ContactDiscoveryService
DISCONTINUED
jami-cli
Our great sponsors
ContactDiscoveryService | jami-cli | |
---|---|---|
70 | 136 | |
270 | 15 | |
- | - | |
0.0 | 0.0 | |
11 months ago | about 3 years ago | |
C | Rust | |
GNU Affero General Public License v3.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ContactDiscoveryService
-
7 Best Open-Source Alternatives To WhatsApp In 2023
[1] https://signal.org/blog/private-contact-discovery/
-
WhatsApp data leak: 500M user records for sale
Signal uses SGX for remote attestation, which presumably lets the client verify that the code running on the server is a build of the OSS code and not a modified version. But I don't know the details or if this is reliable.
SGX and remote attestation described here:
- Elon on Signal
- Absolutely Insane "Feature"
-
Twilio Incident: What Signal Users Need to Know
Signal (or, more accurately, one of its predecessors) used to use client-side private set intersection for contact discovery, but this scales poorly [1].
Now they use a solution based on Intel SGX and server-side trusted computing [2].
-
New Intel chips won't play Blu-ray disks due to SGX deprecation
* dynamic HSM (https://github.com/intel/ehsm)
* machine learning in tandem with GPUs https://azure.microsoft.com/en-us/blog/azure-confidential-co...
* autonomous key management (https://docs.oasis.dev/general/oasis-network/overview#privac...)
* signal contact discovery (https://signal.org/blog/private-contact-discovery/)
Many of these will also work with next-gen enclave tech (mainly in the direction of total VM encryption), but those aren’t as secure as SGX yet, so SGX has continued utility to applications beyond DRM.
-
Messaging apps that don’t access contacts?
You’re looking for a solution where the problem actually doesn’t exist. At least not in Signal’s case. My advice is that instead of installing yet another fringe application nobody uses, and ending up actually or even potentially losing your privacy, do some light reading about how Signal handles contacts and contact discovery. Skimming through their FAQ might suffice.
-
Is anyone here using Signal?
You are mistaking privacy for an absolute. Signal makes your conversations private. While it uses your phone number for registration, you can choose who to give it to just as you would your phone number. They have also gone to great lengths, far more than other providers, to protect your contacts
-
Why Not Signal?
We should make a distinction between the server tampering with message content and message metadata. Message content is protected by well-scrutinized and auditable client code. However, there's nothing stopping a malicious server from logging a bunch of extra metadata on top of what they claim to log, which would be very interesting for nation states. And the extra-metadata scenario is the one being criticized, I think.
If you trust Intel SGX (or other secure enclaves) it is theoretically possible for the server to attest to the client that a particular hash of code is running. (Typically the reverse process is used, to attest to a server that a client is running whatever DRM code the company wants.)
Signal already uses SGX to implement contact search [1]. The actual algorithm is performed in plaintext in the enclave.
Now, you might counter that SGX is full of holes, and I would agree with you.
-
SimpleX Chat - the first chat platform that is 100% private by design - it has no access to your connections graph - now as mobile apps!
Signal [doesn't hold your connection graph and can cryptographically verify that it is not shared](https://signal.org/blog/private-contact-discovery/). What is the improvement over that approach?
jami-cli
-
How to copy a file between devices?
I am surprised to not see Jami ( http://jami.net ) mentioned here yet. It is a GNU project and is fully cross platform. I use it to send files and messages between my devices, as easy as Telegram or Whatsapp.
-
Jitsi.org has started requiring authentication
You already can, apart from some DHT and bootstrapping stuff.
I tried to like Jami, but it never worked right when I tried it. I didn't find a decent Android Tox client with video call, but it should work alright for text.
-
⟳ 4 apps added, 56 updated at f-droid.org
Jami (version 20230424-01): Audio & Video Calls / Chat Take Control of your Communication!
-
Vonage Help!
The other option is https://jami.net/. It seems to have a phone option and could potentially replace your current system.
-
Have you tried any decentralized messengers?
Try Jami https://jami.net/! I'm kind of blown away by how well it works! I originally tried it about a year ago, but it was kind of a pain. My issues with it were fixed when they incorporated UnifiedPush. However, since iPhone will never have something like UnifiedPush, I wouldn't recommend it for iPhone users or people with many iPhone-using friends to convert.
- "your files are too powerful!"
-
⟳ 0 apps added, 54 updated at f-droid.org
Jami (version 20230227-01): Secure and distributed communication platform
-
Signal would 'walk' from UK if Online Safety Bill undermined encryption
jami.net and tox.chat sort of being the way skype originally was.
- Linux software list. Discussion and advice welcome!
What are some alternatives?
Tox - The future of online communications.
session-desktop - Session Desktop - Onion routing based messenger
qTox - qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
berty - Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network
whatsapp-viewer - Small tool to display chats from the Android msgstore.db database (crypt12)
TextSecure - A private messenger for Android.
Element - A glossy Matrix collaboration client for the web.
Conversations - Conversations is an open source XMPP/Jabber client for Android
Vencord - The cutest Discord client mod
status-mobile - a free (libre) open source, mobile OS for Ethereum
Signal-Server - Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS
ricochet - Anonymous peer-to-peer instant messaging