News for hackers. Stuff that matters.
Re:Telegram Ad Platform by timeimp on Monday November 08, 2021 @12:39AM (#29146384)
Here's hoping there will be a way to pay for no ads.

But a question to HN: why have we not seen a mass-market adoption of a P2P, non-centralised messaging system that requires no external services to work?

Mesh and other sorts of networks are cumbersome and have not reached mass-market adoption, so what (technically) is stopping a true E2E P2P platform?

Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @12:58AM (#29146452)
> so what (technically) is stopping a true E2E P2P platform?

The fact that nobody really wants a true p2p platform: you don't want to lose all your stuff if you lose the device. It is clear that federated services like email are superior for most users bar some real hardnuts mindfixed on privacy.

Re:Telegram Ad Platform by lxgr on Monday November 08, 2021 @08:21AM (#29148958)
> The fact that nobody really wants a true p2p platform: you don't want to lose all your stuff if you lose the device.

Why not provide encrypted backups to a personal cloud storage service? Even WhatsApp does it these days.

Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @10:45AM (#29150440)
I don't mind you doing it and showing us how it should be done.

Ah, btw, how will a true p2p platform work on iOS? What entity will send you push notifications when there are messages for your device?

Re:Telegram Ad Platform by lxgr on Monday November 08, 2021 @11:51AM (#29151211)
End-to-end encrypted backups? Like this, for example (I personally don't trust the HSMs/password scheme, but it's optional): https://engineering.fb.com/2021/09/10/security/whatsapp-e2ee...

True P2P on iOS: No idea, I merely claimed that a lack of backup options is not the reason we don't have it.

Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @12:29PM (#29151712)
It's not just the lack of backups. It's a world of constant pain and worry about your only device, security keys, and safe storage and transfer of your data. Forgot password? Get new account. Lost a key? Get new account. Want to open your messages in a browser from a desktop computer? Welcome to a world of pain. Your device switched off? Then nobody can send you messages, because in 'true p2p' there are no relay servers who would store the data, waiting for you to connect.

In practice, nobody wants any of that. The vast majority of users are perfectly happy (and for the right reasons) with federated and centralised services like email or WhatsApp/etc.

Re:Telegram Ad Platform by agentdrtran on Monday November 08, 2021 @12:04PM (#29151394)
You are welcome to start this service at any time. It is a colossal technical undertaking. Good luck!
Re:Telegram Ad Platform by decrypt on Monday November 08, 2021 @12:42AM (#29146397)
Matrix is working on a P2P system. Last update that I am aware of is the one here, but there are likely newer updates:

https://matrix.org/blog/2020/06/02/introducing-p-2-p-matrix/

Personally, I would like to use Briar on my Tailscale network, but the lack of Briar desktop app and the need to build custom Briar app to support Tailscale interface is a blocker. Or, a self-hosted Signal app.

Re:Telegram Ad Platform by 0xy on Monday November 08, 2021 @02:02AM (#29146699)
Matrix is, unfortunately, a UX catastrophe compared to Telegram.

Telegram has the best messaging app by UX and it's not even close. It's fast, reliable and it just works.

Try getting your mother to use Matrix. Verifying sessions of chat participants is such a disgusting user experience I wonder if they employ /any/ graphic or UX designers.

Re:Telegram Ad Platform by IceWreck on Monday November 08, 2021 @03:43AM (#29147274)
I agree. Telegram's UX is unparalleled.

Coming to Matrix, the Element Web/Desktop app is ugly and has bad UI/UX. Its unintuitive to use. Fortunately, you have tons of choices with Matrix. Cinny on desktop has a very neat and clean UX.

On Android, the Element app is good enough, but if not Fluffychat feels just like WhatsApp.

Re:Telegram Ad Platform by nsotelo on Monday November 08, 2021 @03:06AM (#29147031)
Matrix is an open protocol and anyone's welcome to build a front-end, inspired by Telegram, that your mother would be happy using.

Perhaps you meant the Element client?

