simplex-chat
simplexmq
Our great sponsors
simplex-chat | simplexmq | |
---|---|---|
247 | 49 | |
5,172 | 393 | |
6.2% | 3.3% | |
9.9 | 9.3 | |
about 20 hours ago | 1 day ago | |
Haskell | Haskell | |
GNU Affero General Public License v3.0 | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
simplex-chat
-
What are your favorite End-to-End encrypted tools for online privacy?
For messaging I'm currently on Olvid (E2E with physical key exchange) but since it still use their servers, I'm currently testing SimpleX where I can host my own servers.
- Launching Default End-to-End Encryption on Messenger
-
Apple Confirms Governments Using Push Notifications to Surveil Users
Notice how SimpleX (https://simplex.chat/) has no push notifications by default because of this issue.
- Possible today in Signal? Disable link preview
-
U.K. Abandons, for Now, Legislation That Would Have Banned End-to-End Encryption
If you have a mobile phone number, the domestic intelligence agency knows exactly where you are at all times and any LEO (without a warrant) can also find you. In addition, there have been numerous CCC presentations showing how insecure the global (excluding US) and (separately) US carriers are guilty of promiscuous metadata trafficking ($$) and insecure SS7 setups. As a consequence, for low $, you can go to any one of several shady websites and find the last location of almost any phone number (person unique ID) globally. There are additional varying exploitable vulnerabilities depending on the exact combination of {handset x carrier x country} to impersonate them, tap their line, reveal their exact location, and redirect their phone number through a third-party handset or even a PBX. These are more expensive and some capabilities are forbidden for all but a few selective intelligence uses.
Session (Signal fork) doesn't use phone numbers. It's pretty well-designed overall and uses an onion routing approach. It's already a superset of Signal except it doesn't use phone numbers. https://getsession.org
Also look interesting:
* (unproven) https://www.olvid.io/technology
* (unproven) https://simplex.chat
PS: Using regular TOR on home broadband or cloud servers is relatively risky and inefficient. Sybil attacks on it are common. And to network operators and security agencies it gives an easy "flow tag" of your uplink and exit node data traffic as automatically suspicious.
- The first messenger without user IDs
-
SimpleX β private messaging platform without user identifiers
Ah well⦠tried to install the CLI client from source (https://github.com/simplex-chat/simplex-chat/blob/stable/doc...), installed the Haskell compiler GHC v9, the Haskell package manager Cabal, `cabal update` went fine, no problem until `cabal install`:
cabal: Could not resolve dependencies:
The instructions say install GHC 8.10.7.
https://github.com/simplex-chat/simplex-chat/blob/stable/doc...
I suggest running
ghcup install ghc 8.10.7
-
What are Signal alternatives that don't require a phone number?
Simplex
simplexmq
-
The first messenger without user IDs
They really bury the detail IMO after the banner claim front and centre on the website (I guess because it's hard/awkward to explain without it sounding just like a difference in nomenclature).
What makes it work afaict is the combination of:
- there are still queue (inbox) IDs
- key (and (just initial?) queue ID) exchange out of band
https://github.com/simplex-chat/simplexmq/blob/stable/protoc...
So messages are still delivered to an identifier, it's just that every user has tonnes of identifiers (per contact/group), there's no server tracking and handling their exchange, and possibly they rotate via encrypted messages once established anyway.
Exchanging out of band gets you the secrecy, and having one per-chat protects you from a contact turning out bad/leaking/compromised - it's fine that they have metadata about their own chat with you, because they have that & the plaintext anyway.
-
SimpleX Chat: private and secure messenger without any user IDs (not even random)
Also, it is covered in whitepaper here: https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md
-
SimpleX Chat β the private messenger without any user IDs (not even random numbers) β v5.1 released with message reactions π and self-destruct passcode
from their protocol overview doc:
Please review the whitepaper and / or website home page. I also wrote this post some time ago about why I believe that using pairwise identifiers should be a minimal requirement for a communication system to be considered private.
-
SimpleX File Transfer Protocol (aka XFTP) β a new open-source protocol for sending large files efficiently, privately and securely β beta versions of XFTP relays and CLI are released!
You can download XFTP CLI (Linux) to send and receive files via the command line here - you need the file named xftp-ubuntu-20_04-x86-64, rename it to xftp.
- SimpleX Messaging Protocol server β v4.0 with basic authentication is released and other updates
-
SimpleX Chat - the first messaging platform without user profile identifiers (not even random numbers) - security assessment by Trail of Bits is complete and v4.2 is released
Yes, itβs an extension of the SMP agent protocol yet to be added to the spec (itβs covered in this rfc: https://github.com/simplex-chat/simplexmq/blob/stable/rfcs/2022-08-14-queue-rotation.md
-
Session: ISP can tell when you use the messenger, right?
If you want that feature, checkout SimpleXChat.
-
SimpleX Chat v4 of iOS and Android apps released - with local chat database encryption!
In case you mean the containers for the servers, they are here: https://github.com/simplex-chat/simplexmq/tree/stable/scripts/docker
What are some alternatives?
Element - A glossy Matrix collaboration client for the web.
session-android - A private messenger for Android.
nostr - a truly censorship-resistant alternative to Twitter that has a chance of working
Signal-Android - Fork from a private messenger for Android with extra options added: full backup and (partial, ony text) xml backup of messages. Restore can happen at any time, not only after a fresh install. Import SMS database. Import of (unencrypted) WhatsApp databases. Removed apk expire. Choose between passphrase protection and the Android screenlock. Choice for the backup location (internal or removable storage on Android < 11 (on 11 and higher this is already possible)). Set the maptype in the place picker. Option to treat view-once media as normal media. Option to ignore remote deletion. Choose between FCM or websocket notification delivery.
termpair - View and control terminals from your browser with end-to-end encryption π
Signal-Server - Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS
Signal-iOS - A private messenger for iOS.
status-mobile - a free (libre) open source, mobile OS for Ethereum
imessage - A Matrix-iMessage puppeting bridge
paper-research-privacy-matrix.org - Privacy research on Matrix.org
HsmEnclave - HSM-backed remote-attestable enclave.
eta - The Eta Programming Language, a dialect of Haskell on the JVM