News for hackers. Stuff that matters.
Re:Matrix 2.0: The Future of Matrix by sneak on Thursday September 21, 2023 @02:32PM (#37601944)
One of the big problems as I see it is that all notifications on iOS must be proxied via APNS and those can only be sent by the app publisher, so all home servers must send their iOS notifications to Vector (the Element publishers) to be sent to APNS and on to an iPhone or iPad.

This is a centralized point for surveillance of metadata. I also do not know how much information is actually contained in the notification itself. In any case Vector has knowledge of every home server with an iOS client, and their approximate traffic levels.

Re:Matrix 2.0: The Future of Matrix by Aerbil313 on Thursday September 21, 2023 @04:20PM (#37603702)
Then everyone should just roll out their own app… this seems like an EU-regulation-needed situation.
Re:Matrix 2.0: The Future of Matrix by sneak on Thursday September 21, 2023 @04:58PM (#37604243)
This requires paying about $10/month to Apple and doxxing yourself with a lot of PII.

It also requires that you as a homeserver sysadmin a) have a Mac, b) install Xcode, c) know how to modify and compile iOS applications, d) want to deal with rebuilding and reuploading and re-seeking app approval on major API changes because long-un-updated apps are not allowed in the App Store, etc...

Re:Matrix 2.0: The Future of Matrix by inhumantsar on Thursday September 21, 2023 @07:23PM (#37605819)
Security, Convenience, and Speed will always be in constant tension.

If you start by assuming that a perfect solution will always be unattainable, deciding on what tradeoffs are acceptable becomes easier.

Imho it almost always going to be worth trading the large PITA of self-managing APNS infra for the small surface area that routing push notifications through Elements systems.

Re:Matrix 2.0: The Future of Matrix by sneak on Thursday September 21, 2023 @08:22PM (#37606297)
This comment makes it seem like Apple's anticompetitive stance on sideloading is a basic force of nature instead of something dreamed up by control freak hippies and implemented deliberately in code.

The problem is iOS's privacy-hostile design (in service of their locked down revenue model), not some unbreakable iron triangle.

On Android, messaging apps can run in the background and periodically talk to their homeserver without an intermediary.

Re:Matrix 2.0: The Future of Matrix by brokenmachine on Sunday September 24, 2023 @11:46PM (#37639492)
Agree 100% about Apple being anti-consumer, but the Android thing is not quite that simple.

Background tasks on Android can pretty much be killed at any time. I believe only apps with a persistent notification and the native google notification service can remain active at all times. But yes, they can connect to any server while they are running.

Re:Matrix 2.0: The Future of Matrix by sneak on Friday September 22, 2023 @09:37AM (#37611909)
> Imho it almost always going to be worth trading the large PITA of self-managing APNS infra for the small surface area that routing push notifications through Elements systems.

Once you're going to push encrypted data through a centralized service, you might as well just run Signal and skip running the homeserver too.

Re:Matrix 2.0: The Future of Matrix by Arathorn on Friday September 22, 2023 @04:07PM (#37617075)
Push in Matrix doesn’t contain data; it’s just a wakeup to tell the client to sync a given room & message id.