News for hackers. Stuff that matters.
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by IceWreck on Tuesday October 26, 2021 @10:08AM (#29000571)
> you pay a monthly fee for someone to man-in-the-middle all your communications.

All Matrix homeservers and bridges are open source. I self host some of them myself. Have been doing that long before Element One was a thing.

Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by tiagod on Tuesday October 26, 2021 @10:51AM (#29001131)
How can I verify you're running unmodified, unhooked source in your server if I'm a user?
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by IggleSniggle on Tuesday October 26, 2021 @11:09AM (#29001337)
You don't, you self-host your own server.

My problem with the self-hosted model is that I don't trust myself to get it right and/or keep it updated. My problem with the 3rd-party model is that I don't trust them, either. So, lacking trust in either myself or the third-party, I'm just one of those people you can get only via secure e-mail, clear-text SMS, or whatever well-supported encrypted service happens to be the one with a plurality of users in my friend/family group. Clear-text sucks, but it can be used to negotiate a secure channel.

Unfortunately, the levels of spam in my traditional telephony services have dramatically increased in recent years, and as a tradeoff, I've just gotten harder and harder to get in touch with directly as I increasingly default to ignoring more and more methods of communication. I don't even think I'm someone with anything to hide or anything to fear my communications being in the public, there's just too much information to manage.

Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by colbyhub on Tuesday October 26, 2021 @03:47PM (#29005362)
I feel the same way, I don't fully trust hosted solutions but don't completely trust myself to host my own -- which is where E2E encryption comes into play, but a malicious host would still have access to loads of metadata (timestamps, IPs, etc.).

Blockchain-based solutions like Status.im appear to do away with these sorts of issues through decentralization -- but you still have to put trust into their network.

Solutions like TLS & OMEMO over Tor for XMPP seem to be a very strong privacy-centered solution outside of blockchain-based applications.

Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by mindslight on Tuesday October 26, 2021 @03:25PM (#29005045)
I'm excited about NixOS (/GuixSD) because they would seem to provide a straightforward path to running secure services (self-compiled from publicly reviewable source) while keeping them automatically updated (build rules administered by a third party). I'm not saying this is a good approach for you personally right now, but I can definitely see it becoming popular in several years.
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by axelthegerman on Wednesday October 27, 2021 @04:21AM (#29010760)
How can you verify what the latest update of Google Play Services is doing on your Android that's running a proprietary WhatsApp client just so you feel happy you have "E2E" encryption?
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by cyborgx7 on Tuesday October 26, 2021 @11:02AM (#29001256)
You can't. You can find a provider you trust or set them up yourself.
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by dunefox on Tuesday October 26, 2021 @11:02AM (#29001260)
How can anyone verify that?
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by Diti on Tuesday October 26, 2021 @08:42PM (#29008323)
Re:Element One – All of Matrix, WhatsApp, Signal and Telegra... by efreak on Wednesday October 27, 2021 @09:40PM (#29021321)
Reproducible builds allow verifying that your build is correct by rebuilding it It doesn't help you verify that the server you're connected to is running the binary you've been given.