News for hackers. Stuff that matters.
Re:Freenode ops take control of 700 channels by koheripbal on Wednesday May 26, 2021 @07:31AM (#27289109)
Why are people still using IRC? Aren't there better, more private/secure channels?

I understand that many of these channels are intentionally private, but IRC is still unencrypted in transit, so everything is exposed and users have no anonymity.

Re:Freenode ops take control of 700 channels by unionpivo on Wednesday May 26, 2021 @07:59AM (#27289336)
Because it's one of the rare still used open protocol supported by multiple servers and clients implementations and not backed by single corporate entity.

In short there are other new technologies, but most of them are corporate walled gardens, or small open source projects that only have one server/client implementation, and few servers under control of single entity.

The Matrix ecosystem is the only thing I can think of, that could eventually replace IRC. (There might be others, I am just not familiar with them)

End even if they are somehow similar, discussions on Discord and Slack and other similar platforms are different than on IRC, at least in my experience.

One defining future of IRC at least channels I frequent and Discords/Slacks/Matrix is less memes and animated things grabbing your attention.

Another big thing is, that new stuff like Discord/Slack/Matrix are combination of messenger and discussion forum, while IRC is discussion only.

I almost never bother reading chat history in IRC, but in Slacks/... you are expected to keep up with @mentions and on "important channels" etc.

IRC is more of a tavern room, you come in have discussion with people currently in, some people come some people go during that and then you leave and that is that.

While on newer apps you are expected to keep up. I don't know how to describe it better, but fore me that's the biggest difference.

Re:Freenode ops take control of 700 channels by zamalek on Wednesday May 26, 2021 @11:57AM (#27292171)
> The Matrix ecosystem is the only thing I can think of, that could eventually replace IRC.

This seems like it should have been the logical conclusion. While IRC is a free protocol, this whole controversy has shown that you aren't ultimately in control of your channels. With Matrix/<other-federated>, it simply wouldn't be possible for a hostile actor to claim ownership of their channels (unless Gentoo itself were somehow the victim of a hostile takeover).

Libera certainly has a good few decades of trustworthy service, as Freenode once did, but the protocol is itself built on vulnerable assumptions. There's no way to guarantee that Libera won't have a dramawave of its own 15 years down the line.

> While on newer apps you are expected to keep up.

I completely agree with this. I've been auto-kicked from Matrix channels for inactivity/lurking, which is ridiculous. This could be solved with more client and server diversity - it wouldn't be hard to create an IRC-like experience on Matrix at all.

Re:Freenode ops take control of 700 channels by progval on Wednesday May 26, 2021 @12:11PM (#27292349)
> With Matrix/<other-federated>, it simply wouldn't be possible for a hostile actor to claim ownership of their channels

Can't matrix.org staff hijack rooms hosted on the matrix.org homeserver?

Re:Freenode ops take control of 700 channels by zamalek on Wednesday May 26, 2021 @12:24PM (#27292507)
Yes, my argument is for running your own server. The matrix.org wouldn't be able to do anything to the gentoo.org server. If you choose to use the matrix.org homeserver, then the risks are identical to IRC.
Re:Freenode ops take control of 700 channels by progval on Wednesday May 26, 2021 @01:31PM (#27293520)
You can also run your own IRC server. Risks are the same either way.
Re:Freenode ops take control of 700 channels by ptman on Wednesday May 26, 2021 @04:12PM (#27295484)
IRC networks are a closed federation. The servers have to trust each other and all servers of a network are usually administered by the same staff. Matrix is an open federation like email. The servers just speak the same protocol to each other and messages flow even if the server admins never have any interaction.
Re:Freenode ops take control of 700 channels by Arathorn on Wednesday May 26, 2021 @12:41PM (#27292765)
Matrix’s rooms are decentralised and we have decentralised access control to stop this from happening in the general case. Only a malicious server admin on your own server can hijack like this (or the one running a bridge in the case of a bridged room). And with P2P Matrix, every client gets its own server, so at that point hijacks will be entirely impossible.
Re:Freenode ops take control of 700 channels by progval on Wednesday May 26, 2021 @01:34PM (#27293553)
I don't understand how that's possible. When clicking a matrix.to link, there is a room name and a homeserver hostname, right? How does that homeserver not have complete control over what information about the room is sent to the client?
Re:Freenode ops take control of 700 channels by zamalek on Wednesday May 26, 2021 @03:50PM (#27295232)
Users/rooms on the gentoo.org server can interact just fine with users/rooms on the matrix.org server. That's basically the whole point of Matrix.

You may be suggesting that matrix.org could, for example, block access to the gentoo.org server (or a subset of its rooms). In that scenario users could choose a new homeserver (and not necessarily the same one) in order to regain access, instead of the entire channel having to migrate.

