sydent VS session-android

GitHub Discussions can also be a great place for support as long as these are regularly monitored. Another option along the same lines is Discourse and the Open Source Matrix which is used by quite a few Open Source and community-based projects.

Tangential: the article notes that Telegram is an “encrypted messaging app”. While this is technically true, it's worth keeping in mind that it's not end-to-end encrypted, so it's less secure in that regard than, say, Signal or even WhatsApp. Telegram does have opt-in end-to-end encrypted one-on-one chats, but those are very inconvenient to use.

For a properly encrypted chat app, including group chats (opt-in), try Matrix instead: https://matrix.org/

I'd love something like the Matrix [0] data model (JSON messages aggregated in an eventually-consistent chatroom CRDT) transmitted over something like simplex for metadata resistance.

[0] https://matrix.org

Trillian mod here. There's this new thing called Beeper, works on matrix.org. It's not as the good old times, but I'm currently using whatsapp, FB messenger, discord, telegram, signal, imessage and a few more. It's not Cerulean experience, but it's... slowly improving.

I'm trying to change my account provider from "matrix.org" to whatever Element One needs, and for the life of me I just don't understand what values I have to put where to be able to log in. I tried `element.io`, which takes me to sso.element.io but this doesn't seem like the right thing (no credentials work as I expect.

Other alternatives include Session (free) and Threema (paid - 5€).

Test it by downloading session at getsession.org and DM the bot by starting a new message and sending it to “Simple” (without quotes)

Figured there should be moves to set one up if not - https://getsession.org/

* marketing "Perfect Forward Secrecy" AKA "Forward Secrecy"[0].

I favor Session Private Messenger[1] because it is decentralized and allows third party clients, but Signal enthusiasts warn me that the Session client may, hypothetically, at some future date, integrate a cryptocurrency, as the Signal client already does[2].

[0] https://en.wikipedia.org/wiki/Forward_secrecy

[1] https://getsession.org

[2] https://www.stephendiehl.com/blog/signal.html

If you have a mobile phone number, the domestic intelligence agency knows exactly where you are at all times and any LEO (without a warrant) can also find you. In addition, there have been numerous CCC presentations showing how insecure the global (excluding US) and (separately) US carriers are guilty of promiscuous metadata trafficking ($$) and insecure SS7 setups. As a consequence, for low $, you can go to any one of several shady websites and find the last location of almost any phone number (person unique ID) globally. There are additional varying exploitable vulnerabilities depending on the exact combination of {handset x carrier x country} to impersonate them, tap their line, reveal their exact location, and redirect their phone number through a third-party handset or even a PBX. These are more expensive and some capabilities are forbidden for all but a few selective intelligence uses.

Session (Signal fork) doesn't use phone numbers. It's pretty well-designed overall and uses an onion routing approach. It's already a superset of Signal except it doesn't use phone numbers. https://getsession.org

Also look interesting:

* (unproven) https://www.olvid.io/technology

* (unproven) https://simplex.chat

PS: Using regular TOR on home broadband or cloud servers is relatively risky and inefficient. Sybil attacks on it are common. And to network operators and security agencies it gives an easy "flow tag" of your uplink and exit node data traffic as automatically suspicious.