• 1 Post
  • 8 Comments
Joined 7M ago
cake
Cake day: Dec 04, 2023

help-circle
rss

I’ve did some more digging.

and Briar still remain better at security level !

The big downside of SimpleX is that it’s not P2P and IP correlation by watching your traffic is possible.

SimpleX recommend to use Tor on top of it with for example Orbot. That’s a good idea, but not the best to convince none-tech folks to adopt it. (it’s already so hard to change peoples habit… ) Tor should be embedded.

As soon Tor is embedded I will migrate to it. SimpleX have nice thought features and it’s easy to use.



Thank you very much @jet@hackertalks.com & @Quexotic@beehaw.org

The EFF article is really interesting for everyone. ( I was aware of this )

Indeed no one should assume that his packets are not intercepted along the road. But conceive an software that on top of that, specifically route the traffic trough his server not make it better (on the opposite in my opinion)

Even if the owner of those server do not process the data… ( This is relying on blind trust) those servers might be breached. (in addition to the systemic data recording, like in the EFF article )

Let put it simple, is SimpleX offer on the actual Internet (can’t wait the next gen, GNUnet or anything similar) a similar level of Trust & privacy than Briar ?


A little update.

I’ve just tested simplex on Android.

it’s very well thought out ! The features make sense. UNFORTUNATELY it’s not P2P ! all the messages pass by their servers :'( with Briar it’s P2P… weirdly they claim their way is better than P2P ! any comment on that ?

In my point of view, if messages are stored somewhere it’s mean the can be process[1] !

Cheers.

edit: lemmy link to their community !simplex@lemmy.ml


  1. Copied, analyzed, cracked (Brut force or what ever) ↩︎


jami’s good but it uses turn server to verify your name

So is it secure ? does that mean you rely on those server to be able to created an account ?


Though android only.

Anyway on Windows, Apple there is no sense to have a privacy apps if the OS it self pump everything it can.

And on Android it only make sense if you use an AOSP rom, or another but without the google crapware…


I think your mistaken… Can someone confirm ?

So I was eager to test Jami, but on Windows it require Windows 10… so no way --> https://itvision.altervista.org/why-windows-10-sucks.html

anyway I gave a quick try on a test machine (win10) But I got , not matter what I entered

Too bad because it had on paper, a lot of nice features…

On linux, too bad they don’t provide (yet) an AppImage…


no ! thanks ! look promising too.

I’ll try it and give my review… but is it require to make a “jami” account on their server !??


Privacy minded instant messaging quest.
Hi, I'm looking for an instant messaging ( IM ) ~~apps~~ software/protocol that run on Android and computer and meet the following requirements : - Open source ! - [E2EE](https://en.wikipedia.org/wiki/E2EE) - Messages are send in direct ! (not passing by a server) - handle group - Truly private ! ( That's the tricky part )   The closest that I've found is [Briar](https://briarproject.org) - \+can work without internet ! (bluetooth, local wifi, files !) - \+ use [TOR](https://en.wikipedia.org/wiki/Tor_(network)) - \- Mutual party have to exchange key (or your can introduce someone) - \- sending media suck for now, poor image quality - \- no call or voice messaging   I've been looking for alternatives: - ~~[Session](https://getsession.org)~~ - Sadly it keep ALL the conversation into server !!! so it's a no go. - [speek](https://speek.network) - I didn't try it yet, any feedback ? - [simplex](https://simplex.chat) - it look very promising ! (didn't tried it yet) - \+ seem to handle multiple profile in one ! - \+ do not require that both party send an invitation ! - and have also a [optional long term address](https://simplex.chat/docs/guide/making-connections.html#comparison-of-1-time-invitation-links-and-simplex-contact-addresses) - ~~! I didn't found (yet) if the messages are send in direct or pass by a server..~~ \ It's not P2P all the messages pass by servers.. too bad. All post about alternatives or experience with the one that I cited are welcome.
fedilink