized chat ... by godelski on Saturday November 14, 2020 @01:23PM (#25094316)
Also isn't E2EE new to Matrix? My understanding is also that they don't handle group privacy the same way that Signal does (which granted, is a new feature as well). I'll also say that in a space that is evolving quickly, a centralized system where I can know that people are on a version similar to me is pretty important. I don't have any fear of Moxie turning and pushing backdoor keys into everyone's app.
Re:Using Matrix to replace proprietary and centralized chat ... by twentydollars on Saturday November 14, 2020 @02:02PM (#25094669)
> Also isn't E2EE new to Matrix?

It was turned on by default in May of 2020. It was available before then.

> I don't have any fear of Moxie turning and pushing backdoor keys into everyone's app.

He could, though, and you have to trust him not to. I see that as a problem.

Re:Using Matrix to replace proprietary and centralized chat ... by godelski on Saturday November 14, 2020 @03:21PM (#25095310)
> It was turned on by default in May of 2020. It was available before then.

Thanks! I do think default matters though. Do you know how they handle groups and metadata?

> He could, though, and you have to trust him not to. I see that as a problem.

Personally I don't. At the end of the day we have to trust a lot of people for society to operate. I'll stay on Signal where I can get my non privacy concerned friends connecting while all signs point to the opposite of Moxie turning. Especially considering the tradeoff of how the space is moving so fast currently. Maybe I'll revisit when no metadata E2EE group chats are widespread and Matrix creates a very simple server setup. Federation makes sense to me for mature technologies, but not for fast moving technologies.

Re:Using Matrix to replace proprietary and centralized chat ... by hda2 on Saturday November 14, 2020 @11:02PM (#25098151)
Rubber hoses still exist. I think GP was trying to correctly point out that having a single point of failure is a weakness in any system, cryptographic or otherwise.
Re:Using Matrix to replace proprietary and centralized chat ... by godelski on Saturday November 14, 2020 @11:13PM (#25098197)
But Moxie's point in the blog post that is referenced is that with federated systems you have a lot of failure points. You can't keep everyone on the latest update in a federated system. You need all those actors to function perfectly, most of whom aren't going to be experts. This makes federated systems not great for anyone but experts.
Re:Using Matrix to replace proprietary and centralized chat ... by hda2 on Saturday November 14, 2020 @11:48PM (#25098339)
> federated systems [..] have a lot of failure points

They sure do, but you also have access to all the parts needed to maintain your own instance and so does everyone else. Failures, when they happen, are limited to instance who aren't "functioning perfectly" instead of extending to every user of a centralized system.

Just to keep everyone reading this thread on the same page: The point of failure being discussed here is the human factor. See comment ancestors for context.

Re:Using Matrix to replace proprietary and centralized chat ... by godelski on Sunday November 15, 2020 @02:13PM (#25103821)
> Just to keep everyone reading this thread on the same page: The point of failure being discussed here is the human factor.

Thanks for reiterating this, because I think it is a key thing people who are scanning this thread are missing.

I think this is actually the argument for a centralized system though. At least for something that's a replacement to text messaging. I think the issue with a federated system is that most people don't know how to run a server, even pretty technical people. So this makes sense as a slack replacement, but not text messaging. At least to me.