Is anyone here aware of some alternatives to mentioned instant messaging applications ? Alot of people keep mentioning Signal , however since it is US based I am not going to entertain it as a possibility.

  • doodledup@lemmy.world
    link
    fedilink
    arrow-up
    1
    arrow-down
    1
    ·
    1 day ago

    Today. Matrix does not encrypt your metadata like Signal does. The server can easily build a social tree.

    • troed@fedia.io
      link
      fedilink
      arrow-up
      2
      ·
      1 day ago

      The Signal server and a Matrix server, of course, have the same metadata visibility.

      • doodledup@lemmy.world
        link
        fedilink
        arrow-up
        2
        arrow-down
        2
        ·
        1 day ago

        No they don’t. Signal does not get any metadata. Matrix servers get everything and more than any other messenger. Not even the profile picture is encrypt with Matrix.

          • doodledup@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            9 minutes ago

            Well then search and share it. I feel like you’re some kind of shill that’s payed to say these things. You have no technical understanding of how this works and you also won’t share any sources whatsoever.

        • troed@fedia.io
          link
          fedilink
          arrow-up
          1
          ·
          22 hours ago

          Yeah no, that’s not how it works. The closed source Signal server by definition gets the meta data on your chats. It’s simply needed for it to do its job. When receiving the encrypted message contents the Signal server, at the moment of the IP connection, knows the identity of the sending party. It also must know the identity of the receiving party, else it would be very difficult to make sure the message reaches them.

          That’s the user graph right there. Now Signal says they don’t log it, and I’m sure they don’t (here’s where you look up what a National Security Letter is btw). If I run my own Matrix server for me and my friends, I can prove that it doesn’t log.

          • doodledup@lemmy.world
            link
            fedilink
            arrow-up
            1
            arrow-down
            2
            ·
            14 hours ago

            Before making an uneducated comment you should at least read the source I shared and read the corresponding whitepaper explaining it. Your comment is a bit embarressing.

            If you use a VPN (hiding your IP), Signal cannot build a social tree.

            If you have any questions in particular feel free to ask.

              • doodledup@lemmy.world
                link
                fedilink
                arrow-up
                1
                ·
                edit-2
                6 minutes ago

                I doubt that based on the little technical understanding you show.

                But if you do, explain to us how they are able to build a social tree when the users involved use a VPN? (Note that Sealed Sender is enabled by default). If there is any novel security insight that you discovered please share it!

        • fieryhamster@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          1 day ago

          I highly suggest getting third party reviews instead of competitor reviews which are ALWAYS SLANTED. Not to mention Matrix based like Element and Fluffychat are Open Source. Unlike Signal. Not to mention Signal provided info to US authorities fairly recently.

          • doodledup@lemmy.world
            link
            fedilink
            arrow-up
            2
            arrow-down
            2
            ·
            14 hours ago

            Signal is open-source. Signal did not provide info to the US. They don’t have any info to share anyways. And you can confirm that as their code is open-source. Them sharing data is mathematically impossible.

            What are you on about? You seem to have no idea what you’re talking about. Stop spreading unreferenced misinformation. If you have something that we don’t know about share a source or prove it!

            • fieryhamster@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              edit-2
              5 hours ago

              They had no choice due to a warrant. They did provide login information to the court and sat on it for a year before telling everyone.

              Did you know that with Matrix based clients you can run your own server and instance for just you and your buddies? And the cops could confiscate your server at your house but can’t get anything, period, due to it being encrypted and yours.

              Rmind us all again… is Signal on a centralized server?

              Also, why are you pushing Signal from California?

            • troed@fedia.io
              link
              fedilink
              arrow-up
              2
              ·
              9 hours ago

              And you can confirm that as their code is open-source

              You cannot prove that the code they release is the same as the code being run on their server.

              What’s a National Security Letter?