this post was submitted on 05 Mar 2025
307 points (98.7% liked)

Privacy

1301 readers
135 users here now

Protect your privacy in the digital world

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be nice, civil and no bigotry/prejudice.
  2. No tankies/alt-right fascists. The former can be tolerated but the latter are banned.
  3. Stay on topic.
  4. Don't promote big-tech software.
  5. No reposting of news that was already posted. Even from different sources.
  6. No crypto, blockchain, etc.
  7. No Xitter links. (only allowed when can't fact check any other way, use xcancel)

Related communities:

founded 4 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] EngineerGaming@feddit.nl 9 points 4 days ago* (last edited 4 days ago) (4 children)

Moral of the story? Use ~~selfhostable~~ decentralized messaging instead.

[–] brrt@sh.itjust.works 56 points 4 days ago (2 children)

Milk is getting more expensive. Moral of the story: Buy a cow.

I really wish people would stop being so delusional about the average person’s technological abilities. jUsT TeLL grAn To sPin Up a mATrIx SErvEr.. stfu

[–] EngineerGaming@feddit.nl 13 points 4 days ago (1 children)

"Everyone should be hosting a server" was NOT my point, sorry if I got misunderstood. My mother could in no way host an XMPP server on her own - but I could register her an account on mine.

Rather, I meant: a) if you can host it, suggest your friends and family to use your server; b) if you can't - that is still better: with multiple public servers available, there is no single point of failure, you can choose a server in whatever jurisdiction you want, or even an onion/i2p one.

[–] brrt@sh.itjust.works -1 points 4 days ago (2 children)

Sorry for being harsh at the end. I just see this notion too often.

But still, your option b) is not self hosted. Maybe a better word to use would be decentralized then?

[–] EngineerGaming@feddit.nl 7 points 4 days ago

Selfhost able. But yeah, "decentralized" would be indeed a more fitting term.

[–] rumschlumpel@feddit.org 5 points 4 days ago* (last edited 4 days ago) (1 children)

That's just pedantry. 'Selfhosted' never meant that every single user has to host it themselves.

[–] brrt@sh.itjust.works 3 points 4 days ago (2 children)

It’s not pedantry, it’s using the right terminology.

And yes, self hosted means hosted by yourself. It’s in the name. https://en.wikipedia.org/wiki/Self-hosting_(web_services)

The promise of self hosting is that you own your data which may be better for privacy/security if you know what you are doing. The same doesn’t apply if you have to trust a third party, even if it is a friend/family member who provides you with a service they host. They become a service provider to you.

[–] boonhet@lemm.ee 5 points 4 days ago (1 children)

self hosted means hosted by yourself

A lot of selfhosters share with family. I'm not gonna make my wife spin up her own servers when she can use mine.

[–] brrt@sh.itjust.works 1 points 4 days ago (1 children)

And what would you call your wife in this scenario? A selfhoster? Or a user of a service hosted by boonhet?

She’s not using a selfhosted service, she’s using a boonhet-hosted service. Because she has no control over the service or her data.

[–] boonhet@lemm.ee 2 points 4 days ago

That's just being overly pedantic.

[–] rumschlumpel@feddit.org 0 points 4 days ago

That's called 'peer-to-peer', not 'hosting'.

[–] einfach_orangensaft@sh.itjust.works 3 points 4 days ago (1 children)

i rather talk to my grand parents over ham radio than giving them a smartphone

[–] rumschlumpel@feddit.org 1 points 4 days ago

Are you the only one who decides that? My grandparents have a bunch of children and grandchildren, if I tried to take their smartphone away the others would just call me an asshole and give them a new one.

[–] rumschlumpel@feddit.org 7 points 4 days ago (1 children)

No way in hell my relatives are going to use a messenger I selfhosted. My brother doesn't even use Signal for whatever reason, even though even my grandmother has it.

[–] EngineerGaming@feddit.nl 1 points 4 days ago (1 children)

That is the problem of getting another person to change something... A very valid problem but not inherent to decentralization.

[–] rumschlumpel@feddit.org 2 points 4 days ago* (last edited 4 days ago) (1 children)

Kinda is, though - regular people have a lot more trust in centralized services, and Signal has a very large userbase compared to anything selfhostable. And IME they really, really hate installing new messengers.

Plus, selfhosted E2EE would still be just as illegal as Signal. Many people won't be willing to participate in illegal activity, and if you just don't use E2EE on your selfhosted solution the usefulness seems rather dubious.

[–] EngineerGaming@feddit.nl 2 points 4 days ago (3 children)

I don't think any ban on such selfhostable servers is enforceable at all.

[–] obbeel@lemmy.eco.br 2 points 4 days ago

What if the government shuts off the app source (and source code) and makes it illegal for anyone to download or redistribute it?

[–] rumschlumpel@feddit.org 2 points 4 days ago

It doesn't necessarily have to be enforcable to deter most people. At minimum, with such a ban there's zero chance to communicate with government agencies with E2EE.

[–] ReversalHatchery@beehaw.org 2 points 4 days ago (1 children)

well in the end it's just HTTPS traffic.. police has to search your phone to know if you are a user.

but if you federate (on clearnet), that could give away that you host it

[–] EngineerGaming@feddit.nl 1 points 4 days ago* (last edited 4 days ago)

Well, technically, they could MITM the traffic similarly to how they did to jabber . ru. But a) there are mitigations for this and b) more importantly - they would need to bother. No one's going to bother doing it to a random family server that has attracted no previous attention.

[–] oftheair@lemmy.blahaj.zone 5 points 4 days ago* (last edited 4 days ago)

We have never come across one that is as easy to use as Signal and has no problems with encryption, either that it can have its encryption turned off, it breaks easily or that it makes dubious claims with few-no audits to back them up.

Plus the common person enjoys the fun features of Signal or other easy messengers, most decentralised messages do not have these features, are indefinitely working on them or make them not as easy to use, leading to most being uninterested in those messengers.

We have tried most if not all of them, than most and they are definitely lacking as much as we wish they were not. Decentralised encrypted (or partially encrypted) messengers always seem to have problems whether it's with their encryption, moderation tools, connectivity or the lack of other features.

[–] jimmy90@lemmy.world 7 points 4 days ago (1 children)

true but this is not yet easy enough for normal humans. selfhosting anything is not yet easy enough

[–] Lazycog@sopuli.xyz 10 points 4 days ago (1 children)

And is potentially even less secure if someone who has no idea about managing a server at all tries to spin up an online service.

[–] jimmy90@lemmy.world 0 points 4 days ago* (last edited 4 days ago)

yeah, with e2e encryption i guess you're ok as long as your mobile with the keys doesn't get hacked, but that's equally likely