Conversation

Notices

1. Embed this notice
   Yogthos (yogthos@mas.to)'s status on Tuesday, 27-Aug-2024 07:07:53 JST Yogthos

   in reply to

   • Dr. Quadragon ❌
   • Artёm

   @krom @drq I have bad news, Matrix also appears to be a metadata harvesting bananza

   https://web.archive.org/web/20210804205638/https://serpentsec.1337.cx/matrix

   https://hackea.org/notas/matrix.html

   https://github.com/libremonde-org/paper-research-privacy-matrix.org/blob/master/part1/README.md

   • Embed this notice
     :verified_2:防空識別區𝒔𝒐𝒄𝟶 (adiz@soc0.outrnat.nl)'s status on Tuesday, 27-Aug-2024 07:07:53 JST :verified_2:防空識別區𝒔𝒐𝒄𝟶

     in reply to

     • Dr. Quadragon ❌
     • Artёm

     @yogthos@mas.to I use XMPP these days. @krom@fosstodon.org @drq@mastodon.ml

     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     Artёm (krom@fosstodon.org)'s status on Tuesday, 27-Aug-2024 07:07:54 JST Artёm

     in reply to

     • Dr. Quadragon ❌

     @drq @yogthos matrix.org 😅

   • Embed this notice
     Artёm (krom@fosstodon.org)'s status on Tuesday, 27-Aug-2024 07:07:55 JST Artёm

     in reply to

     • Dr. Quadragon ❌

     @drq @yogthos joining #matrix:matrix.org took 2 roughly seconds. Nothing special for the MUC of 62K people.

   • Embed this notice
     Dr. Quadragon ❌ (drq@mastodon.ml)'s status on Tuesday, 27-Aug-2024 07:07:55 JST Dr. Quadragon ❌

     in reply to

     • Artёm

     @krom What is your homeserver?

     @yogthos

   • Embed this notice
     Dr. Quadragon ❌ (drq@mastodon.ml)'s status on Tuesday, 27-Aug-2024 07:07:56 JST Dr. Quadragon ❌

     in reply to

     @yogthos Just to play Devil's advocate:

     What are the alternatives?

     XMPP might be, but they haven't been able to get their shit together for a decade and a half regarding... well, everything. Jabber is in shambles, especially regarding E2EE:

     https://soatok.blog/2024/08/04/against-xmppomemo/

     Matrix just has awful protocol design that crumbles under its own weight. Don't believe me? Try visiting #matrix:matrix.org.

     So... We're kinda screwed, aren't we.

   • Embed this notice
     Yogthos (yogthos@mas.to)'s status on Tuesday, 27-Aug-2024 07:07:57 JST Yogthos

     While Signal messages might be e2e encrypted, people tend to forget that the platform collects phone numbers of its users, which can be used to identify people.

     This makes Signal an effective metadata collection tool that resides on a central server in the US.

     By cross-referencing these identities with data from other companies like Google or Meta, the government can create a comprehensive picture of people's connections and affiliations.

     #signal #privacy

     🧵