Telegram private 🙃

I use SimpleX for this matter. Each device get its own account, and I just create a group named “self” with all of them. You can selfhost the server too if you prefer that route.

It is the recent use after free vuln actively exploited found in FF, which both Fennec and Mull relies as upstream. This compounds on changes made to Android NDK and the source of FF move into the monorepo, making them harder to build. Hence, they’re still vulnerable to the attack.

“Open Source AI” is an attempt to “openwash” proprietary systems. In their paper “Rethinking open source generative AI: open-washing and the EU AI Act” Andreas Liesenfeld and Mark Dingemanse showed that many “Open Source” AI models offer hardly more than open model weights. Meaning: You can run the thing but you don’t actually know what it is.

Basically, no.

Triangulation needs to know where the signal comes from (angles), which mode’s device doesn’t have the capability of doing this. The most they can do is estimate by signal strength.

I don’t understand the hostility of other comments. I had a quick look on the code and it is essentially IRC+Kiwi but in Rust, or a Matrix public chat room without signups. All chats are in memory and not saved to disk or DB. There is username but you can claim who you wants to be. The dependencies looks sane and reputable. I do saw there is a WebSocket lib being used but not found in code. However I don’t code in Rust nor I understand WS well so take a grain of salt here.

It does provide anonymity, but not privacy or confidentiality. It does what it claims.

I only know you can use it via Matix with a bridge, but the setup is quite involved, not just an App on your phone. Plus the metadata is still shared with Meta, like who you talked to and when, which they can build a profile and a social graph.

Although I don’t use FUTO keyborad, I don’t think collecting typing data is a problem, as long as it is done locally. There shouldn’t be a binary choice between privacy and better user experience.

I chose the dual boot option when I decided to switch a year ago, and I found myself rarely using Windows eventhough it is installed on my laptop. I might have only boot it up 3-4 times since the switch, for GFN not working properly with ALT when running through browser. The dual boot just make my disk partition needlessly complicated, and I’m going to reinstall it yet again, without Windows.

plan to resolve

timeline unknown, maybe 2124

I guess LLMs are OK at this as most ToS and Privacy Policies have quite fixed formats.

Free? No. SPN is an add on service that cost 9.99€/mo or 99€/yr. You can host a community node but seems you can’t use it directly. They say they are going to reward who host a node but it is unclear what the actual reward is.

https://wiki.safing.io/en/SPN/Nodes/Hosting

As HN: RustDesk Installs Chinese Root Certificates

WTF? A root cert that I don’t know how the private key being handled install sliently? This isn’t just a mishap but a fucking backdoor. No matter how legit the purpose is, this is plain unacceptable.

Update: It seems they have removed that cert already.

https://github.com/rustdesk/rustdesk/discussions/6444

From SimpleX creator, it doesn’t scale well with groups >50 ppl, so it is not going to be your Telegram/Facebook/social media replacement.

Personally, I hate unskippable cutscenes, but I won’t call it crap and not buy from it.

deleted by creator

So the project is just source available?

I thought not connecting it to the internet will make it OK?

XMPP isn’t any better in terms of metadata. OMEMO is an afterthought that slaps on to XMPP. Many metadata are still attached to the message. The threat model only protects the content and doesn’t guard aginst metadata and traffic analysis. Even OMEMO extension is still in experimental status. Not to mention, users still need to signup an account using their email.

Honestly, I think SimpleX is better in everyway. No account required, minimal metadata (at least from the technical whitepaper and other sources I read), fully open source (AGPLv3), an ok mobile and desktop client, and audited. The register friction is almost non existance. You just need to install, set a name, and off you go. The only worry I have with them is they took VC funds.

ADD: XMPP is still better for company internal communication, especially when compliances require conversation archiving.

Describe your use case.