8 ms·
Jami: GNU end-to-end encrypted alternative to Zoom and Jitsi
- saagarjha 7y agoObligatory: has anyone used this before?
- beanjammin 7y agoInteresting, I haven't tried Jami. If I am understanding it correctly it seems to provide calling features, which Zoom and other typical video conferencing type applications don't. I'll also through Jitsi out there as a very capable FLOSS alternative to Zoom. If you tried it a few years ago it's changed dramatically in the last while. It's now WebRTC based and runs in browser without any download. It's not quite end to end encryption because the stream needs to be decoded on the server before being re-encoded for the other clients, but since you can easily self host it on a cheap VM I find this acceptable.
- sk7 7y agoJitsi does not re-encode video streams on the server, it's a SFU (selective forwarding unit) and just forwards (some) video streams to the other participators. When Simulcast is enabled, multiple resolutions of your video are streamed to the Jitsi server and it only sends those streams to clients which they asked for (participants can choose the quality of video they receive, in the UI)
- divbzero 7y agoCan’t WebRTC support peer-to-peer video calls without running the stream through a server? I have vague recollection that it can but am not particularly familiar with the protocol.
- divbzero 7y agoTo answer my own question: Yes, WebRTC supports peer-to-peer video calls but does require a “signaling server” to help establish and close the peer-to-peer connection. [1] [1]: https://www.html5rocks.com/tutorials/webrtc/basics/ https://www.html5rocks.com/tutorials/webrtc/basics/ "Getting Started With WebRTC"
- littlestymaar 7y agoThe signaling server is only useful for the connection initialization though, and it never has access to the video stream, only to metadata (like your IP address, the supported encodings of each party, etc.). And it doesn't even really need to access them: it just needs to forward them from one peer to another, so it could be end to end encrypted. It also needs one or several STUN servers as part of the hole punching scheme, but this one doesn't even exchange anything with anyone, so there aren't many issues here (and you don't need to roll your own: you can use Google's one)
- tincholio 7y agoIt does, but when the number of users is >2, typically you will go through a TURN server.
- prophesi 7y agoI haven't tried it myself, but I saw https://wire.com/ https://wire.com/ linked as an open-source E2E-encrypted alternative during a few of the Zoom articles that have been posted these past few days. I'd love to see if anyone here has any experience self-hosting it, and whether it matches up performance/usability-wise.
- y7 7y agoNote that Wire only supports video conferences for up to 4 parties. https://support.wire.com/hc/en-us/articles/360001019225-Start-a-video-conference-call https://support.wire.com/hc/en-us/articles/360001019225-Star...
- surround 7y agoIn comparison to Zoom and Jitsi: Jami’s major advantages are that it’s end-to-end encrypted and completely peer-to-peer, requiring no server in-between. The major disadvantage is that it doesn’t support calls from the browser. See also: https://jami.net https://jami.net
- Freak_NL 7y agoNot running in the browser is a major downside. I've used Jitsi this past week with technologically illiterate family members, and being able to just have them enter a URL while talking on the phone is really great. Also, being able to just use any OS with a modern browser you please.
- smcleod 7y agoPersonally I don’t want to have my web browser run applications, I’d rather have native MacOS or Linux apps, but I do see how having at least a version of it available in a browse is handy for potability.
- Freak_NL 7y agoDon't get me wrong: I want both to be possible, but being able to just get up and go is really helpful. For a tool like this though I'm not sure what a native app would add. Most of what it does builds on the functionality of a modern web browser.
- wagaf 7y agoModern Web browser don't allow true peer-to-peer, you always need a server. Jami uses a fully distributed network (DHT) to initiate connections.
- dependenttypes 7y agoWebtorrent is a thing though. Is it not true peer-to-peer?
- conradev 7y agoThe marketing website itself seems to be a better resource for information: https://jami.net https://jami.net
- thekyle 7y agoLooks like GNU Ring changed its name to Jami. Also, I already have an GNU Ring account saved in my password manager but can't seem to login (or even find a place to). However, if I try to create a new account using my old username it (correctly) states it is taken.
