undefined | Better HN

0 pointswkat424210mo ago0 comments

> Well moving from WhatsApp to Signal was one move in the last 10 years. I wouldn't call that "constantly moving"

No but the last year I've been asked to go to:

- Telegram for a group chat

- Discord for a support community

- Snapchat by someone who wanted to share pics with me

- Instagram chat by a tattoo artist

- RCS / Google Messages by a friend in America who wants to use iMessage with me (I don't use Apple)

- Signal by a family member

- One person keeps chatting to me on LinkedIn and is annoyed I only reply once a month or so when I happen to log in to it (I have all notifications off and don't use the app of course)

All by different people. I keep saying no more more keep cropping up. Signal isn't the only one. I'm honestly very tired of all that crap. If I promote something new it should not be the same thing, slightly less flawed. It should be a real way forward.

I bridge to matrix now and if a network is not supported there then I won't use it. But I don't actually care about those chat networks. The bridges are just a way to forget they exist. Also, I'm not rolling out a bridge just for one person who wants to talk to me on a new network.

> ... you say you're in cybersec, so I would expect you to do better than that. What does WhatsApp track? Metadata. Who writes to whom, when. If you move half of your conversations away from WhatsApp, they lost the metadata from half those conversations. So they effectively track you less. It's not "all or nothing".

I am but privacy and security issues are very different things. The metadata is not really something I care about. My phone provider knows who I call and what I say, my mail provider knows who I email and what I say. Whatsapp was an improvement over those. It's not ideal but metadata is not a dealbreaker for me. And the thing is, I can't do without Whatsapp. I don't like it, but I'm stuck with it. I do shield it from my phone by using matrix so there is little the app itself can collect.

By the way at work the situation is much worse. My employer uses Microsoft 365 where all our data is on Microsoft servers (sharepoint et al) and they can access literally everything. Every document, every email, every chat, even the ones I deleted. It's all there and not end to end encrypted so Microsoft can see it too. Of course they sign legalese that they won't look at it but we all know how much that means post-Snowden. My employer is a company that's supposedly cybersecurity-aware. Clearly not enough. I don't have input in such strategic decisions. Still, a whole team of cybersec specialists is OK with this situation. I'm not, which is one of the reasons I don't like my job :) We spend time on stupid little things while freely giving up our entire data.

> Matrix is inferior to Signal in many ways, though.

I don't agree, it is superior for me. I can use whatever client I want, I can use it on any PC or web or mobile device, 20 of them if I want, I can set up my own home server, I can run my own integrations and bots (like a transcription bot running on a local whisper instance, nothing leaked to the cloud). I don't need a phone number to sign up so I can make different accounts for different purposes, just like email addresses on my domain. It is this flexibility I need. I don't want my chats to be locked up in someone else's server. My chats are my data and I should be able to do with it what I want.

Signal doesn't let me sign up without a phone number. It doesn't even have a web version, I have to install their desktop client (which isn't available on BSD). Also Signal misses so much functionality especially for group chats and integrations/bots.

Anyway, we're not going to agree here. I'm not going to help promote Signal and I don't think it's a train worth riding. That's my opinion. It's not the direction I want to move into, I'm truly sick of these walled gardens.

> Are you sure they've been running on 50M in the last 10 years? They take donations, I would expect this helps quite a bit. 50M doesn't really sound like a lot of money when you have 70 millions active users.

No but it is by far the biggest donation they've had. Most people are not going to pay for it, and if they grow the "normies" will rapidly outgrow the evangelists who would be inclined to donate. They'll end up having to get capital, which will come with strings attached, and the enshittification will start.

The thing is that with something federated that can't really happen. If the main matrix instances enshittify, I'll just run my own (and in my case this is exactly what I do anyway). Or someone else might start one. Having an open network is the only way I see out of the enshittification spiral.

0 comments

palata10mo ago

> No but the last year I've been asked to go to:

To be clear, I'm not installing those things either. Everybody has WhatsApp, so that's my fallback, it's a common denominator. Signal is superior, so that's my preference. For personal conversations, I don't use anything else.

Then for work, I have to use the tools we get (be it Slack or Discord or Teams). And when a community is on Slack or Discord or IRC or discourse or whatever they use, well I have to go there to talk to them.

