• 8 Posts
  • 1.14K Comments
Joined 4 years ago
cake
Cake day: June 28th, 2020

help-circle

  • Others are noting clients & servers matter. This isn’t a downside—it’s just that the protocol is flexible & extensible for many types of messaging beyond human2human private conversations, which explains why encryption isn’t a requirement for the clients. With that said any modern client targeting said H2H interaction will have basic forms of encryption like PGP, OTR, & OMEMO which all do the job of E2EE. OMEMO is based on the same ideas that Signal, WhatsApp, Matrix, & so on use so that part is all the same.

    A unique feature for XMPP in this space tho is how low-spec & resource-unintensive the servers/clients are—you aren’t chewing up a ton of CPU or RAM, there is no eventual consistency to balloon storage (MAM is enough), clients don’t drain your battery or take literal minutes to sync with servers. Since it is low-cost, it is feasible to self-host XMPP from a residential server (at home on some old hardware for instance) or add it to a multipurpose machine where it doesn’t get in the way of other processes/storage. Some of the other service often mentioned here either you can’t self-host or are quite expensive to run (often by design) which limits the accessibility causing centralization as well as requiring trust in that server you don’t own.




  • Their brain is certainly smoother to do this. Motivation I mostly hear has to do with network effect, user base. I disagree with this tho since the only way you move that network is to start hosting elsewhere & getting folks used to it (aka be the change you want to see); ‘early adopting’ & momentum in this direction is what drives a new audience to try, collaborate, contribute to these platform some otherwise wouldn’t have tried. You might lose some commits, but others (those banned from the service for US sanctions or philosophically refuse to have an account) now do get access. That might be the smaller pool, but this audience is rarely considered or catered to.

    Even if you want “visibility” or some other marketing term, a compromise would be to have a read-only mirror. But a mirror like this would contain the entire history that would be used to train their AI that they sell back to us.

    One of many reason tho, I have been using Darcs or Pijul over Git in recent times to create yet another barrier to not having code hosted on the Microsoft platform. If Pijul’s Nest supported tarball archives it would be ‘good enough’… & it only supports converting from, not to Git 🤣


  • XMPP doesn’t need notifications per se since it already has a connection to the client. Since it works for all other OSs to hook into this & display a notification, I don’t even want to know what restrictions Apple has on iOS that prevent such basic behavior. Apple digs its own grave here. What’s worse is I want to say “go get a Android phone, dummy” to a ‘normie’ but the stock OS on any Android phone is going to be on aggregate a worse privacy situation unless you would have to be ready to teach how to unGoogle it to the extent they would tolerate.

    Linux phone when?








  • Motal is participating in GSoC this year to get some new features too.

    But this is a wider issue that developing free software for Apple products is way too expensive (time & money) to be feasible while also going against the general free software ethos. It should be no surprise the walled garden of a proprietary OS that charges you to publish to their store has a severe lack of free or otherwise ethical software (which is important for security for something as important as a messaging app full of private data).


  • XMPP clients are fine albeit it all, as many as they are, slightly different as is the nature of the protocol. This just means there is value in contributing to existing clients, creating new clients, or embracing progressive enhancement (which most do for example with emoji reactions just being a quoted text reply & so on) & complete feature parity is a fool’s errand if you want an exensible protocol with diversity & experimentation in the community. With the broad exception of the Conversations Compliance, there isn’t a flagship client & instead the best ideas come to the most used or most innovative clients. I use Cheogram, Profanity, Gajim, Dino, Movim at different times (& would love to create my own). The protocol is stable, healthy, & ready for proposals for improvement.

    If I compare this to the more-expensive-by-all-metrics-to-run Matrix, if it ain’t Element, you gotta problem since a vast majority of users are on it & using all of its features & no other client has anything near parity but are expected to have parity instead of allowing things to sometimes be gracefully missed or shown in a less than ideal manner as acceptable. This hurts experimentation. Good luck trying anything similar to GDPR when all nodes are design & required to duplicate all messages & attachments for all users to every server anyone in it comes from.

    The only real gotcha is the same gotcha as Matrix when using multiple clients with double-ratchet encryption (ala Signal) is that clients will expire keys that haven’t been seen in a while & is hard to get both devices retrusting one another. Turning it off & on again rarely works & requires fiddling on both ends sometimes. I really should just use PGP for encryption more often…







  • toastal@lemmy.mltoMemes@lemmy.mlI hate the IRS 😡😡😡
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    1 day ago

    Baby. Bathwater.

    Not all of the cryptocurrency behave as a Ponzi scheme even if many do. It also happens to be the most convenient way to transfer money between myself & the foreign friends I have—especially with Monero & Zcash hiding the transaction like cash would. I mostly use cash daily but if I have to do it digitally, I would rather it not be logged thru the government, some US-based tech firm, & all their third-party advertizing affiliates as is the case with credit cards and other mobile apps.