Re:Telegram Ad Platform by 0xy on Monday November 08, 2021 @05:13AM (#29147789)
I'd wager you cannot build a Telegram-tier frontend using Matrix technology. Element is evidence of that.

Clearly there's an axis with security on one side and convenience on the other. Tilting fully to either side results in a terrible experience. For me, Telegram strikes the perfect balance. Secure chats have fantastic privacy, while the UX isn't totally garbage. The trade-off is that chats are non-E2EE by default.

Signal's has the axis tilted all the way to the "security" end, so that the product is unusable if you aren't a technical expert already.

Could your mother figure out how to encrypt an email message using GnuPG? Absolutely not a chance.

Could she figure out how to send a message on ProtonMail that encrypts it client-side for her? Probably.

Signal is GnuPG. Telegram is ProtonMail.

Re:Telegram Ad Platform by MayeulC on Monday November 08, 2021 @07:55AM (#29148782)
> Signal's has the axis tilted all the way to the "security" end, so that the product is unusable if you aren't a technical expert already.

Wow, I really disagree with this statement.

> Could your mother figure out how to encrypt an email message using GnuPG? Absolutely not a chance. [...] Signal is GnuPG.

My parents are not technical people, yet they can use Signal. My siblings as well. I think the UX is approximately on par with WhatsApp (when I was using it).

They have done a great job when it comes to UX. Ultimately I would like to push them towards Matrix, but the UX is not here yet for most clients. Fluffychat comes close to it, unfortunately I'm experiencing issues logging in with my account (timeouts), so I can't recommend it yet.

Re:Telegram Ad Platform by tentacleuno on Tuesday November 16, 2021 @06:02AM (#29239147)
> Signal's has the axis tilted all the way to the "security" end, so that the product is unusable if you aren't a technical expert already.

Sorry, just to confirm: are you saying Signal has worse UX than Element?

Re:Telegram Ad Platform by jakecopp on Monday November 08, 2021 @06:16AM (#29148172)
> Signal's has the axis tilted all the way to the "security" end, so that the product is unusable if you aren't a technical expert already.

How so?

What's wrong with Element's UX? It's improved an awful lot lately.

Re:Telegram Ad Platform by tentacleuno on Tuesday November 16, 2021 @06:05AM (#29239171)
It's slow, very resource intensive on desktop, practically unusable on mobile, you sometimes can't join rooms and the client tells you some weird obscure Matrix error, you sometimes can't leave rooms, the moderations tools are quite poor, etc. etc. etc.
Re:Telegram Ad Platform by vadfa on Monday November 08, 2021 @04:26AM (#29147533)
This is the kind of gotcha that is not a real argument, just a way to say that the mediocrity of the Matrix (or Element, or Potato, whatever you wanna call it) is okay so no progress is ever made.
Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @04:08AM (#29147421)
Matrix is not a protocol, it's a product. Its openness is more like a public API to a product developed by one organization.

Disclosure: I work with real open protocols.

Re:Telegram Ad Platform by networkimprov on Monday November 08, 2021 @01:12PM (#29152265)
Could you define "real open protocol" vs "public API"?

If the former entails an adopted RFC, isn't it common practice to prove need via a product before proposing a standard?

Asking because I'm at work on a safer, decentralized protocol for email, TMTP.

Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @01:36PM (#29152551)
Real open protocols are ones not coming from a single vendor / not controlled by a single entity. XMPP and email are open protocols, Matrix, Mattermost and RocketChat are not.
Re:Telegram Ad Platform by networkimprov on Monday November 08, 2021 @03:44PM (#29153975)
Didn't XMPP originate with a single vendor? And JMAP? Didn't SMTP also originate in the field?

Are you saying that the Matrix authors won't submit an RFC?

Re:Telegram Ad Platform by Arathorn on Monday November 08, 2021 @04:50PM (#29154716)
Speaking as Matrix project lead: we'd love to submit an RFC (or W3C proposal) once Matrix has sufficiently stabilised. Right now it's moving very fast though (e.g. we're about to totally change the sync API so that it's O(1) rather than O(N) with number of conversations).

