Opensource

1786 readers

95 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

Credits

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

founded 1 year ago

MODERATORS

pylapp@programming.dev

I Stopped Using Matrix - Tatsumoto (tatsumoto.neocities.org)

submitted 9 hours ago* (last edited 9 hours ago) by Kissaki@programming.dev to c/opensource@programming.dev

12 comments fedilink hide all child comments

What ultimately pushed me to leave Matrix was discovering that my homeserver's admin was using my account without my consent.

In an encrypted room even with fully verified members, a compromised or hostile home server can still take over the room by impersonating an admin. That admin (or even a newly minted user) can then send events or listen on the conversations.

…, I've decided to move my conversations over to SimpleX.

For the past few months, the Matrix community has been largely inactive (despite having over 5,000 members), while the Telegram community has remained much more vibrant. This is disappointing given that I have been a strong advocate for using Matrix and have promoted it widely. For some reason, people are not moving to Matrix at the rate I had hoped.

you are viewing a single comment's thread
view the rest of the comments

[–] onlinepersona@programming.dev 7 points 7 hours ago* (last edited 7 hours ago) (1 children)

"Unencrypted chatrooms can be modified by an admin". No shit? And you're sure that hasn't happened on Telegram? Or IRC? Or any other unencrypted messenger?

For the past few months, the Matrix community has been largely inactive (despite having over 5,000 members),

Where is he getting these stats from?

In an encrypted room even with fully verified members, a compromised or hostile home server can still take over the room by impersonating an admin. That admin (or even a newly minted user) can then send events or listen on the conversations.

How? They don't have the keys to do so, do they? I can't imagine that the private, unencrypted keys are stored on the server. That would be nuts.

It's shitty that he had such a bad experience, but again, any unencrypted messenger will be susceptible to account takeover by an admin. Signal has groups. Whether their moderating tools are good or not, I can't tell as I'm not an admin of such a group, but moving back to Telegram is no better than going to Discord.

Anti Commercial-AI license

[–] Kissaki@programming.dev 9 points 7 hours ago (1 children)

Where is he getting these stats from?

What do you mean? He's the room owner. He can see the member count, and the activity.

[–] onlinepersona@programming.dev 5 points 6 hours ago

Oh, by community he means room! OK. I'm pretty sure the matrix community as a whole is more than 5000 people 😅

Anti Commercial-AI license