Cryptographic Issues in Matrix’s Rust Library Vodozemac - Dhole Moments
soatok.blog
Two years ago, I glanced at Matrix’s Olm library and immediately found several side-channel vulnerabilities. After dragging their feet for 90 days, they ended up not bothering to fix any of i…

Comments

  • drkt@scribe.disroot.orgEnglish
    4·
    23 hours ago

    I agree with all of this except that his standard seems to be perfection, when a lot of us are not looking for a Signal alternative, but a Discord alternative, which it is. It’s still better than Discord.

    The Matrix Foundation and everything under it has systemic problems that they haven’t even acknowledged in the 5+ years I’ve been eyeing Matrix, and I will not fucking defend them, but Matrix is the best Discord alternative we have unless you’re willing to hitch your bet on a single sysadmin hosting Stoat or whatever else.

    I’ve been in enough communities that implode because one critical person got his finger stuck in his ass that I refuse to migrate to a service that isn’t federated, and XMPP kinda sucks, so Matrix it is.

    • redsandEnglish
      1·
      6 hours ago

      It’s not a good discord alternative but simplex has been a solid secure chat option PQC working by default. It and mumble or jitsi serve my gaming needs.

      https://simplex.chat/

      XMPP would need one hell of an upgrade but it might be easier to refactor than the years of lazy bullshit in matrix’s code. Time will tell. Flux could hackathon and venture captial into the lead

      • drkt@scribe.disroot.orgEnglish
        1·
        3 hours ago

        I have now, but I don’t see what “there are no good alternatives” does for the conversation when some of us are looking to get off Discord now.