@KLISHDFSDF@lemmy.ml avatar

KLISHDFSDF

@KLISHDFSDF@lemmy.ml

This profile is from a federated server and may be incomplete. Browse more on the original instance.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Offline/internal network installs can be handled with flatpak create-usb - docs.flatpak.org/en/latest/usb-drives.html

One can distribute flatpaks along with their dependencies on USB drives (or network shares, etc.) which is especially helpful in situations where Internet access is limited or non-existent.

Cache/mirroring would be great for those who need it.

Edit:

Thinking about it, I wonder if there’s enough “core features” with ‘create-usb’ that its just matter of scripting something together to intercept requests, auto-create-usb what’s being requested and then serve the package locally? If a whole mirror is required, it may be possible to iterate over all flathub packages and ‘create-usb’ the entire repo to have a local cache/mirror? Just thinking “out loud”.

Nostr continues to raise the bar on private, uncensorable online discourse

Note: “relay” is the nostr term while “instance” is the AP/Mastodon/Lemmy term. They are functionally very similar and offer the same abilities to ban annoying users from “public square” type spaces. Moderation works identically....

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Anyone following anyone interesting on Nostr? Tried it for a while and while the tech is cool I felt it was missing a good collection of people. All I ever saw was crypto scams and self referential memes/discussions about how cool Nostr is - which I agree - but that’s not what I’m interested in.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Looks like at least one type can take flight from the ground, although with some difficulty: www.youtube.com/watch?v=kIl_bYFMr8o

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Signal > Matrix/Element > RCS > SMS.

iMessage isn’t in the equation because it only works on a single platform.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

I could settle for this but remove telegram as it’s not even E2EE by default. It’s basically facebook v2.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

There’s a few clients for Signal, nobody is preventing developers from creating apps; there’s Molly, gurk-rs, Axolotl, Flare, signal-cli, Pidgin (with the Signal plugin.

The problem is 3rd party clients don’t implement all features because it takes a lot of work and they’re created/developed by volunteers - just take a look at Matrix and how many clients support all features or even just group end-to-end encryption (E2EE). Last I checked many third party Matrix clients didn’t support encrypted group messages, primarily just Element, the reference client built by the matrix developers. So you have the same problem on Signal that you have on Matrix.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

This is an often repeated piece of misinformation. The developer of gurk-rs, a third party Signal client, has even said this himself. The client presents itself with a completely identifiable name to the Signal servers - the Signal devs can see this and could easily block this client from connecting but they don’t. This project has existed for at least 3+ years now.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

First off, how can you claim RCS "requires you to buy an Android and then state iMessage is "cross platform through Apple’s ecosystem? RCS works on Android and is available in various devices from many manufacturers. iMessage is only available on devices sold by Apple.

Secondly, why would you rate iMessage higher than RCS for “ease of use”? That makes zero sense, they behave basically the exact same way.

Lastly, RCS is coming to iOS - Apple’s just been lagging because implementing a cross-platform solution is detrimental to their profits.

So RCS will eventually work across iOS and Android AND work by default. There’s no reason RCS wouldn’t be easier or rated higher than iMessage in terms of “ease of use”

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

In Matrix a direct chat is a group chat with two people.

You’re right, I forgot how Matrix handled messages and the current state is that there’s are at least 6 other clients that support E2EE - this is awesome.

That said, as soon as you look for a stable client that supports other features like Native 1:1 calls and Threads the only client listed is Element, check here: matrix.org/ecosystem/clients/

Side note: Looks like ~3 years ago a Fluffychat dev stated they would not implement E2EE in the app [0], this must have been around the time I was looking at other clients because I recall this one “looking” the best and might be viable for non-techy people to use/recommend. I’m glad they changed their mind and implemented E2EE. Time to take a look at it again.

[0] gitlab.com/KrilleFear/fluffychat/-/issues/25#note…

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Private messages on Matrix have been end-to-end encryption (E2EE) by default since 2020 - matrix.org/…/cross-signing-and-end-to-end-encrypt…

For anyone considering Telegram for privacy:

  1. Telegram doesn’t default to encryption. All your messages are stored and can be viewed by anyone with enough privileges on Telegram’s infrastructure.
  2. Telegram’s “secure” 1-1 messages are limited to the point of being useless and not worth using. It’s a dark design pattern created to discourage their use, ensuring you give them all your data.
  3. Telegram doesn’t support E2EE group messages.

