this post was submitted on 10 Sep 2023
27 points (100.0% liked)
Free and Open Source Software
17932 readers
2 users here now
If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Hey, thanks for taking the time to reply!
I’m still not sure that moving our trust from a megacorp (as you put it) to some random person or organization running a Matrix server is an improvement. Even assuming the Matrix server admins aren’t selling your data out the back door, there’s no guarantee their admin accounts, or the server itself, isn’t compromised by those same corporations or others, allowing them to harvest all your data (and potentially more of your data than would be possible if you were using at least some of these services natively).
I respect that you have your opinion, but I’m not sure it makes sense to move trust from one organization/corporation to another is guaranteed to be an improvement.
From a security perspective, Signal seems to be brought up the most in these conversations, so I am surprised that you called it out between WhatsApp and Discord. Do you have any evidence that the Signal foundation is spying on its users, selling their data, or that the E2EE they natively employ is compromised?
Hi! I‘m pretty sure we are misunderstanding each other. At least partly.
What I‘m saying is that meta for example has evidently sold and leaked userdata far and wide (and paid a joke of a fine for it compared to the estimated earnings). So honestly, I‘d rather join a crack dealer‘s social media than this one.
Because you‘re assuming someone compromises a fediverse server (which is open source and issues are fixed together with hundreds of bright minds), while meta is a closed system and source which evidently does not need to be compromised (also evidently has happened) to do you harm. I think you’re reaching while I have evidence. Can you see that?
I didn’t bring up signal since I don’t have a lot of experience with it (used it a couple times but no ongoing relationships), thats all. I heard that some people say they‘d be spying, which I don’t know about and I‘m not gonna assume but they are closed source and for profit, which the fediverse is not (technically, matrix is not federated afaik but I use it the same as the others so it feels like the fediverse to me).
Whatsapp i brought up since it also is actively spying on you (i may have formulated it wrong or easy to misunderstand) and the same goes for instagram (and threads).
So, as I said: if someone uses whatsapp or discord, matrix makes sense imo while its not an insane improvement (imo) from signal. Same goes for telegram btw. I have no knowledge what they are or arent doing so I wont warn anyone about them. For meta I have enough evidence to suggest burning all bridges that lead there.
Thanks for being so polite btw. I appreciate it.
Same to you regarding the politeness, I’m appreciating the conversation!
I’m with you regarding Facebook Messenger and even (to a more limited extent) WhatsApp Messenger. Their motivation is to provide the cheapest ways possible to keep you engaged with their platform so they can collect as much data about you as possible to sell. That is their reason for existence, essentially. Whether that trade off is worth it to the individual user is up to them, and I have decided it is not worth it for me.
Where I’m getting confused is with your characterization of Signal. It is neither closed source, nor is it a for-profit company. It is a non-profit organization whose mission is "to develop open-source privacy technology that protects free expression and enables secure global communication.". The app they built leverages end-to-end encryption, and you can find their source code here.
I will be honest, I feel Signal is the closest I’ve found to a FOSS, E2EE messaging solution that has a chance at some adoption by people who aren’t technology enthusiasts. It makes some compromises to achieve that - the fact that your account must be associated with a valid phone number is a point of frustration for privacy advocates, and it isn’t perfect when it comes to anonymity in some ways - but it is encrypted. It seems to favor security over anonymity, which is something with which I have seen the average user be able to get onboard.
Given the ease of use and security of Signal, it leaves me even more confused as to where some of the competitors differentiate themselves in ways that would make most people are likely to adopt them.
Whoops! Now that really was news to me. I default to closed source for profit and this was the first time I got it completely wrong. Sorry and thanks for correcting me.
But I already told you I have no knowledge of signal. So I guess my fault was to jump to this conclusion when prompted.
But now I have to ask. How does the backend of signal work? I just saw the frontend/client to download but I cant remember there being servers. How do you find your grandma on signal? That must be going to some kind of server, right? Also, signal got hacked at some point and lost 10k+ phone numbers of users which is unfortunate. And there is the benefit of matrix again. You can host your own server with your 10 friends and as long as you update regularly, you‘re a very bad target (small and up to date).
I think matrix is absolutely not at the stage where you can compare it to something as polished as signal. I just checked wikipedia and they made 8 digits a year. So, I get that they‘re not making billions and not selling data but people „work“ there in stark opposition to matrix (bar element). I‘ll say that signal is probably a very good product and overall trustworthy. Although I have to say that it’s not a competitor to discord, unlike matrix. Which was my actual claim.