In terms of contributions to the Matrix spec; from a quick eyeball at https://spec.matrix.org/unstable/proposals/, there are 95 different authors, of which 31 work for Element (the company formed by the original team who created Matrix). Or to slice it another way, there are 498 spec change proposals there, of which 358 were written by folks at Element (so 70%). Meanwhile the protocol itself is defined by the independent and neutral Matrix.org Foundation non-profit (https://matrix.org/foundation).

In other words, accusations that Matrix is entirely defined or controlled by Element are untrue - by the time we created Element there was already significant contribution from the wider community, and these days there are loads of other individuals and companies like Beeper, Famedly and even Ericsson contributing to the spec.

Edit: oh, and Rocket.chat is adopting Matrix too, which refutes the GP comment even more...

Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @06:47PM (#29155868)
We all know that 'independent matrix foundation' will never oppose the will of the leading vendor. Don't tell me about how you agree to everything in your wonderful community, tell me how you resolve conflicts?

You and your company has all the leverage and no sane independent developer will invest in your protocol because he'll always have to play the catch up game.

Re:Telegram Ad Platform by Arathorn on Wednesday November 10, 2021 @10:17AM (#29175489)
An example of resolving conflicts is something like MSC2962 (https://github.com/matrix-org/matrix-doc/pull/2962) and MSC3216 (https://github.com/matrix-org/matrix-doc/pull/3216). Two proposals to solve the same problem, different ways. The first one was written by me; the second one was written by joepie91, who's a completely independent community member. Doesn't get much more of a direct conflict than this.

So, to resolve it, the spec core team (which is a mix of element employees and community members) went through the two proposals to compare them and concluded that joepie91's approach is better. So we're about to kill off MSC2962 and merge MSC3216 into the spec instead.

Please stop with all the disinformation - it'd be way more constructive to invest your energy into improving XMPP than trying to make Matrix out to be evil.

Re:Telegram Ad Platform by Andrew_nenakhov on Wednesday November 10, 2021 @04:00PM (#29180697)
What you cite is not a conflict. It is a mild disagreement about the development of new features. A real conflict is when you have different entities with different implementations, and diverging views on how to develop the protocol, and the stake for the losing party is to abandon their investment in their existing implementation and starting over from scratch.

However, I already have the answer on how you plan to deal with such conflicts, you've said it yourself [1]. I'll quote:

> The idea on Matrix is that you say "Hi, I talk Matrix CS API 0.4" and be done with it - and you end up with much more social pressure to keep up to date with the current latest spec, because otherwise you are simply falling behind

If we say it in a less courteous manner, "Once we introduce changes, your independent implementation will be cut off from our network, and if you'll need several more months to implement changes, well, tough luck".

You see, I'm not saying Matrix is evil. It's a rather developed product, just like Mattermost or Flock. But a federated protocol it is not. Please stop advertising as such, and I'll have nothing to say about it.

[1]: https://news.ycombinator.com/item?id=19421978

Re:Telegram Ad Platform by skinkestek on Monday November 08, 2021 @07:42AM (#29148710)
Have you told this to the German Army and the French Police?

Because they seem to like it and, based on my experience with the military being able to run it independently is a major consideration for them even for smaller systems.

Re:Telegram Ad Platform by Andrew_nenakhov on Monday November 08, 2021 @09:42AM (#29149727)
So what? Selling to such organizations tells more about the salesmen skills than actual merits of a product. For example, a lot of bigger and even more important organizations use Slack or Microsoft Teams, because a product they are sold works and does what they need.

On-premise software is nothing new. But the fact that some software can run on-premise and can interoperate between instances does not mean that it is a protocol. Mattermost can do that, is it a federated protocol too?