> My employer uses Microsoft 365 where all our data is on Microsoft servers

Yes I agree, that's a problem. Slack, Discord, same thing everywhere. Companies should self-host e.g. a matrix server, or at least use a provider from their own country. But I believe that self-hosted Matrix would be better than Slack for companies.

> I don't agree, [Matrix] is superior for me.

Out of curiosity, why not Telegram then, if you don't care about privacy and encryption?

> if they grow the "normies" will rapidly outgrow the evangelists who would be inclined to donate

They currently have 70M active users. Those are not evangelists.

> If the main matrix instances enshittify, I'll just run my own

Which is more complicated for approximately everybody than "if Signal enshittify, I'll move back to WhatsApp or to the next alternative to Signal".

Matrix brings its lot of issues. For instance, startups obviously wouldn't care, but corporations would never accept "any Matrix client" to connect. So they would somehow want to make sure that their employees use approved clients. I don't think this is currently a thing in Matrix. But even if it was, it means that corporations wouldn't benefit from "I can use any client I want", and chances are that they would self-host and not federate. Better than giving their data to third-parties, but still not the dream of federation or freedom.

For personal use? Normies use the main Matrix server, it's not really federated. And Matrix servers collect a lot of metadata. Wasn't there also security issues, where a Matrix server could inject ghost users into rooms?

All that to say, Matrix does not solve the problems that Signal solves. Matrix solves other problems (well, mostly "I want to self-host a chat and I want something cooler than IRC"), but then it makes sense that Matrix is not a replacement for Signal and Signal is not a replacement for those Matrix use-cases.

Bridging is a weird hack. I have only been confronted to Matrix bridges to IRC channels, and it was making everything worse for IRC users (essentially forcing the IRC users to either move to Matrix or ban the bridges).

wkat4242OP10mo ago

Regarding telegram: I do use that actually, but not on my phone. I just use it on the PC in a webbrowser (which is one of the things I like about telegram, they're not so phone-centric and you can connect wherever you want and from however many clients you want at the same time). I only use it for group chats though. With notifications off, so it's like 'whenever I get around to reading it' service level :)

> Yes I agree, that's a problem. Slack, Discord, same thing everywhere. Companies should self-host e.g. a matrix server, or at least use a provider from their own country. But I believe that self-hosted Matrix would be better than Slack for companies.

Yes or at least use something that's verifiably E2EE. It's totally possible to use someone else's cloud without giving them any way to read the information stored on it. It's just not really offered by the big names. I think part of the reason is that they love running analysis. Especially Microsoft loves "data-driven" everything.

> For personal use? Normies use the main Matrix server, it's not really federated. And Matrix servers collect a lot of metadata. Wasn't there also security issues, where a Matrix server could inject ghost users into rooms?

Yes but those can be resolved. It's still being developed. And once it gets big there will be more servers, I'm sure. Popular sites and services can host their own and direct their existing users to it.

> Bridging is a weird hack. I have only been confronted to Matrix bridges to IRC channels, and it was making everything worse for IRC users (essentially forcing the IRC users to either move to Matrix or ban the bridges).

Well that's for IRC channels, that bridge multiple users on both sides, yes. But this is for 2 reasons: IRC is more limited than matrix so some stuff has to be crammed in a text field somehow, and many IRC servers don't allow full bridging where the bridge can pretend to be multiple users. Libera is an example, they had some personal conflicts with the matrix team and turned it off. Since then it's difficult because the bot puts the username of the matrix user in the body of each message instead of making it appear to come from the username.

If you bridge 1:1 chats or things like whatsapp groups with one user on the matrix side (which is the case for personal bridges), there is no issue. The whatsapp users don't see anything different. Your messages just show up under your regular name. On the matrix side everyone also shows up as a matrix user, the bridge creates a user for everyone in the group chat (called a 'puppet'). It's quite good. The only thing is that if I run a transcribe bot, its output gets bridged back to the other party I'm talking to, so I redirect those to a separate chat. It would be nice if there was a "don't bridge" flag for messages. Whatsapp has transcribe functionality now, but it only works on the phone, not web. And the quality is awful. Whisper-large which I run a server for, blows it out of the water.

The biggest issue with the whatsapp bridge is that it doesn't do voice or video calls. The telegram bridge works even better because it uses the regular telegram protocol (whatsapp doesn't support third-party clients or bots so it uses a hack through whatsapp web).

j / k navigate · click thread line to collapse