- r0bbie 7y agoI'm having the same issue. Previously created an account, and I'm completely puzzled how to now log in to it! Seem to have options to create a new account or import a backup..
- y7 7y agoThis used to be called GNU Ring. Wikipedia has some info on features: https://en.wikipedia.org/wiki/Jami_(software) https://en.wikipedia.org/wiki/Jami_(software) I'd be really curious if this is a viable option for videoconferencing for say >10 people.
- oucp 7y agoI'd really be interested in this as well! As Jitsi for example isn't really able to handle many participants apparently: https://community.jitsi.org/t/maximum-number-of-participants-on-a-meeting-on-meet-jit-si-server/22273/20 https://community.jitsi.org/t/maximum-number-of-participants...
- exabrial 7y agoOk stop with the E2EE encrypted. Literally if you're running your own hardware, you don't "Need" E2E. You need to understand your attack surface, your vulnerabilities, and your goals. E2EE is not the optimal use case for everyone and everything.
- surround 7y ago- Zoom does not support self-hosting - Self-hosting Jitsi is not the optimal use case for everyone. People are free to choose between Jami and Jitsi, and it’s great to be able to have different options based upon your use case.
- anilakar 7y agoMost importantly, these one-click-join services are easily accessible by everyone* with a web browser, so switching service providers is a breeze.
- rckoepke 7y agoI could use clarification on this. Lets start with the assumption that I have my own machine/router/cable modem....and I want to talk with my girlfriend, who also uses one of my machines/routers/cable modems that I spec'd, procured, set up, and administrate for her. Would I be wrong to be concerned about the potential for contractors to review private video that was captured/re transmitted by the central servers, e.g. for machine learning training purposes or other "internal" service quality checks? And potentially capturing some of that video if they find it interesting and potentially sharing it anonymously on viral social media? It seems that would be a rare occurrence, but possible. Would end-to-end encryption be an appropriate way to eliminate that risk?
- systemvoltage 7y agoDoes anyone find these names a bit weird? What happened to 80's glorious days where company and product names were super cool. - DynaMax - Ultron - Trinitron - Hypersystems - Logicore - Supra - Intertech - UniversalSystems - NationalTech - Automark - Spectra - Pentatype - PolyMatrix - MicroSpace - RotoCore Now we have things such as Flikr, Waymo, Skype, Jitsi and this thing... Jamo or Jami. :-/ Human race is regressing.
- orev 7y agoFor people to be able to find you on the Internet, you need a Googlable name that has nothing else associated with it.
- systemvoltage 7y agoThat's true, otherwise it gets drowned in the noise. I guess, I was just commenting on the general trend of the way we name things today.
- egypturnash 7y ago“Jami is inspired by a Swahili word that means “community”. The name was chosen as it reflects the vision: to be a service open to all, to be community supported, and to respect the privacy of users.” - https://jami.net/help/ https://jami.net/help/
- systemvoltage 7y agoWhy does a product name have to have a "meaning" behind it? Kodachrome was abstract.
- craftinator 7y agoIt doesn't have to. But it can. This is an example of that.
- 7y ago
- fulafel 7y agoC/C++ implemented custom protocols, no webrtc... What explains these security and compatibility compromises?
- yjftsjthsd-h 7y agoI'd guess that it predates webrtc.
- kelnos 7y agoThe first commit was in late 2004, which was well before WebRTC was a thing.
- mehrdadn 7y agoAside from the anachronism, didn't WebRTC itself have security issues?
- wagaf 7y agoJami uses standard protocols like TLS, x509, SIP, SRTP.. It's actually much more standard-compliant than most alternatives.
- squarefoot 7y agoI just installed on a Debian 10 machine, then on my old Android 6.0.1 junk tablet. No problems on the PC, while the Android one always crashes when attempting to pair with the PC by pointing the camera at the QR code, and adding manually the exported account on the network hangs indefinitely on the "adding account" window. Not a big issue since I don't carry the tablet around, just to let the developers know if they read here.
