• 2 Posts
  • 234 Comments
Joined 4Y ago
cake
Cake day: Jun 28, 2020

help-circle
rss

Dongles create additional & unnecessary points of failure in your setup (sometimes additional stress on the USB jack too which is usually your only I/O port (which is also making you choose charging or power)). Personal devices that play media need this standard jack that has existed for decades—& I refuse to play ball with these OEMs hurting customers.


And that is exactly what I am running—and without regret since the OEMs are screwing over users just to sell branded Bluetooth earbuds whose batteries will die & not be repairable in a year for you to buy another set. I will not participate in this.


Which of these smart phones lets me have a headphone jack… ’cause that is how I will choose. I can patch software & be wary about how I use the device, but I can’t just add I/O to the hardware. Until the Pixel brings back the jack, it is dead to me.


That’s good too. Not a Monero hater or a Zcash fanboy—I just think we need to be honest about the capabilities even if the methods of getting there are different.


It does add a level of convenience for the type of transaction you might want to actually be tracked all being on the same currency. Most don’t even offer the option. Zcash can do the thing—it’s just not the only way.


Shielded addresses & transactions are private using zero-knowledge proofs like Monero. You can also have transparent addresses & transactions like how Bitcoin operates on Zcash as well which is true. But there isn’t a default, some wallets autoshield by default making your comment misinformation.



Linux, Capyloon, KaiOS… kinda don’t care so long as it isn’t controlled by some US megacorporation


XMPP + OMEMO & Mumble for chat, offline maps from OSM, self-hosted feed aggregator

NixOS, OpenWRT, LineageOS for microG, but would like to remove Android from my line up.


Sounds like you need a browser tho. UnifiedPush & MQTT work without a browser with WebPush support.


I still want to know if MQTT already did this & UnifiedPush is just a startup trying to reimplement the same concept



Sony is still carrying the torch for flagships



Additionally LineageOS for microG which rolls the microG stuff into the ROM which saves a lot of work/frustration when trying to unGoogle a device. Any device that is officially supported by LineageOS will have builds which can’t be said for many other ROMs.


But not friendliest on IO. No headphone jack. No microSD. No dual SIM.



Weren’t the trackers opt-in? This doesn’t seem like a bad thing if you don’t mind giving up those user metrics for them to build something better. It is the opt-out stuff with no transparency over the kind of data collected to be worried about.


since it’s open source

Open core with an open community edition. 100% better than fully proprietary & Microsoft.


None of the creators I follow have LiberaPay or crypto as an option either. I don’t want to pay on a proprietary platform.



There is a cost aspect of self-hosting that one has to comtemplate. I haven’t looked at SimpleX hosting, but if it’s anything like Matrix on resources, it isn’t accessible or feasible even if it is possible.


My battery life & ability self-host on low-spec hardware is pretty convenient. When I talk to my bud on their own self-hosted, low-spec instance, the TLS+OMEMO is pretty secure since we don’t have to trust some third-party server provider with data/metadata.


Others are noting clients & servers matter. This isn’t a downside—it’s just that the protocol is flexible & extensible for many types of messaging beyond human2human private conversations, which explains why encryption isn’t a requirement for the clients. With that said any modern client targeting said H2H interaction will have basic forms of encryption like PGP, OTR, & OMEMO which all do the job of E2EE. OMEMO is based on the same ideas that Signal, WhatsApp, Matrix, & so on use so that part is all the same.

A unique feature for XMPP in this space tho is how low-spec & resource-unintensive the servers/clients are—you aren’t chewing up a ton of CPU or RAM, there is no eventual consistency to balloon storage (MAM is enough), clients don’t drain your battery or take literal minutes to sync with servers. Since it is low-cost, it is feasible to self-host XMPP from a residential server (at home on some old hardware for instance) or add it to a multipurpose machine where it doesn’t get in the way of other processes/storage. Some of the other service often mentioned here either you can’t self-host or are quite expensive to run (often by design) which limits the accessibility causing centralization as well as requiring trust in that server you don’t own.


Thank you for choosing to open source it on GitLab over Microsoft GitHub.


XMPP doesn’t need notifications per se since it already has a connection to the client. Since it works for all other OSs to hook into this & display a notification, I don’t even want to know what restrictions Apple has on iOS that prevent such basic behavior. Apple digs its own grave here. What’s worse is I want to say “go get a Android phone, dummy” to a ‘normie’ but the stock OS on any Android phone is going to be on aggregate a worse privacy situation unless you would have to be ready to teach how to unGoogle it to the extent they would tolerate.

Linux phone when?


My partner has slowly been walking away from everything like that too. The hard part is she has done a lot in marketing & now wonders if it is all bullshit/evil, but it is still needed even for the good products & services, just not in deceptive or manipulative manner.


There’s a 90% chance the other end of your conversation will be with someone on Matrix dot org or a server they host for a organization. Like email, your other end is likely still using Google or Microsoft so the metadata & anything else unencrypted is going to be synced back to the centralized server.


