News for hackers. Stuff that matters.
Re:Upcoming coordinated security fix for all Matrix server i... by lowwave on Thursday July 17, 2025 @09:30AM (#44593199)
Thank you for bring this (conduit) up!!! Nothing beats a binary and toml/json/yml file deployment!!!

And it is what great about the matrix.org vs other open source app such as Telegram/Signal/Wire.... The protocol was designed to be open. If you don't like the client, write one, if you don't like the server, write another. Just follow the API specification. Being it is REST it is much easier to decipher than IMAP/SMTP. And port 443 works every where! Even on proxied Internet!!

Re:Upcoming coordinated security fix for all Matrix server i... by immibis on Thursday July 17, 2025 @01:45PM (#44596024)
The specification is so complex that keeping up with it is a full-time job - which benefits the Element Corporation, which profits from selling their complex server and client and also makes the specification. Just have a glance at the concept of room versions.
Re:Upcoming coordinated security fix for all Matrix server i... by Arathorn on Thursday July 17, 2025 @07:31PM (#44599502)
room versions are just a much-needed way of versioning the protocol, so we can make breaking changes without being trapped with backwards compatibility problems - no different to a fileformat including a version number. it’s one of the best bits of Matrix, imo, albeit sorely misunderstood (it seems).
Re:Upcoming coordinated security fix for all Matrix server i... by immibis on Friday July 18, 2025 @05:48AM (#44602861)
IRC doesn't have this because it doesn't try to make rooms into long-running distributed state machines.

Although it is possible for two room operators to kick each other on different servers at the same moment, which probably does lead to state desync. They'd have to do it at the same moment. In Matrix, it tries to still sync things that happened 6 months ago...

Re:Upcoming coordinated security fix for all Matrix server i... by immibis on Sunday July 20, 2025 @10:14AM (#44625393)
On second thought, I think it would lead to both operators being kicked - a nonserializable ordering. Each server would independently check the action was authorized based on the prior state, and would then broadcast into the network, not "op1 wants to kick op2", but rather "op1 did kick op2". Users on op2's server would see that op2 kicked op1, and then op1 kicked op2, despite no longer being in the channel or being a channel operator. This seems acceptable, although counter-intuitive.
Re:Upcoming coordinated security fix for all Matrix server i... by Klonoar on Thursday July 17, 2025 @01:57PM (#44596155)
Conduit is a bit slow to update over the years, and a few forks have improved on it quite a bit; continuwuity being chief among them at the moment.

Yeah I hate the name too.

Re:Upcoming coordinated security fix for all Matrix server i... by JadedBlueEyes on Saturday July 26, 2025 @04:44PM (#44696801)
Hey, one of the Continuwuity team here - the name was a bit of a placeholder we picked as we were setting up the project, and we are open to changing it if we find something that fits the project and is a step up. Please join our Matrix rooms if you have a suggestion or more in-depth feedback, or want to participate in any polls we might run.