7 ms·

Signal always left a bad taste in my mouth. It's fundamentally built on the requirement that to have conversations with any trusted individual, I need to, for n

Signal always left a bad taste in my mouth. It's fundamentally built on the requirement that to have conversations with any trusted individual, I need to, for no obvious reason, also incorporate and trust a 3rd party individual, who won't even use their real name, and did some shady crypto currency integration. Matrix is so so much better in that regard. I can communicate without any 3rd party needing to be trusted. The areas where I need a "3rd party" (the server and client code) are effectively diluted by the fact that thousands of eyes pore over it. Rather then trust in a single person (Marlinspike), instead I just have to trust the person I'm actually talking to. And the Matrix team have done nothing to make me question their motives.

chitowneats 4y ago
- Smaug123 4y ago
  What did they move on to?
  - deleted 4y ago
    [deleted]
- deleted 4y ago
  [deleted]
poisonborz 4y ago
"I won't trust an individual who won't even use a real name" That's the hard privacy-killing argument of corporations. And only cultural change can help it.
- newaccount74 4y ago
  Funny thing is you can't use Signal without revealing your phone number. So much for privacy.
  - baq 4y ago
    ...and they tell all your contacts that you've created an account. super bad. anyway, I hear they're working on it.
    - anjbe 4y ago
      Not your contacts, but everyone [already using Signal] who has you as a contact. To remove that functionality would be equivalent to removing the ability to look up if a Signal message can be sent to a particular number. At least as long as phone numbers are used as the sole identifier for Signal accounts—another decision that has been debated into the ground, of course, but was done for understandable reasons.
      - baq 4y ago
        yes, thanks for the correction. that is mostly a UX problem, not a technical problem: people are surprised that signal tells others that they created an account, and this isn't a pleasant surprise IME. doubly so (more, actually) if you've got a stalker who has your phone number.
        aaaaaaaaata 4y ago
        I've even had people start arguing with me as if I'd created the new conversation on their Signal list.
      - ComodoHacker 4y ago
        That would also remove the ability to easily transfer your existing social graph, which would kill adoption. You don't actually have any other choice if you target for mass adoption.
  - niel 4y ago
    You're confusing privacy with anonymity.
  - atoav 4y ago
    Privacy != Anonymity If you live in a village where everybody knows each other what happens inside your house can be private even if everybody knows you live there. The other way around you could be at a nightclub in a big city where nobody knows you and do the most i timate stuff publicly (but protected by anonymity). Of course if you have privacy and anonymity what you do will have even stronger protections, which could be especially useful in the internet, where the biggest part of our conversations is not ephemeral but persists. But to defend Signal here, this is actually something you could choose with their disappearing messages.
heywoodlh 4y ago
I am a Matrix user -- I run a homeserver primarily for bridging my other services into one chat application -- and I am a Signal user. I have found that Signal strikes a good enough balance with E2EE that I can easily recommend Signal to anyone -- I do not find the same to be true of Matrix. While I believe Matrix to be a better choice for freedom and privacy I do not see it as a good option for non-technical users. Even for technical users I feel it can be very confusing to use unless you are already familiar with the Matrix ecosystem, jargon, etc. With Matrix, the overhead to manage sessions and your security is much higher than Signal. Sure, it's unfortunate that you have to place some trust in Signal, but it's far less confusing than having to manage your own sessions. In my subjective and probably biased experience, Signal feels as easy as iMessage but still provides greater privacy than most other platforms (not Matrix, obviously). I really like Matrix for myself and for dev communities. But I have a hard time seeing a future where Matrix becomes a mainstream personal messenger until the experience feels a bit more hands-off for non-tech users.
- alx__ 4y ago
  100% agree. Matrix is great and while it took a bit to setup everything I liked the direction it's going. Started using Beeper which is built on top of the Matrix protocol. Even with this nice abstraction app, there were several steps to set up and then connect to the various bridges they have. They're still very much a beta product.
  - dmix 4y ago
    Can these problems be solved with a good UX developer in Matrix? Or is it more fundamental to the platform? (I havent had the chance to try it yet)
- woojoo666 4y ago
  > with Matrix, the overhead to manage sessions and your security is much higher than Signal. Isn't Signal just as tricky to manage if you want to have multiple sessions?
  - 4y ago
mainframed 4y ago
You don't have to trust a 3rd party. Just compare your security codes IRL or through another trusted channel. Without doing that, you can never be sure if there is a MITM attack. Not with Signal, not with Matrix, not with WhatsApp. EDIT: MITM may not be the best description, let's say: "you cannot be sure, that you talk to the correct person."
jeroenhd 4y ago
The problem with Matrix (compared to Signal) is the huge amount of unencrypted metadata your average Matrix conversation will generate. I'm not versed well enough in network theory to decide if that's a consequence of federation or if it's just an oversight. I'm also not enjoying the wasted bandwidth of base64 encoding binary data in JSON, the encryption is inherently wasteful to make it easier to use for web developers. I do prefer the ideas and concepts of the Matrix ecosystem, but Signal does privacy better in pretty much every way except for them requiring a phone number.
- pflanze 4y ago
  > huge amount of unencrypted metadata your average Matrix conversation will generate Do you have more details on this? Matrix being distributed of course will not "tumble" everything through a single service, sure, is that what you mean or other issues?
  - Arathorn 4y ago
    Matrix servers store the conversation history for their local users. The message contents (for e2ee rooms) are e2e-encrypted. The metadata (which user sent it where and when and to who) is not currently encrypted or obfuscated. We're working on addressing this in the context of P2P matrix (as per https://arewep2pyet.com https://arewep2pyet.com).
  - jeroenhd 4y ago
    I dont really consider it too much of a problem but there are unique identifiers in plaintext for (almost?) every message to make federation and E2EE work. If an 3ncrypted, federated room receives a message, its participants need to know what key to use for decryption and in some cases what specific device ID was used to request the right keys. What I find particularly strange is that my messages also contain the event identifier a message is a reply to outside the E2EE envelope, as well as the message type for example. If you can get your hands on a database, you can find reply messages and see the messages part of threads without having to decrypt anything. I'm not entirely sure why the server would need this information, perhaps for making notifications work efficiently? You can see this for yourself if you enable dev mode in Element, hold/right-click a message and hit "show source". You can also compare that to the result of "show deceypted source". All of this metadata is being transmitted over HTTPS, of course, unless you're using some local devices setup. It's not literally plaintext but the envelope stored on the server contains much more message details than Signal's.
sneak 4y ago
There is nothing shady about the integration of MobileCoin with the Signal client. You may not like MobileCoin (or perhaps not like cryptocurrencies in general) but to call it "shady" is inaccurate.
- COGlory 4y ago
  It was pre-mined. That is the very definition of shady.
  - nileshtrivedi 4y ago
    And the integration was built-in secret (no commits on Github for over a year) to maximize the profit from pre-mining.