Let me message you without having an Android or iOS primary device then. Can’t do it.


Motal is participating in GSoC this year to get some new features too.

But this is a wider issue that developing free software for Apple products is way too expensive (time & money) to be feasible while also going against the general free software ethos. It should be no surprise the walled garden of a proprietary OS that charges you to publish to their store has a severe lack of free or otherwise ethical software (which is important for security for something as important as a messaging app full of private data).


XMPP clients are fine albeit it all, as many as they are, slightly different as is the nature of the protocol. This just means there is value in contributing to existing clients, creating new clients, or embracing progressive enhancement (which most do for example with emoji reactions just being a quoted text reply & so on) & complete feature parity is a fool’s errand if you want an exensible protocol with diversity & experimentation in the community. With the broad exception of the Conversations Compliance, there isn’t a flagship client & instead the best ideas come to the most used or most innovative clients. I use Cheogram, Profanity, Gajim, Dino, Movim at different times (& would love to create my own). The protocol is stable, healthy, & ready for proposals for improvement.

If I compare this to the more-expensive-by-all-metrics-to-run Matrix, if it ain’t Element, you gotta problem since a vast majority of users are on it & using all of its features & no other client has anything near parity but are expected to have parity instead of allowing things to sometimes be gracefully missed or shown in a less than ideal manner as acceptable. This hurts experimentation. Good luck trying anything similar to GDPR when all nodes are design & required to duplicate all messages & attachments for all users to every server anyone in it comes from.

The only real gotcha is the same gotcha as Matrix when using multiple clients with double-ratchet encryption (ala Signal) is that clients will expire keys that haven’t been seen in a while & is hard to get both devices retrusting one another. Turning it off & on again rarely works & requires fiddling on both ends sometimes. I really should just use PGP for encryption more often…


I got locked out my seldom-used PayPal account a few years ago. They decided to arbitrarily remove Google Voice as an SMS 2FA option (I want to say TOTP wasn’t supported when I signed up). I went to find out who to contact about authentication issues, but support, chicken-&-egg-style, requires authentication—even for auth issues—with no support@ email. I used the worst-case-scenario support option of Twitter but that support team banned me for messaging them about auth. Since I couldn’t get back into my account + the sheer incompetence of the support system, I never used & refused to use PayPal ever since. I am happy that my country prefers cash transactions & I can’t believe in the past I used a major bank credit card + major corp digital payment option for almost all purchases. Long live cash (& Monero/Zcash).


Good luck creating a new account as folks are suggesting as they will require like scans of your head for ID (that’s what they asked me last time I bothered trying before I realized I was better off without it)




Or XMPP or IRC or Mumble …all of which have clients that will consume less resources on your machine


I mean we already had the universal protocol last decade in an extensible markup language, but the next generation decided we needed to rewrite everything in a JSON schema that isn’t as easy to extend as XMPP. It’s federated/decentralized, has many chat clients, some social media + community managing platforms (Movim & Libervia), used for video conferencing (Jitsi & Zoom), negotiation matchmaking for games (most of them), displaying friend roster status updates (Nintendo, & many other systems). This would have (& can still be) the dream instead of needing to reinvent everything.

Worth reading: https://ploum.net/2023-06-23-how-to-kill-decentralised-networks.html


OAuth or SSO is not the same as communicating over the same protocol. You can also log in with Google, Facebook, Apple, GitLab, Microsoft GitHub, & others on different platforms as SSO options… clearly these are not the Fediverse.


Being federated isn’t the same as living in the same Fediverse. You can upvote a Lemmy post from Mastodon since they both use ActivityPub but you can’t do that with a Matrix account. There are a couple of different ActivityPub-like generalized protocols out there, but none of them are near the size of ActivityPub & Lemmy is ActivityPub so for all intents & purposes for this conversation the Fediverse here (& most places) is ActivityPub. Matrix is on an entirely different federated network & they aren’t related.


You can use its underlying ejabberd, Prosody, or other server for chat. Most modern clients offer OMEMO, OTR, PGP for client-side encryption (end-to-end implies the servers don’t/can’t do anything here)


Matrix isn’t ActivityPub ∴ not a part of the fediverse


Ask: How do you handle your résumés?
Usually I rely on my network & haven’t needed this kind of document in ages, but I’ve been tasked with creating a résumé for myself. I’ve grown more privacy-conscious every year & I think it’s weird that we are expected to give out so much information about ourselves to companies that lie about their culture & don’t want you sharing salary information with your coworkers. I have read stories about how these documents & information can sometimes get leaked & shared on the web which is pretty sketch. TIL about “functional résumés” which it appears are usually meant to cover up your lack of work experience, but I like the idea of covering up a lot of my specific history as it is the *skills* that should matter more, no? Do you give out all of your info?
fedilink