In the incredibly unlikely event where every homeserver on the internet is blocking gentoo.org, gentoo.org could simply allow user registration.

With IRC you are forced to trust the network operator with both your account and channel. Matrix gives you the option to trust someone else with both, neither, or either.

Re:Freenode ops take control of 700 channels by tffgg on Wednesday May 26, 2021 @06:27PM (#27296905)
The room name + hostname is just one of potentially many aliases for a room that can be resolved by any server that has a member in the room
Re:Freenode ops take control of 700 channels by progval on Wednesday May 26, 2021 @06:41PM (#27297037)
That's good to know! Thanks
Re:Freenode ops take control of 700 channels by Arathorn on Wednesday May 26, 2021 @12:39PM (#27292720)
Autokicks for idling were mandated by freenode on their bridge (which makes sense otherwise you end up with loads of zombie connections from folks who have forgotten about their Matrix accounts).
Re:Freenode ops take control of 700 channels by cecilpl2 on Wednesday May 26, 2021 @10:24AM (#27290860)
> I almost never bother reading chat history in IRC, but in Slacks/... you are expected to keep up with @mentions and on "important channels" etc.

Isn't that more of a feature of the kinds of environments that run Slack vs IRC?

If my office used IRC for communication, I'd still be expected to keep up on all important channels and pings.

Re:Freenode ops take control of 700 channels by lacksconfidence on Wednesday May 26, 2021 @10:46AM (#27291142)
My office uses IRC for communication. Actual realtime communication. Announcements and any communication that you need to read at any time other than "now" comes over email lists.
[dead]
Re:Freenode ops take control of 700 channels by miloignis on Wednesday May 26, 2021 @10:34AM (#27290969)
Sigh, none of that is true.

Dendrite is another homeserver that is good enough to run as a daily driver, and there's a community developed Rust one, Conduit, that's making steady progress.

There are plenty of alternative clients - FluffyChat, NeoChat, Fractal, etc. Making a basic client is pretty easy (I've written several), and my friends and I have been making a more fully-featured one in our spare time.

Federation is not fake, I was there on my own homeserver when matrix.org went down and had fun happily continuing to chat through the biggest test of matrix's federation resiliency.

Every time I've seen Arathorn interact in threads, he has been very professional and patient, even when others spread FUD (cough, cough). He certainly doesn't spread lies or FUD about anyone else.

Modern XMPP is not better in every way - Matrix is an eventually-consistent distributed event graph, which makes it better at handling big federation testing events like the matrix.org downtime.

Re:Freenode ops take control of 700 channels by BugWatch on Wednesday May 26, 2021 @10:18AM (#27290777)
Also, considering the dismissive tone of your post and your choice of handle/username, it seems you are here (just?) to grind your axe, and not for genuine and honest discussion.
Re:Freenode ops take control of 700 channels by BugWatch on Wednesday May 26, 2021 @10:15AM (#27290741)
There are at least 10 different clients, and I'm only referring to those that are listed on the Matrix website.
Re:Freenode ops take control of 700 channels by q3k on Wednesday May 26, 2021 @09:58AM (#27290555)
> federation is fake (stops working when matrix.org goes down)

Can you elaborate on this, or link to some relevant resources?

Re:Freenode ops take control of 700 channels by SAI_Peregrinus on Wednesday May 26, 2021 @10:58AM (#27291330)
Matrix requires registration with some server. These servers are federated, but the biggest and most commonly used one is matrix.org. So if that's down, most users lose access.
Re:Freenode ops take control of 700 channels by q3k on Wednesday May 26, 2021 @11:05AM (#27291440)
But that's not fake federation, that's just federation and the reality that most people that can't be bothered to set up their own federated server? You can say that a fully distributed chat system would be better at this (like SSB [1]), but that's a totally different beast from a federated system.

Matrix's federation is no worse than any other popular federated system I've used (eg. email and xmpp). I'm not saying it shouldn't be better (I dislike the matrix.org centralization, too), but that's not something inherent to Matrix, and I think it's not honest to bring it up as 'fake federation' in this context.

Additionally, Matrix is significantly better at this in one way than the alternatives: even if matrix.org goes down, all rooms can continue working, even ones with a :matrix.org label. The same can't be said about XMPP MUC, IIUC.

[1] - https://en.wikipedia.org/wiki/Secure_Scuttlebutt

Re:Freenode ops take control of 700 channels by SAI_Peregrinus on Wednesday May 26, 2021 @04:38PM (#27295779)
I don't disagree with that, I'm not the OP who called it fake federation.

