News for hackers. Stuff that matters.

driminicus

Re:Jitsi.org has started requiring authentication on Wednesday August 30, 2023 @01:04AM (#37317886)
They host their own jitsi instance.
Re:Seriously, Don't Sign a CLA on Tuesday July 04, 2023 @02:51PM (#36591069)
> In this way, I will be legally able to loosen the license over time if I so wish. Without CLA's for customers, I couldn't do that.

Or you can make it poprietary, which is the exact reason I would not want to sign a CLA with you, because I want a guarantee that my contribution remains foss.

Re:Berty: The privacy-first messaging app on Monday November 21, 2022 @07:27AM (#33691766)
Matrix is working on a P2P version, there have been a few demos but it's currently still very much WIP. See also https://arewep2pyet.com/
Re:WhatsApp goes down for users globally on Tuesday October 25, 2022 @05:05AM (#33328042)
It is not a matrix client. I haven't dug too deep into their system, but it looks to me like a centralized server with additional steps (ie. still a single entity owning the server infrastructure)
Re:Matrix was worth the effort to self host on Monday September 19, 2022 @10:03AM (#32898458)
Closest thing would be either XMPP or matrix. Whether either of these is good enough for your usecase is up to you.
I would indeed suggest bitwarden. Mostly because I believe that this type of security critical software needs to be open source to be trustworthy.
Encryption in transit is assumed, and rightfully so. That still means that telegram gets full access to the plaintext and as such is able to give that information to anyone, and do with it as they wish.

I suppose there are some people pit there that think "unencrypted" here means everyone can listen in, but certainly not the hackernews crowd.

Re:How Swipe Typing Works on Sunday April 10, 2022 @01:59PM (#30979754)
Anysoftkeyboard (https://anysoftkeyboard.github.io/) has swype as, though in beta. I currently switch back and forth between ASK and florisboard.
Re:SpeedCrunch on Thursday December 23, 2021 @02:20PM (#29665401)
This looks cool! I have been using qalculate (https://qalculate.github.io/) recently, which seems similar. Has anyone used both and can tell me how they compare?
Re:Sign in with Matrix on Tuesday November 16, 2021 @02:26PM (#29245247)
Matrix does actually support OAuth (in fact, the mozilla.org matrix server can only be logged in to through OAuth)
Re:Sign in with Matrix on Tuesday November 16, 2021 @09:34AM (#29240955)
We are actually working on fixing the password sending issue, see for instance https://github.com/matrix-org/matrix-doc/pull/3262

Of course, untrusted clients can do all kinds of evil things after having authenticated. (And also clients still need the plaintext password at least client-side no matter what we do)

Re:Conduit Beta – Matrix chat server on Thursday September 02, 2021 @02:49AM (#28389337)
There is currently no transition path from synapse to conduit. That's not to say it's impossible, there is just no work put into it, yet.
Re:Google Messages end-to-end encryption is now out of beta on Wednesday June 16, 2021 @04:59AM (#27526398)
IIRC matrix was started because of how terrible RCS is.
Re:Fastly Outage on Tuesday June 08, 2021 @09:20AM (#27434771)
When it goes away you can try teddit.net
Re:Using GDPR to obtain one’s data as JSON on Monday May 10, 2021 @09:45AM (#27105912)
Unethical to use your right to access your data? Interesting take.
Beeper seems to be doing a pretty decent job with a unified messenger. Though I don't think it does email (yet?)
My $employer is still on skype for business. I usually liken the choice between SkypeFB and teams between having a broken leg (Skype) or a stubbed toe (teams).

Of course given this binary choice I would prefer a stubbed toe, but can we just move to something that is actually pleasant? Thanks!

Given this bridge moving to element seems like a no-brainer for anyone on teams.

Re:Netflix considers crackdown on password sharing on Friday March 12, 2021 @05:55AM (#26434368)
Yeah, I pay for a few streaming services, but sometimes I find myself pirating content that is actually available on one of those streaming services, because it's just easier. That's generally not a great sign I would think.
Re:How we hosted FOSDEM 2021 on Matrix on Monday February 15, 2021 @01:16PM (#26145387)
You ran in to rate limiting, which can be configured in synapse.
Re:Session Protocol: Technical implementation details on Friday January 08, 2021 @04:41PM (#25690874)
Yet another closed source, centralized ostensibly private chat client? If it actually gets a decent user base it should probably be bridged, but otherwise I don't really care.
Re:Signal AMA on Reddit on Friday January 08, 2021 @04:28PM (#25690752)
The matrix signal bridge is pretty great too!
Re:GnuCOBOL 3.1.1 on Friday December 11, 2020 @09:58AM (#25386470)
Sounds like high praise to me
Re:Librem 5 Evergreen vs. Pinephone on Tuesday December 08, 2020 @03:00AM (#25343015)
I understand that the camera can be an important feature of a smartphone for some people, but I for one, don't care about it at all above a certain "eh, good enough" threshold, that is currently easily met by any smartphone. If I want to take good pictures, I use an actual camera, with a proper lens.

All this to say: you can't always serve everyone.

The cloud "just" uses davx5, which you can ignore, or use to sync to your own nextcloud server, or you can create an account on their nextcloud instance.

I obviously use my own nextcloud.

Some mircrog stuff is enabled by default, which means it does allow apps to talk to Google for eg. push messages. It's not much work to disable, though.

Re:Using Matrix to replace proprietary and centralized chat apps on Saturday November 14, 2020 @12:00PM (#25093559)
Current implementation uses a server, though you can fairly easily host your own, or find another server to your liking.

There is significant work being done to get matrix working p2p too, though. There is a demo of it, but it's not production ready. See https://p2p.riot.im/

Re:Using Matrix to replace proprietary and centralized chat apps on Saturday November 14, 2020 @10:51AM (#25093008)
There actually has been work done on it, partially by me.

Unfortunately it's simply an unsolved problem to properly federate the 3pid mappings. The long and short of it is that you need to find some way to prove to other identity servers that you properly verified a 3pid. That's theoretically possible with e-mail and DKIM, except there are too many e-mail servers that don't implement it correctly.

For phone numbers it's even worse.

[edit] I forgot: There is a working implementation of federated identity servers for e-mail, but that requires you to run an identity server on the domain of the e-mail address that you're trying to add as 3pid. That means it works fine if you host your own e-mail but it doesn't work for the gmails and hotmails of this world.

Re:P2P Matrix on Wednesday June 03, 2020 @02:34AM (#23400566)
Note that the matrix.org hosted turnserver only provides STUN if you use it as fallback, which means that if you need a relayto reliably connect it won't work.
Re:A list of FOSS apps for Android on Tuesday May 12, 2020 @03:58PM (#23158947)
Somehow the G-droid dev doesn't like some decisions the F-droid team makes, and paints them in a fairly bad light.

What's going on here is that F-droid always links to the source code, which will typically lands you on the readme of the github repo. Adding a link as 'website' to the same location was deemed redundant, so the links were removed.

Re:Cross-signing and end-to-end encryption by default on Friday May 08, 2020 @03:24AM (#23112259)
Those research papers are written by a person that is (was?) making a hostile fork of the protocol. That is not to say everything in there was wrong, but it was blown out of proportion from my perspective.

Also: they are fairly old by now, and most complaints that have merit have been addressed.

Older »