Vanadium is built specifically for security. It lacks privacy features such as an ad blocker
Currently I use the AdGuard DoH server. It's not perfect, but I don't do a lot of browsing on my phone. There were some plans to implement this in vanadium https://github.com/GrapheneOS/Vanadium/issues/10
Related thread here https://discuss.privacyguides.net/t/cromite-bromite-fork/13274 The main thing we find is Vanadium is not lagging behind upstream and it has hardening patches that a lot of other WebView implementations do not have. Whether you like a to "contribute to chromium based market share" you'll have a WebView implementation on your Android device used by apps you use. It's also worth noting that per site isolation doesn't seem to be a thing on Android for non-chromium browsers.
If the audits are public and they are actually funded with proper scope that may very well be better than some very small project nobody can be bothered looking at. I'm not saying having source is a bad thing, quite the opposite. Privacy is generally gained through security controls, and just because something is open source doesn't mean it is secure, likewise if something is closed source that doesn't necessarily mean it is insecure as this post describes.
For instance my phone number isn’t tied to my Matrix account
It isn't for anyone using any client unless they optionally decide to provide it.
They talk of Matrix being centralized but that only really applies if you use the Matrix home server, there are many alternatives
Indeed: https://joinmatrix.org/servers/ and that's not even getting started on the private ones or unlisted ones.
is it betetr than Discord for privacy and security ?
100% Discord has no privacy no encryption, the company sees absolutely everything.
Discord is clsoed source so nobody knows what it gives up or does in the background
That doesn't necessarily impact privacy, and we know exactly what it does in the background based on their privacy policy, which in itself is quite ambiguous in parts. They're quite happy there to admit they will tie identities together if you use social media logins and features like that.
No closed source program can be trusted over a FOSS option
I would say be careful here, because something is open source doesn't necessarily mean anyone cares about what the code is actually doing. In the case of Matrix it is a very active project with a lot of community engagement and a well thought out specification so that everyone can "get up to speed". That is extremely important. Nobody is going to sift through a tarball of source code "it's open source", if the development is not. It's also totally possible for a patched version to be running in production that doesn't reflect the source code.
That is why it's very important not to confuse FOSS with privacy.
As for the metadata leaking, while metadata is obviously available to the admins of the servers you and you recipient are using, these chat histories are not synced in their entirely,
Maybe so, but for a public room it really means nothing because they could just join it anyway. Every client has a copy. The point is neither system has deniability in terms of "I was never talking to this person". I do think there is more utility in Matrix's future with P2P accounts however, that don't depend on a single Matrix server and can be rotated. Anything you aim to be anonymous with should be regularly rotating accounts as we suggest. Take a look at XMPP: Admin-in-the-middle. Admins can get more than enough.
SimpleX chat addresses most of Matrix and XMPP’s shortcomings
Except there is no desktop client, and I'm not sure how it will work at scale. It does not have anywhere near the feature set of Matrix. The whole "spaces" thing is the beginning and I suspect they'll be doing a lot more there, specifically: "Spaces effectively gives us a way of creating a global decentralised filesystem hierarchy on top of Matrix".
I hope it can one day replace them.
I honestly doubt that will ever happen they aren't really competing products. Matrix is really meant for large scale networks, a bit like a whole social media platform, whereas SimpleX is more like a competitor to Signal or Session.
I would like to see Decentralised user accounts and I think they may be still looking at this because it would be nice to be able import your account somewhere else if a home server you're on shuts down or something.
Plus their unwillingness to open source it and not sharing the audits just doesn’t inspire my confidence.
The server side isn't open source, and you can't verify that is what is actually running in production. While we do recommend it I don't personally use their products.I like the use of email clients, particularly customized to my needs.
Nested folders was only a very recent feature added https://tutanota.com/blog/posts/subfolders and without that I wouldn't even consider a provider as I use this for organization. Of course as you can't use your own email client, downloading email from Tutanota can be a bit of a pain too, you can only export per-folder into Mbox.
which has been proven to be less than 100% airtight and secure.
I don't believe that has been proven. There has been criticism of it 1, 2 from prominent cryptographers though.
Telegram's MTProto protocol isn't obviously broken in a practical way, concedes Matt Green, a cryptographer at Johns Hopkins University who has consulted for Facebook on encrypted messaging systems. But it's uniquely "weird," he says, in a way that suggests its inventors don't understand tried-and-true cryptography practices and raises his suspicions that it may yet have undiscovered vulnerabilities.
Their response was even more dodgy trying to somehow inject some sort of "nationalistic", "america bad" into it:
Telegram's Ravdonikas argues that “Telegram encryption relies on classical algorithms, because we consider some approaches promoted by US-based cryptographers after 9-11/the Patriot Act (which your sources refer to as 'state of the art cryptography') questionable."
At the end of the day math is math regardless where it comes from. Secret chats also only work with the mobile client, have to be manually turned on and do not work for group chats and as it's a centralized server you can't host your own.