I do think that federated systems tend to become centralized, because the federating links tend to be unreliable. I think people confuse federation and decentralization, when they're very different things.

Re:Freenode ops take control of 700 channels by tffgg on Wednesday May 26, 2021 @06:46PM (#27297102)
Less than a third loose access through their current server. They can sign up on a different server and have access again.
Re:Freenode ops take control of 700 channels by Mediterraneo10 on Wednesday May 26, 2021 @09:50AM (#27290463)
There are multiple Matrix clients in common use. It is odd that you think Element is the only client.
Re:Freenode ops take control of 700 channels by coldpie on Wednesday May 26, 2021 @10:12AM (#27290719)
It's a brand-new user named "lolmatrixx". Don't waste your time.
Re:Freenode ops take control of 700 channels by kyrra on Wednesday May 26, 2021 @09:25AM (#27290200)
To pile on, Google uses internally for incident response [0]

> Google has found IRC to be a huge boon in incident response. IRC is very reliable and can be used as a log of communications about this event, and such a record is invaluable in keeping detailed state changes in mind. We’ve also written bots that log incident-related traffic (which is helpful for postmortem analysis), and other bots that log events such as alerts to the channel. IRC is also a convenient medium over which geographically distributed teams can coordinate.

Also, irc can still be up when Chat, Hangouts or other tools are down. It's simple tech that is easy to interact with.

[0] https://sre.google/sre-book/managing-incidents/

Re:Freenode ops take control of 700 channels by CydeWeys on Wednesday May 26, 2021 @10:48AM (#27291169)
Worth pointing out that IRC isn't necessarily the first choice for coordinating a response, but it is a great low-dependency, independent fallback. IRC runs on a stack that is completely independent from the rest of Google prod (it's just a Linux machine running an IRC daemon). So when almost everything else goes down, so long as basic network routing is still working, IRC is still up.
Re:Freenode ops take control of 700 channels by kyrra on Wednesday May 26, 2021 @02:28PM (#27294266)
Point taken. For smaller incidents, Chat or Meet are regularly used. But larger (cross-team or maybe infra related) are handled in IRC.
Re:Freenode ops take control of 700 channels by hobs on Wednesday May 26, 2021 @10:57AM (#27291314)
Apple hosted and used its own IRC for decades and sadly I saw the last of it die off ~ 2010 for any support uses.

iChat internally at a site was not a replacement.

Re:Freenode ops take control of 700 channels by qiqitori on Wednesday May 26, 2021 @07:51AM (#27289278)
IRC is inherently non-private because anybody can join and then do whatever with what they saw.

IRC isn't really unencrypted in transit though, you can connect via SSL (most people do so, probably) and there are channel modes on some networks that prevent people from joining if they aren't using SSL to connect.

You can also encrypt messages yourself and then send those on top of the IRC protocol.

As for anonymity, most IRC networks allow you to use a cloak to hide your IP (requires user registration, which would require one email interaction), some IRC networks hide your IP (or parts of the reverse DNS) and some IRC networks allow you to join using Tor.

Re:Freenode ops take control of 700 channels by progval on Wednesday May 26, 2021 @02:16PM (#27294081)
> IRC is inherently non-private because anybody can join

Servers and channels can have passwords. Channels can also be invite-only.

Re:Freenode ops take control of 700 channels by arminiusreturns on Wednesday May 26, 2021 @11:50AM (#27292087)
I also encourage the use of proxy servers and/or vpns(preferably not as a service!) when using irc on the wild world of the web. In addition to cloaking, and everything else you mentioned.
Re:Freenode ops take control of 700 channels by knorker on Wednesday May 26, 2021 @08:53AM (#27289870)
Efficient, supports terminal mode natively, open, and frankly for exactly this reason.

If whatsapp, or apple, or google, or facebook does anything like this then all you can do is shrug and accept it.

But if you have $5 a month then you can run an IRC network with a VM.

> IRC is still unencrypted in transit

Sometimes. But there's also a lot of TLS, and it's trending upwards.

> users have no anonymity

Less anonyminity against each other, but more against the central powerful provider.

And while you may have my IP on IRC (depends on the network), what are you as a private individual supposed to do with that information?

Whereas when centralized it becomes monetizable.

Re:Freenode ops take control of 700 channels by pferde on Wednesday May 26, 2021 @07:43AM (#27289211)
That is not necessarily true for Freenode or Libera. Client connections over TLS are encouraged, and I'm pretty sure that server-to-server links are all over TLS also.

Plus, there are some controls for users and channel admins to make sure they are talking over TLS only, such as +S channel mode, which only lets in TLS-using client connections to join.

