Salta al contenuto principale


Unpopular opinion: the silver lining in server outages is that they pull the curtain & reveal some hard truths about who is really behind some services we use... especially stuff we think are alternatives to Big Tech (spoiler: maybe they aren't).

Case in point: last year's #Microsoft outage took out #DuckDuckGo (mashable.com/article/microsoft…).

Today's Amazon's AWS outage took out #Signal in some areas: mastodon.world/@Mer__edith/115…

Oh my, is this time to convince my family & friends to move to Matrix? 🥲


PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.

reshared this

in reply to Elena Rossini ⁂

Amazon took out Flickr as well. I know it's a photography site for boomers but here we are.

status.flickr.net/

in reply to Elena Rossini ⁂

definitely, I installed concur #matrix server on my RPI and try to convince family and friends..
in reply to Elena Rossini ⁂

As you say, and I've just migrated all my friends and family to Signal ... it's been a whirlwind of SMS for the last few minutes 😅
in reply to Elena Rossini ⁂

: or run your own #XMPP server (e.g., Prosody).
I set up my very private one for my family: secure, light, fast, open source.
#XMPP
Questa voce è stata modificata (3 settimane fa)

Roberto Resoli reshared this.

in reply to Fabio Pani

@fabiux
I also used my own xmpp server for my family. But I switched back to signal because xmpp client doesn't crypt data on client devices.
SimpleX is easy to use like signal and is decentralized (with tor relay). I tried it since weeks but I don't have my family for now. It's hard to make people switching over and over.
The big cons about Signal is it is centralized so it has a single point of failure and can be easily censor.
in reply to Thomas Bourdon

@thomasbourdon
They **are** truly E2EE with several clients (such as Conversations.im or Monocles Chat) if you enable OMEMO or OTR.
Am I wrong?
in reply to Fabio Pani

@Fabio Pani @Thomas Bourdon @Elena Rossini ⁂ indeed, all of the recommended xmpp clients (for regular chat¹) support omemo, including conversations, dino-im, gajim, monal and more

¹ xmpp is also used for different applications (IoT, internal communications, etc.) where requirements may be different, and there are clients that are suitable for those, but those are usually not what people mean when talking about xmpp in these contexts.

in reply to Fabio Pani

@fabiux ... especially when it is very easy to provide an additional XMPP server to your existing Webservice like Mastodon. There is also a auth-mastodon.py script for Ejabberd by @mike, so that you can login to XMPP with your credentials from Mastodon.
I've been running that for years now on nerdculture.de without problems.

Zeppe reshared this.

in reply to Fabio Pani

@fabiux what security features are u using when ur ports are open and how do u limit so that the instance cannot access anything else in ur network, like how did u isolate it?
in reply to Hierarchy

@Hierarchy
To give more info of this kind means to lower security of my system.
Anyway, I'm very confident about my instance because:
- default config system of my server is top-level;
- my instance doesn't connect with anyone else (since private and for my own usage).
in reply to Elena Rossini ⁂

I'm a techie. I recently tried Matrix. I find it so clunky. Non-techies will hate it and abandon it. I'll keep pushing Signal to family and friends.

#Microsoft #DuckDuckGo #Signal

in reply to Elena Rossini ⁂

Element X is the new version of Element that will replace the current version. It's more polished than Element. My family is using it without issue. It's not feature complete, but it's still a great improvement. If you have some time, I'd suggest to give it a try.
@worldwidewerner
in reply to Elena Rossini ⁂

i do understand your point, but sometime there is also not much alternative for some services, such as AWS. Considering Signal relies on donation, they have to walk a thin line between affordable and ethical.
I struggled to get most of my contact to move to Signal, that is super easy to set up and identify contacts. Matrix would be far too much of a learning curve for most.
People loading on Meredith’s message re AWS also do not do any good, imo.
Unknown parent

mastodon - Collegamento all'originale
Elena Rossini ⁂
@g7s I hear you! I managed to convince SO MANY PEOPLE to install Signal in 2020 so we could keep chatting... all my family and friends groups have been in Signal for 5 years. They would yell at me if I said: "now let's move over to Matrix". Plus I'm not a fan of Element 😭
@g7s
in reply to Elena Rossini ⁂

well, I think both cases are also valid for using these services.

There not really any non big tech alternatives to MS / AWS cloud stuff out there yet, but Duck and Signal added A LOT of privacy ALREADY until then. Utopia is still far, but we get closer.

in reply to Elena Rossini ⁂

@g7s

Plus, Matrix is a lot less secure than Signal is.

We might see a decentralised version of Signal one day - the fork Molly is already working on it (Flatline).

@g7s
in reply to Elena Rossini ⁂

have you seen nextcloud.com/talk/ before?
in reply to Elena Rossini ⁂

Perhaps it is a sign that humans should go back to the nornality, because they are gone way too far in this digital madness.
I read few researchers some weeks ago. What they write is frightening. They checked those young generations living in the EU and almost 34% of them can not properly write something by using their hands. Another twenty is already acting like the digital junkies. Take them phones away and you will get same effects like by the drugs.
Where the heck humanity is going?
in reply to Elena Rossini ⁂

There is a tradeoff in everything. Having something decentralized is cool, but Signal just checks sooo many other boxes, that I can accept that they are hosted on AWS in the US.
Their encryption is top notch, so it doesn't really matter where the data is stored (and in the case of signal, they don't even store anything for long).
Plus the app is pretty easy to use for everyone and also used by enough people to make it a viable option for the masses.

