Scolding0513 @ Scolding0513 @sh.itjust.works

Posts

0

Comments

286

Joined

1 yr. ago

agreed, i liked that session had out of the box alternative routing, but a basic vpn + simplex's new private routing knocks down one of my final gripes with the app.

although, i guess my only other gripe now is that using your simplex profile on both desktop and phone is either hard as shite or totally impossible.

No. No no no no no no no NO. Do NOT federate with big tech. good lord people simply do not learn their lesson.

https://ploum.net/2023-06-23-how-to-kill-decentralised-networks.html

https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguish

please dont say privacy focused then drop a google play link 😂

i havent looked deep into the protocol, so i cant argue.

A dedicated webview on fdroid would be cool, for those of us that dont keep cookies and such

the benefit is that it uses the existing email systems, and doesnt require account or data storage with other services

agreed, this is an amazing way to get people to use something secure without having to make "yet another account"

less flexible? explain

all good points.

yeahh i completely forgot that oxen is a monero fork. damn, the concepts behind the network were really good, the ideas and everything, and had a huge amount of potential, but just terrible choice after choice althroughout the implementation. sad indeed.

imei rotation would be the best feature

😂😂😂😂

look into switching the fam to SimpleX. much more reliable.

ente, bitwarden

The concept behind Session is nice, but the implementation is poor. im gonna give a full review here for future generations and their posterity and all that, since I have a lot of experience with it.

First if all, their org is based in Australia, one of the worst countries on earth for privacy. They have openly admitted that the government there can secretly force them to ship backdoored binaries and packages. Huge red flag.

Session runs on the oxen network, an onion relay that runs on crypto stakes instead of straight up volunteering. however, a node requires 15000 OXEN tokens to run, which currently is about 2500USD. in the past it was much more expensive. so the barrier of entry is high. you can say that it makes it more secure or less sure. i think they should lower it now that sybil attacks are much less likely, with most of the tokens locked up in nodes.

The oxen network is SLOW. I mean really slow. For conparison, try running both SimpleX over TOR, and Session, side by side, for a few days, you will notice a huge difference. Trying to message someone in Session is a crapshoot. you will either wait 1 second or 10 seconds for message delivery, sometimes more. I've experienced message delivery times of up to two minutes. Face paced messaging is not a thing.

the oxen network can stored messages for up to two weeks, and this is nice for that centralized app experience while being a decentralized app, when the sync works correctly. but also it may be uncomfortable for some people to keep them stored on-chain.

User experience is ABYSMAL in the long term. Device sync, message deletion, file transfer, just to name a few things that are buggy as hell, confusing, or plain dont work half the time. im not gonna go into it, let's just say that it can get sucky in the long term, weird stuff happens. messages may not be truly deleted either. And of course, we have the slow message delivery, among other little stupid bugs. it's definitely not a "just werks" app.

The UX is made worse by the fact that their apps are just poorly maintained forks of Signal. the phone app is okay I guess. the desktop app is worse. The desktop signal app was already not that great, just thrown-together Electron garbage. but Session didnt even bother to make their own electron app. And electron is extremely insecure by the way. and slow. not what you want for secure messaging. also the electron version hasnt been updated in a while, so there are many zero days in both signal and session apps. signal and session both screwed up on this whole thing.

Also somehow even though Signal accomplished it themselves, Session couldn't seem to accomplish Perfect Forward Secrecy while also keeping multi-device sync. Generally everything about the Session team screams "we aren't that smart"

Session has two notification settings, one is for google cloud messaging which does work with MicroG too, the other spins the app up once in a while and checks for messages. both of these have been unreliable for me in different instances though, especially in work profiles. but in main profile with microG it's actually 90%+ reliable to be honest.

Session has some good points. There are no signups obviously. The Session ID / User Id model is easy for newbies to understand. easier to share than a long af SimpleX link. even if buggy sometimes, you can easily link your ID with other devices and message from them, which is something that is not easy with SimpleX currently. it also provides you onion routing out of the box without having to run Orbot in the background which takes up a decent amount of battery power.

Recently-ish, Session/Oxen team announced that they are going to make a network overhaul at some point. Yet despite having built nothing at all yet, they have already minted an erc20 token and begun presales and all the usual crypto token bullcrap that comes with the standard scammy overtones of a lot of crypto projects and random eth tokens. It's pretty sad.

Overall, session is decent out of the box for a quick need but not for long term stable UX.

cash

it wont even load

looks like you'll have to get some exercise and lift your wrist to the chip reader 😭 sigh..

that would be pretty bad if it could. but no, there are no known ways to break luks encryption afaik.

never have a Windows partition on the same machine as an unencrypted ext4 partition/drive!! or any other unencrypted drive for that matter. Windows is fully capable of accessing them and sending data about your personal files back to Microdick HQ

i dont blame you. GL-inet routers have always seemed so cool to me. always wanted to get one.

paired with the blue merle firmware it would be a godlike setup

https://github.com/srlabs/blue-merle

but i think blue merle is not being maintained anymore.. is there any other firmware with similar functionality? like imei rotation, mac randomizer, etc? that you know of, even for similar hardware