Re:Freenode ops take control of 700 channels by andrey_utkin on Wednesday May 26, 2021 @08:27AM (#27289615)
> Why are people still using IRC? Aren't there better, more private/secure channels?

Equilibrium.

An old essay "A Group Is Its Own Worst Enemy" explains this idea in an enlightening way: https://www.gwern.net/docs/technology/2005-shirky-agroupisit...

> Some pieces of social software, like IRC channels and mailing lists,are self-moderating with scale, because as the signal-to-noise ratio gets worse, people start to drop off, until it gets better, so people join, and so it gets worse. You get these sorts of oscillating patterns, but the overall system is self-correcting

Re:Freenode ops take control of 700 channels by pteraspidomorph on Wednesday May 26, 2021 @07:41AM (#27289187)
Daemon and client implementations have effectively supported SSL/TLS for many years now. You can't control whether server links are encrypted (that's up to the owners; in a competently run network they will be) but all major networks have one or more encrypted connection ports. 6697 is a typical choice. On mIRC, prefix the port number with a + to use SSL.

Newer protocols are more feature rich and don't have some of the legacy drawbacks of IRC, of course.

Re:Freenode ops take control of 700 channels by OldGoodNewBad on Wednesday May 26, 2021 @07:43AM (#27289199)
Nothing is better than IRC.
Re:Freenode ops take control of 700 channels by bbarnett on Wednesday May 26, 2021 @09:41AM (#27290355)
Re:Freenode ops take control of 700 channels by agumonkey on Wednesday May 26, 2021 @08:05AM (#27289399)
Stupid, light, fast

I got used.to discord but it's not the same

Re:Freenode ops take control of 700 channels by donio on Wednesday May 26, 2021 @12:52PM (#27292933)
There is a Discord plugin for bitlbee, that way you can use an IRC client to chat on Discord. https://github.com/sm00th/bitlbee-discord
Re:Freenode ops take control of 700 channels by donio on Wednesday May 26, 2021 @12:57PM (#27293023)
For me it's the simplicity and the availability of good Emacs based clients. For other services there are some Emacs clients but none of them are as good as the IRC clients. There are also some proxy tools that let me use Emacs IRC clients to connect to other chat services, I use those when possible. This way I can do all my chatting from the comfort of my Emacs session.
Re:Freenode ops take control of 700 channels by swiley on Wednesday May 26, 2021 @07:50AM (#27289275)
Most modern servers use TLS so it isn't any worse than imessage.
Re:Freenode ops take control of 700 channels by nixgeek on Wednesday May 26, 2021 @09:06AM (#27289976)
This is incorrect. iMessage is E2EE, which IRC is not.
Re:Freenode ops take control of 700 channels by swiley on Wednesday May 26, 2021 @09:45AM (#27290402)
Even if iMessage is E2EE (I don't think it is) the backups mean the messages end up on Apple's servers unencrypted. Either way Apple is able to access them when subpeonaed.
Re:Freenode ops take control of 700 channels by samtheprogram on Wednesday May 26, 2021 @04:28PM (#27295661)
It is E2EE, and the backups on Apple's servers are encrypted. However, if you also have iCloud Backup turned on, the encryption key is backed up plain-text [1][2], so the effect ("Apple is able to access them when subpeonaed" sic.) remains the same in those cases, but it can be configured/avoided.

[1]: https://support.apple.com/en-us/HT202303 [2]: https://www.reddit.com/r/apple/comments/8nbgyu/messages_in_i...

Re:Freenode ops take control of 700 channels by swiley on Wednesday May 26, 2021 @06:01PM (#27296663)
Do you use imessage in any groups were there isn't at least one member that has iCloud Backup turned off? I don't know a single person with it off.
Re:Freenode ops take control of 700 channels by nixgeek on Saturday May 29, 2021 @03:43PM (#27327745)
Yes, several, they mostly all work in security and actually read the Platform Security Guide and made a decision the inconveniences were outweighed by the strengths of not storing that key.

Remember also that subpoenas rarely permit “fishing expeditions”, so if they want your iMessages, can convince the judiciary you have potentially committed a crime, your key not being stored and the E2EE nature doesn’t always mean a judge is going to let LE go after Bob, Joe, Bill and everyone you have messaged with and demand Apple hand over all their iMessages (if they have backups enabled).

Re:Freenode ops take control of 700 channels by l-p on Wednesday May 26, 2021 @07:42AM (#27289195)
> but IRC is still unencrypted in transit

TLS is an option, not ideal but better than no TLS at all.

Re:Freenode ops take control of 700 channels by agumonkey on Wednesday May 26, 2021 @08:09AM (#27289440)
Seen a few people pushing it.

That said I keep having the good old plain data link