- lilSebastian 7y ago> just to let the developers know if they read here. Or, raise the issue with them for investigation, since a comment on an unrelated site isn't a reasonable way to provide feedback
- Brian_K_White 7y agoBut it was most convenient for the user. Maybe it's equally fair to lecture developers on reasonable ways to collect feedback.
- lilSebastian 7y agoI didn't lecture anyone. What did you find inconvenient about the existing methods of contact?
- CiPHPerCoder 7y ago> end-to-end encrypted O RLY? https://git.jami.net/savoirfairelinux/ring-client-android/issues/604#note_14329 https://git.jami.net/savoirfairelinux/ring-client-android/is... https://security.stackexchange.com/a/171461/43688 https://security.stackexchange.com/a/171461/43688 I looked through their code to see where data is being encrypted/decrypted, and was unable to locate it. Since their issue indicated they use 4096-bit RSA, I really wanted to see if they were vulnerable to Bleichenbacher's 1998 padding oracle attack. https://git.jami.net/savoirfairelinux/ring-project/wikis/technical/Technical-overview#jami-certificate https://git.jami.net/savoirfairelinux/ring-project/wikis/tec... > The SHA-1 fingerprint (160-bits) of this public certificate is the JamiId. this-is-fine.mp4
- dependenttypes 7y ago> > The SHA-1 fingerprint (160-bits) of this public certificate is the JamiId. I do not see any issue with this.
- tleb_ 7y agoProbably related to this https://shattered.io/ https://shattered.io/
- tptacek 7y agoThe code you were looking for is in the OpenDHT project, which simply calls GnuTLS's gnutls_pubkey_encrypt_data(), which is PKCS1v15. OpenDHT doesn't do anything special with errors from decryption. You'd have to actually set up a test environment to say it was vulnerable with any confidence, though.
- CiPHPerCoder 7y agoThanks Thomas!
- merricksb 7y agoOriginally discussed here 9 months ago: https://news.ycombinator.com/item?id=20311324 https://news.ycombinator.com/item?id=20311324
- jokowueu 7y agoJust realised this is Ring . Wonder why they changed their name
- steerablesafe 7y agoI tried Jami recently and it just doesn't work, I think it has problems with punching through NAT and routing. I would love to see a messenger/audio call/video call app built on the zerotier SDK, I never had connection problems with zerotier.
- hkt 7y agoI've used this while trying to find open source video conferencing solutions and chat applications in the past. It spends significant amounts of time not finding my friends before timing out. As an aside, I don't believe in the virtues of P2P anymore. It's clear to me that centralised systems scale further and faster, and what we need are benign organisations to run them. Legal forms like cooperatives and community benefit societies (nonprofits in the US I guess) are the way forward. I'd choose a community instance of Jitsi as being the best approximation of this for now.
- lambertsimnel 7y agoI share your interest in cooperatives, but not all cooperatives are equal. If we expect cooperatives to provide public interest services that might otherwise be P2P or nonprofit, I think we need a special kind of cooperative. I belong to cooperatives that are politically partisan, that engage in sharp practice, and that aren't as democratic as I'd like. I'd prefer cooperatives to concentrate on treating stakeholders fairly, representing members equally and effectively, and prudent stewardship of their assets. Cooperatives might lose their focus on their main purposes and discourage some non-progressives from becoming members/customers by pursuing too wide a range of progressive causes.
- hkt 7y agoIn the UK we have a legal form called a community interest company. This, owned by a co-op, would probably be the right form.
- wagaf 7y agoEverything has a cost. On the long term, who will pay and maintain the Jitsi server ? How will random people find a trustworthy server ? Jami doesn't need a server.
- hkt 7y agoHonestly, people will pay. They pay for Wikipedia, it is odd that you think they wouldn't pay for something as useful as this.
- mrwesleycrusher 7y agoMaybe it got better, but for the past 6 months a friend and I tried to get this app to work with little success. The messages just DONT FREAKING SEND in a timely manner even when in the same room. Right now we use Briar and are pretty happy with it. There's also signal as a better option. Either way, IMO, Jami sucks.