Re:Telegram Ad Platform by LogonType10 on Monday November 08, 2021 @01:08AM (#29146501)
Is it federated or P2P? I don't think I can message someone on Matrix without an account on someone's federated server.
Re:Telegram Ad Platform by chayleaf on Monday November 08, 2021 @01:34AM (#29146593)
just read the article at the link...
Re:Telegram Ad Platform by fabianhjr on Monday November 08, 2021 @01:04AM (#29146477)
There are many P2P chat/instant message platforms but they are very niche.

For example: https://cabal.chat/

There isn't a way to monetize an open P2P protocol, or even a "captive user base" to sell to VCs for a cash exit so not a lot of development has been done on that area. (And I would be highly skeptical of any "blockchain" P2P Chat proposal)

Re:Telegram Ad Platform by seanieb on Monday November 08, 2021 @03:24AM (#29147149)
A talk by Moxie at CCC deals with this exact question.

> “ Considerations for distributed and decentralized technologies from the perspective of a product that many would like to see decentralize.

> Amongst an environment of enthusiasm for blockchain-based technologies, efforts to decentralize the internet, and tremendous investment in distributed systems, there has been relatively little product movement in this area from the mobile and consumer internet spaces.

> This is an exploration of challenges for distributed technologies, as well as some considerations for what they do and don't provide, from the perspective of someone working on user-focused mobile communication. This also includes a look at how Signal addresses some of the same problems that decentralized and distributed technologies hope to solve.”

https://youtu.be/DdM-XTRyC9c

Re:Telegram Ad Platform by throwaway2077 on Monday November 08, 2021 @01:43AM (#29146622)
>so what (technically) is stopping a true E2E P2P platform?

technically nothing. even email kinda fits the bill if you squint hard enough.

realistically though, the vast majority of population will always gravitate towards streamlined workflow provided by centralized services, and the rest of us are dragged along.

Re:Telegram Ad Platform by KoftaBob on Tuesday November 09, 2021 @05:18AM (#29159794)
I've been wondering the same thing for a while. The closest iteration of this I've come across so far is Session (https://getsession.org)

It routes messages through an Onion/TOR-like network of nodes that others volunteer to run. In return for running those nodes, they generate the Oxen cryptocurrency, similar to how mining Bitcoin works.

This way, it's not fully centralized like WhatsApp/Telegram/etc, but also solves the issues of devices directly communicating, like what happens when the app isn't running on the phone.

Re:Telegram Ad Platform by golergka on Monday November 08, 2021 @01:56AM (#29146668)
Is there a P2P messaging service that allows you to save all of your messaging history (including media files) in the cloud, sync it through different devices and search it instantly, even when it's not downloaded on your device?
Re:Telegram Ad Platform by swiley on Monday November 08, 2021 @12:08PM (#29151435)
Apple doesn't like them. We already have: XMPP (with E2EE) Mumble IRC Email Mastodon etc. Apple makes it very hard to publish smartphone apps for these.
Re:Telegram Ad Platform by ackbar03 on Monday November 08, 2021 @01:25AM (#29146563)
My understanding is p2p doesn't really work in the true sense? Almost everyone is behind routers these days and ipv4 is still the main addressing system. Forwarding servers are needed. Skype used to be p2p based but had to be centralized after purchased by Microsoft cause of quality issues so its also centralized, although there were some theories about the nsa getting involved and what not
Re:Telegram Ad Platform by AYBABTME on Monday November 08, 2021 @12:41AM (#29146394)
There's probably someone thinking of doing this on some blockchain of sort. In a way, you'd literally pay per use... !
Re:Telegram Ad Platform by medion on Monday November 08, 2021 @02:54AM (#29146964)
Yes, there must be a blockchain solution to this? Can anyone comment on functioning blockchain solutions (if any?)?
Re:Telegram Ad Platform by MzHN on Monday November 08, 2021 @01:39AM (#29146609)
Re:Telegram Ad Platform by lpcvoid on Monday November 08, 2021 @05:08AM (#29147748)
Electron desktop client instantly disqualifies it as a Telegram Desktop competitor. Telegram Desktop is probably the best example of how desktop software should be built.