And with RFC 9420 aka Messaging Layer Security (MLS) being standardized, it's likely all the good messengers will use that.
Yes the article is FUD and sloppy. This is what Matthew Hodgson (Arathorn) had to say about it:
Talking of sloppiness, that hackea.org article is a huge steaming pile of FUD about Matrix.
For what it’s worth, the team who came up with Matrix was originally based in two separate startups: one in the UK doing VoIP, one in France doing mobile dev. Both got acquired by Amdocs in 2010, but we ended up forming an independent “incubated startup” first to build telco apps, and then we came up with the idea of Matrix in ~2013. We then built out Matrix until 2017 when Amdocs killed our funding, having run out of patience for what amounted to generous FOSS philanthropy.
We then set up New Vector (now Element) as an entirely independent UK/FR startup, and have received zero funding from Amdocs since. To be crystal clear: Amdocs has zero privileged influence or control over Matrix (or Element, for that matter), and has zero access to the Matrix servers we operate as Element. And besides - the whole point of Matrix is that you can and should run your own servers so you can pick who to trust, even if you don’t trust the project itself.
you have to attach your matrix ID to your phone number
Yes, this is FUD, it's not necessary, and entirely opt-in. Also you don't even need to connect to the identity server.
you’re referring is using XMPP without OMEMO
OMEMO encrypts text messages for VOIP you need DTLS-SRTP encryption or Jingle session encryption. OMEMO has no concept of cross signing, ie one device being trusted and therefore the others either if they do an authentication with each other. Device verification has to be done each session which is a massive pain.
warns you your message content is unencrypted if this is disabled
The point is that Matrix 1:1 calls are always encrypted and soon with MSC3401: Native Group VoIP Signalling 1:many VOIP calls will be as well. Having foot guns about what might be encrypted or not in a client isn't very private at all.
Also, XMPP has better (imo) and more numerous clients than Matrix on every platform except iOS and MacOS (No better XMPP client than Element on these platforms).
I've used Nheko and that's pretty good. Last time I checked the XMPP clients that existed had a lot of rough edges and feature inconsistency.
I definitely prefer an extensible protocol to a much heavier, metadata-leaking, less-feasible to self host solution like Matrix.
That is definitely your opinion, Matrix has shown to be very feasible in a commercial sense as there are many providers and commercial clients using it, french, german government etc. There are also quite a few clients using EMS. They claim: "Matrix is an open network for secure, decentralised communication, connecting 80M+ users over 80K+ deployments."
Which is probably a lot more than XMPP.
Matrix really can be quite lightweight enough that it will be entirely possible to run a homeserver locally in WASM which is what the Matrix P2P project is about. https://arewep2pyet.com/ has more details about that. It's also possible to have very light Matrix servers Breaking the 100bps barrier with Matrix, meshsim & coap-proxy. The reason that a lot of public Matrix servers are quite "heavy" is because they have many numbers of users, and activity. Synapse has also made huge gains in this regard to what it was originally, and we know that Dendrite uses a lot less resources (that I've tested privately).
With RFC 9420 aka Messaging Layer Security (MLS) it should be entirely possible to have large E2EE rooms without too much of a performance hit. Matrix is also working on MLS: A giant leap forwards for encryption with MLS. They have a site tracking that: https://arewemlsyet.com/
The point is a lot of testing and thought goes into these things.
metadata-leaking
You're pretending XMPP doesn't have metadata between servers, it certainly does it's really no more private than Matrix.
This is what Matthew Hodgson (Arathorn) - CEO of Element had to say about it in March 13, 2022:
Talking of sloppiness, that hackea.org article is a huge steaming pile of FUD about Matrix.
For what it’s worth, the team who came up with Matrix was originally based in two separate startups: one in the UK doing VoIP, one in France doing mobile dev. Both got acquired by Amdocs in 2010, but we ended up forming an independent “incubated startup” first to build telco apps, and then we came up with the idea of Matrix in ~2013. We then built out Matrix until 2017 when Amdocs killed our funding, having run out of patience for what amounted to generous FOSS philanthropy.
We then set up New Vector (now Element) as an entirely independent UK/FR startup, and have received zero funding from Amdocs since. To be crystal clear: Amdocs has zero privileged influence or control over Matrix (or Element, for that matter), and has zero access to the Matrix servers we operate as Element. And besides - the whole point of Matrix is that you can and should run your own servers so you can pick who to trust, even if you don’t trust the project itself.
Then why post it and spread FUD?
Deleted by Mod.
People please try to remember the rules about substantiating your content/posts.
Basically the same thing.
Encrypted DNS is not for privacy, it is for stopping someone from altering your queries basically, because normal DNS is not encrypted. Domains are exposed through other various methods we explain. Please see our website where we've gone to the effort to explain this https://www.privacyguides.org/en/advanced/dns-overview/ we have a flow chart that characterizes the above methods of obtaining the domains you're requesting.