chitowneats 4y ago

Smaug123 4y ago
What did they move on to?
- deleted 4y ago
  [deleted]
deleted 4y ago
[deleted]

poisonborz 4y ago

"I won't trust an individual who won't even use a real name" That's the hard privacy-killing argument of corporations. And only cultural change can help it.

newaccount74 4y ago
Funny thing is you can't use Signal without revealing your phone number. So much for privacy.
- baq 4y ago
  ...and they tell all your contacts that you've created an account. super bad. anyway, I hear they're working on it.
  - anjbe 4y ago
    Not your contacts, but everyone [already using Signal] who has you as a contact. To remove that functionality would be equivalent to removing the ability to look up if a Signal message can be sent to a particular number. At least as long as phone numbers are used as the sole identifier for Signal accounts—another decision that has been debated into the ground, of course, but was done for understandable reasons.
    - baq 4y ago
      yes, thanks for the correction. that is mostly a UX problem, not a technical problem: people are surprised that signal tells others that they created an account, and this isn't a pleasant surprise IME. doubly so (more, actually) if you've got a stalker who has your phone number.
      - aaaaaaaaata 4y ago
        I've even had people start arguing with me as if I'd created the new conversation on their Signal list.
    - ComodoHacker 4y ago
      That would also remove the ability to easily transfer your existing social graph, which would kill adoption. You don't actually have any other choice if you target for mass adoption.
- niel 4y ago
  You're confusing privacy with anonymity.
- atoav 4y ago
  Privacy != Anonymity If you live in a village where everybody knows each other what happens inside your house can be private even if everybody knows you live there. The other way around you could be at a nightclub in a big city where nobody knows you and do the most i timate stuff publicly (but protected by anonymity). Of course if you have privacy and anonymity what you do will have even stronger protections, which could be especially useful in the internet, where the biggest part of our conversations is not ephemeral but persists. But to defend Signal here, this is actually something you could choose with their disappearing messages.