Matrix on the other hand is decentralized but has so many other pitfalls and issues that I can't recommend it to anyone that's non-technical.

in reply to Elena Rossini ⁂

what's about switching to Telegram?
I know there is a cost upfront but worth every penny.
in reply to Elena Rossini ⁂

me neither. That's why I'm using FluffyChat as my client.
A self-hosted server is a must.
Questa voce è stata modificata (3 settimane fa)
in reply to Elena Rossini ⁂

My matrix experience is bad and hard to get people to feel at home on.
But #deltachat wow wow wow.
People are surprised by the ease and functionalities of delta chat.
So i'll recommend to push for that, instead of matrix.
in reply to Elena Rossini ⁂

All the apps and tools have really been a kicker, compared to the "signal+riseup pad"-combo.
And multiple profiles and som sim-login. Really nice.
in reply to Elena Rossini ⁂

DuckDuckGo is a relative alternative: infrastructure is from Microsoft, data from Bing, and advertising is delivered by the Microsoft network (so: money fuels Microsoft cash flow).
duckduckgo.com/duckduckgo-help…

reshared this

in reply to Elena Rossini ⁂

The Cloud is back to the 1960s, someone's elses server / single point point of failure.

I wrote a book examining it set in a fantasy. The technology bits are real.
corvidspress.com/fiction/other…

in reply to Elena Rossini ⁂

Facts are often unpopular, that's why alternate realities are conjured up.
in reply to Elena Rossini ⁂

if you do not want to use a service hosted on aws, by all means, do not use signal. however, if you want high confidence that your private communications remain private, use signal, not matrix. 🤷
in reply to Elena Rossini ⁂

its already hard enough to convince one person to switch to signal, i think im just gonna start speaking in riddles via sms
in reply to Elena Rossini ⁂

I don't think #matrix is good for family and friends, I recommend #DeltaChat for that use case, it is much more user-friendly and simple for family and friends, registration is painless, just set a name and avatar, no private information needed, no passwords, no captcha, no SMS codes, etc.

and it has good multi-device multi-profile support

Questa voce è stata modificata (3 settimane fa)
in reply to adb

@adbenitez
"I don't think matrix is good for family and friends"

It's pretty good actually, can specifically recommend FluffyChat, very simple UI, you don't even need an avatar

of course multi-device, multi-profile, web client, etc. and no SMS codes or private info necessary

@adb
in reply to kitkat

@kitkat the avatar part is optional in Delta Chat as well ofc 😅

about fluffychat yeah, just installed it, first thing I am asked is to register a new account in matrix.org, Delta Chat onboarding is much easier

in reply to Elena Rossini ⁂

Well, AFAIK, ddg uses bing as their primary index.

Actually, the incestuous relationship with Microsoft has been commented on, e.g. ddg protects against anything BUT Microsoft.

Not really news.

in reply to Elena Rossini ⁂

Matrix as a protocol is broken. Personally, I consider it harm reduction for public, federated group chats rather than a tool for private communications.

One of the reasons Signal choose Big Tech cloud services is because they are less likely to be censored. It is not ideal, but it is still a solid service… when the servers are operational.

If you want to selfhost an alternative, while security-wise there's none, you should have a look at XMPP. If you still use Yunohost, Prosody (an XMPP server implementation) should be there. For clients, you have Conversations on Android (which can also work as a UnifiedPush distributor) and Monal on iOS; just make sure OMEMO (the Signal-based encryption) is enabled by default.

Questa voce è stata modificata (3 settimane fa)
in reply to Elena Rossini ⁂

if only there was a Matrix server implementation that worked reliably and wasn't a pain in the ass to maintain
in reply to Elena Rossini ⁂

True independence costs a lot… so much for that then…
Questa voce è stata modificata (3 settimane fa)
in reply to Elena Rossini ⁂

Just wait until you discover the whole "FOSS hosted on Microsoft Github" wormhole! e.g., DeltaChat

Microsoft uses GitHub as a means to steal FOSS code snippets without following their licensing requirements for its AI, COPILOT, which also feeds ChatGPT.

in reply to Elena Rossini ⁂

@Elena Rossini ⁂ in my experience¹ self/community hosting an xmpp serivce is much easier² and requires significantly less resources than hosting one's own matrix server, and people I know who use both tell me that the user experience is better on xmpp.

¹ quite a bit of xmpp experience, much less on matrix
² I'd put it in the same category as hosting a static website (running an http server on a bare system, not a managed one), and easier than hosting a fediverse instance.

in reply to Elena Rossini ⁂

As much as I love self hosting, I will never get my friends or family on board with matrix, it's too weird and unfriendly even for me. Maybe a self-hosted #mattermost or #nextcloud chat?
in reply to Elena Rossini ⁂

Bookmark this thread which has a good discussion on security and anonymity when using #signalapp vs #matrix
in reply to Elena Rossini ⁂

Everything* is on AWS. Big companies get huge discount and small companies/ startups can take advantage of people’s knowledge. In the last 10 years I worked for companies with millions of users and startups with (pretty much) no users, always on AWS.

* for a good approximation of everything, I guess someone is using Azure too, and a couple of luddites and niche companies use datacenters…