TL;DR - Matrix is more private than Telegram.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

It was introduced two years ago: element.io/…/introducing-native-matrix-voip-with-…

Looks like at least two other clients support 1:1 calls.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

What’s wrong with Briar? briarproject.org

Censorship-resistant peer-to-peer messaging that bypasses centralized servers. Connect via Bluetooth, Wi-Fi or Tor, with privacy built-in.

I think the reason these apps don’t take off is the compromises they make in order to work the way they do. When you do need them, you best hope you’re able to get them and get others to use them as well.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

For anyone considering Session messenger:


The Session developers dropped Perfect Forward Secrecy because it would be hard to work around it.

First things first, let’s talk about what we’re leaving behind: Perfect Forward Secrecy (PFS) and deniability.

Source: getsession.org/session-protocol-explained

In plain English, they dropped a security feature for their convenience to the detriment of their users’ security.

For anyone unsure what PFS provides:

The value of forward secrecy is that it protects past communication.

Source: en.wikipedia.org/wiki/Forward_secrecy

The Session devs also claim:

Session provides protections against these types of threats in other ways — through fully anonymous account creation, onion routing, and metadata minimisation, for example.

Reading between the lines, we can interpret that as introducing security through obscurity, which is generally considered bad practice - cwe.mitre.org/data/definitions/656.html

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

so between eating a shit sandwich or being driven off a cliff and potentially dying, you’d chose death? honestly the dumbest take I’ve heard in a while. thanks for the laugh, I guess 🤡

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

your attitude/personality is ugly. do better.

New to Linux? Ubuntu Isn’t Your Only Option (www.howtogeek.com)

Ubuntu’s popularity often makes it the default choice for new Linux users. But there are tons of other Linux operating systems that deserve your attention. As such, I’ve highlighted some Ubuntu alternatives so you can choose based on your needs and requirements—because conformity is boring.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

out of the loop since I’ve moved to debian and been using flatpak for the last few years, what software are you installing via PPA that isn’t generally available via flatpak?

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

for those not familiar, this basically lets you run command line tools. anything with a GUI will not work.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Because they get your profile picture, name, and email address when you click accept. I went through with it just to test, but definitely getting some data from its users.

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

Not necessarily.

Signal has people who are experts in their field. They engineer solutions that don’t exist anywhere else in the market to ensure they have as little information on you as possible while keeping you secure [0]. This in turn means high compensation + benefits. You don’t want to be paying your key developers peanuts as that makes them liable to taking bribes from adversaries to “oops” a security vulnerability in the service. In addition, the higher compensation is a great way to mitigate losing talent to private organizations who can afford it.

[0] Signal has engineered the following technologies that all work to ensure your privacy and security:

KLISHDFSDF,
@KLISHDFSDF@lemmy.ml avatar

You’re right, but security and privacy is about layers, not always 100% effective mitigations, especially not when the mitigation is a function (contact discovery) that requires a private list (your contacts) be compared against another one. For anyone where this is an actual security risk, they don’t have to to share their contacts. They will not know which of their friends/family are on Signal, but they can still use the service.

This feature does protect users in that any legal court order for Signal to present who is friends with who (as almost every other messaging provider has actual access to your list of contacts) is not possible. They’ve been subpoenaed multiple times[0] and all they can show is when an account was created and the last day (not time) a client pinged their servers.

Lastly, I’m not sure if this is even a feature or not but it wouldn’t be too difficult to introduce rate-limiting to mitigate this issue even more. As an example, its very unlikely that most people have thousands (or even tens of thousands) of people in their contacts. Assuming we go just a step beyond the 99th percentile, you can effectively block anyone as soon as they start trying to crawl the entire phone number address space, preventing the issue you’re describing.

[0] signal.org/bigbrother/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • fightinggames
  • All magazines