Conversation

Notices

1. Embed this notice
   Prav App (prav@venera.social)'s status on Thursday, 21-Aug-2025 22:04:43 JST Prav App

   Our SMS OTP service is backed by Twilio and our account balance is currently running low. We need to recharge 20 USD (approx 1800 Indian rupees) balance immediately!

   To give you an idea, SMS expenses were 80 USD for the last year.

   We would like to request you to help us cover our costs by donating to us at opencollective.com/pravapp/pro…

   Thank you!

   #XMPP #FreeSoftware

   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Thursday, 21-Aug-2025 22:04:42 JST 翠星石

     in reply to
     @prav Have you considered just using OTP that doesn't require proprietary software and SaaSS like TOTP?
   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Friday, 22-Aug-2025 20:26:49 JST 翠星石

     in reply to

     • Pirate Praveen
     @praveen @prav None of this stuff seems to be free software.
     
     I try to visit https://opencollective.com/pravapp/projects/hosting-and-sms. and it says "Enable JavaScript and cookies to continue" - access to the site is denied without execution of proprietary software.
     
     It's a severe freedom and privacy defect for an XMPP client to require tying the account to a phone number - there are plenty of XMPP servers where you just pick a nickname and a password and there's no problems.
     
     The solution to your expenses problem is to stop immorally doing the wrong thing and remove the requirement of a phone number.
   • Embed this notice
     Pirate Praveen (praveen@social.masto.host)'s status on Friday, 22-Aug-2025 20:26:56 JST Pirate Praveen

     in reply to

     • 翠星石

     @Suiseiseki @prav We can use that only as two factor authentication after sign up. One core requirement of Prav is to offer same phone number based on boarding experience like WhatsApp, Telegram or Signal, for that we should be able to verify the phone number ownership.

     We might be able to use it for later 2fa use case after account is created, even then being able to verify they still control the phone number is crucial in this path. Other #xmpp providers could try other 2fa strategies.

   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Saturday, 23-Aug-2025 13:53:10 JST 翠星石

     in reply to

     • Pirate Praveen
     @praveen @prav >definitely free software.
     >link to github, where you cannot contribute without running proprietary software
     >discord.
     >proprietary CoC that sublicenses MIT expat.
     This software required to access the opencollective website is proprietary; https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
     
     Arbitrarily remote executed JavaScript is always proprietary, no matter the license, as the user doesn't have the 4 freedoms over it.
     
     It's proprietary software.
   • Embed this notice
     Pirate Praveen (praveen@social.masto.host)'s status on Saturday, 23-Aug-2025 13:53:11 JST Pirate Praveen

     in reply to

     • 翠星石

     @Suiseiseki @prav Open Collective is definitely #FreeSoftware https://github.com/opencollective/opencollective/ has the source code for Open Collective service. You just chose to use librejs limitation to decide something is Free Software or not. #LibreJS only works for simple websites and it is wrong to blindly trust the output of LibreJS. Many people make this same mistake.

   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Saturday, 23-Aug-2025 14:01:22 JST 翠星石

     in reply to

     • Pirate Praveen
     @praveen @prav Having to use different software to have freedom is clearly quite telling.
   • Embed this notice
     Pirate Praveen (praveen@social.masto.host)'s status on Saturday, 23-Aug-2025 14:01:23 JST Pirate Praveen

     in reply to

     • 翠星石

     @Suiseiseki @prav Why do we have to insist every one has to make exactly same choices as ourselves ? Yes, tying #xmpp id to phone number has some problems, but why are we afraid of giving choices to people? Nobody is forced to use #Prav to talk to other Prav users. People who don't want to use phone number can just use another xmpp client like Mobocles Chat. xmpp and federation is about choices, not forcing our preferences on everyone.