heywoodlh 4y ago

I am a Matrix user -- I run a homeserver primarily for bridging my other services into one chat application -- and I am a Signal user. I have found that Signal strikes a good enough balance with E2EE that I can easily recommend Signal to anyone -- I do not find the same to be true of Matrix. While I believe Matrix to be a better choice for freedom and privacy I do not see it as a good option for non-technical users. Even for technical users I feel it can be very confusing to use unless you are already familiar with the Matrix ecosystem, jargon, etc. With Matrix, the overhead to manage sessions and your security is much higher than Signal. Sure, it's unfortunate that you have to place some trust in Signal, but it's far less confusing than having to manage your own sessions. In my subjective and probably biased experience, Signal feels as easy as iMessage but still provides greater privacy than most other platforms (not Matrix, obviously). I really like Matrix for myself and for dev communities. But I have a hard time seeing a future where Matrix becomes a mainstream personal messenger until the experience feels a bit more hands-off for non-tech users.

alx__ 4y ago
100% agree. Matrix is great and while it took a bit to setup everything I liked the direction it's going. Started using Beeper which is built on top of the Matrix protocol. Even with this nice abstraction app, there were several steps to set up and then connect to the various bridges they have. They're still very much a beta product.
- dmix 4y ago
  Can these problems be solved with a good UX developer in Matrix? Or is it more fundamental to the platform? (I havent had the chance to try it yet)
woojoo666 4y ago
> with Matrix, the overhead to manage sessions and your security is much higher than Signal. Isn't Signal just as tricky to manage if you want to have multiple sessions?
- 4y ago

mainframed 4y ago

You don't have to trust a 3rd party. Just compare your security codes IRL or through another trusted channel. Without doing that, you can never be sure if there is a MITM attack. Not with Signal, not with Matrix, not with WhatsApp. EDIT: MITM may not be the best description, let's say: "you cannot be sure, that you talk to the correct person."

jeroenhd 4y ago

The problem with Matrix (compared to Signal) is the huge amount of unencrypted metadata your average Matrix conversation will generate. I'm not versed well enough in network theory to decide if that's a consequence of federation or if it's just an oversight. I'm also not enjoying the wasted bandwidth of base64 encoding binary data in JSON, the encryption is inherently wasteful to make it easier to use for web developers. I do prefer the ideas and concepts of the Matrix ecosystem, but Signal does privacy better in pretty much every way except for them requiring a phone number.

pflanze 4y ago
> huge amount of unencrypted metadata your average Matrix conversation will generate Do you have more details on this? Matrix being distributed of course will not "tumble" everything through a single service, sure, is that what you mean or other issues?
- Arathorn 4y ago
  Matrix servers store the conversation history for their local users. The message contents (for e2ee rooms) are e2e-encrypted. The metadata (which user sent it where and when and to who) is not currently encrypted or obfuscated. We're working on addressing this in the context of P2P matrix (as per https://arewep2pyet.com https://arewep2pyet.com).
- jeroenhd 4y ago
  I dont really consider it too much of a problem but there are unique identifiers in plaintext for (almost?) every message to make federation and E2EE work. If an 3ncrypted, federated room receives a message, its participants need to know what key to use for decryption and in some cases what specific device ID was used to request the right keys. What I find particularly strange is that my messages also contain the event identifier a message is a reply to outside the E2EE envelope, as well as the message type for example. If you can get your hands on a database, you can find reply messages and see the messages part of threads without having to decrypt anything. I'm not entirely sure why the server would need this information, perhaps for making notifications work efficiently? You can see this for yourself if you enable dev mode in Element, hold/right-click a message and hit "show source". You can also compare that to the result of "show deceypted source". All of this metadata is being transmitted over HTTPS, of course, unless you're using some local devices setup. It's not literally plaintext but the envelope stored on the server contains much more message details than Signal's.

sneak 4y ago

There is nothing shady about the integration of MobileCoin with the Signal client. You may not like MobileCoin (or perhaps not like cryptocurrencies in general) but to call it "shady" is inaccurate.

COGlory 4y ago
It was pre-mined. That is the very definition of shady.
- nileshtrivedi 4y ago
  And the integration was built-in secret (no commits on Github for over a year) to maximize the profit from pre-mining.