Anyone who expects me to install yet another app for their garbage can kindly fuck off!

• Fix your shit and give me a compelling reason to even consider making an account in the first place.

I won't but seeing folks who actually take privacy serious and thus have their #cameras removed from their #Android device struggle makes me fucking angry.

• By comparison: @monocles / #monoclesChat has actually good #support and they don't ask for #PII like a #PhoneNumber and allow for #SelfCustody of all the keys.

Personally, I wished @delta / #deltaChat had a plugin for like @thunderbird / #Thunderbird so that it can be used as #Chat in it and sort the inbox. Would make it the superior solution for #corporations that already have #eMail #Archival setup for legal compliance…

@debby @monocles @Stuxhost well, @delta / #deltaChat is not using #XMPP+#OMEMO (unlike #monoclesChat & #gajim) but #PGP/MIME on regular #eMail, which makes it way easier to setup in organizations as "nit yet another server needed" and also easier to comply with mandatory #archival laws in #business use-cases.

• #Session & #Signal, like #Telegram & #WhatsApp, do not have their #backend opensourced nor allow #SelfHosting and demand #PII like #PhoneNumbers for registration if not useage for no valid reason. Plus they are not just able but obviously willing to snitch on their users (something neither DeltaChat nor monocles chat demand or even can as both do 100% #SelfCustody of all the keys!)

• As for #sustainability, monocles is financed by #subscribers (they charge like €2 p.m. for mail & chat) and they can be paid completely anonymously (#Monero & #CashByMail!), whereas #Signal is a #MoneyBurningParty which engages in #Shitcoin-#Scams (see #MobileCoin!) for no valid reason…

@debby #Mumble, #IRC, #XMPP (+OMEMO = @gajim / #monoclesChat) & #Linphone (#SIP / #VoIP) are the better options. #NextcloudTalk also exist and @monocles as well as @Stuxhost offer that.

• #Signal and #Session are #proprietary, #centralized, #SingleVendor & #SingleProvider solutions!

• And #Matrix is just a shittier #XMPP+#OMEMO. Give @delta / #DeltaChat a try instead.

OfC #JitsiMeet and #WebCall are also great!

https://webcall.timur.mobi

@kkarhan @ueeu @monocles It's true that #Conversations and its fork #MonoclesChat are reproducible today, yet they are not setup like this historically (signed by F-Droid). While we push for reproducible builds, these are not a must, but an extra check of trust.

https://f-droid.org/docs/Inclusion_How-To/#reproducible-builds

@ueeu I think crucial parts is looking at it's components, dependencies, size and for apps permissions.

• Also make shure it uses #OpenStandards, because #OpenSource can be just a "smoke grenade" when it's a #centralized, #proprietary, #SingleVendor & #SingleProvider solution.

#ReproduceableBuilds for example are important, so the actually released source code is what people actually get served as basis.

• Both of the latter points are something that @monocles / #monoclesChat does perfectly and that @signalapp completely fails at!

Plus in terms of #security, choose *real #E2EE with #SelfCustody of all the #Keys!

@mastodonmigration Obligatory reminder that #Signal relies on a centralized and proprietary server, and does not belong here.

Users of #WhatsApp #Telegram #Discord #Signal and #Threema etc should use #XMPP instead, which is #FreeSoftware and federated.

Users - check out #Quicksy (Android and iOS), #Prav, #Conversations, #Cheogram, #MonoclesChat, #Gajim, #Movim, #Monal...

Self-hosters, check out #Snikket.

Learn more with this user's guide -
https://contrapunctus.codeberg.page/the-quick-and-easy-guide-to-xmpp.html

@blog @sylv_a @viennawriter @signalapp dann doch lieber €2 p.m. für @monocles / #monoclesStarter oder einfach #monoclesChat mit nem XMPP-Server nutzen...

Alternativ zu #XMPP+#OMEMO gibt's auch noch @delta / #deltaChat, welches #eMail nutzt.

@rysiek @kkarhan @agturcz An awful lot of people say they've used #XMPP "a while back". But they're often unaware of the best of XMPP, and have an unfairly negative view of it.

Did you happen to try...

...#Snikket for hosting?
https://snikket.org

...apps like #Quicksy and #Prav which use phone numbers for easy onboarding, same as #Signal #WhatsApp or #Telegram?
https://quicksy.im
https://prav.app

...featureful clients like #Cheogram #MonoclesChat #Gajim #Movim etc?

@moh_kohn except @signalapp too is a #centralized, #SingleVendir & #SingleProvider solution that fully falls under #CliudAct and thus CANNOT comply with #GDPR & #BDSG as a matter of principle since this digital rquivalent of #ExtraordinaryRendition is inherently incompatible!

• Use #XMPP+#OMEMO & #PGP/MIME with #SelfCustody if all the #Keys for real #EndToEndEncryption that doesn't rely on a #VC #MoneyBurningParty.

@monocles / #monoclesChat, @gajim / #gajim & @delta / #deltaChat, @thunderbird / #Thunderbird do support that!

@ai6yr people need to fucking learn proper #InfoSec, #OpSec, #CkmSec & #ITsec and that means learning to proper use #XMPP+#OMEMO & #PGP/MIME.

• #Lazyness is not an excuse!

@tails_live / @tails / #Tails exists. @gajim / #Gajim exists. @monocles / #monoclesChat exists. @delta / #deltaChat exists. @thunderbird / #Thunderbird exists. @cryptoparty@mastodon.earth / @cryptoparty@chaos.social / #CryptoParties exist.
#Documentation in writing and videos exist.

• Only #SelfHosting-capable, #MultiVendor & #MultiProvider solutions that implement proper #E2EE & offer you #SelfCustody of all the keys can be considered #secure.

• Everyone who demands #PII like #PhoneNumbers, including @signalapp, must be seen as inherently insecure by design - espechally when they are subject to #CloudAct!

@Jenetrix well, #XMPP just works...

Try @monocles / #MonoclesChat and @gajim / #Gajim.

They just work and do proper #E2EE!

Otherwise consider #IRC for bublic chats and #SelfHosted #Zulip for organization chats...

@evacide NO, YOU CANNOT USE @signalapp@mastodon.world WITHOUT A PHONE NUMBER!!! *

They still require a phone number as they still do restrict the functionality of their App based off the phone number given!

Also we've all seen that #centralized, #SingleVendor & #SingleProvider solutions are inherently bad - so why should anyone use #Signal over #XMPP+#OMEMO or XMPP+#PGP/MIME ???

#Signal, like every provider in the #USA, is subject to #CloudAct ** and will obviously hand over the #metadata they collected without legitimate interest if told to do so. ***

After all, clients like @monocles ' #monoclesChat **** make XMPP w/ OMEMO and PGP/MIME extremely user-friendly...

Im many juristictions, you cannot legally obtain an anonymous prepaid SIM legally! *****


- - -

Sources:

* https://social.tchncs.de/@kuketzblog/111968247576555678

** https://en.wikipedia.org/wiki/CLOUD_Act

*** https://web.archive.org/web/20220112020000/https://twitter.com/thegrugq/status/1085614812581715968

**** https://f-droid.org/en/packages/de.monocles.chat/

*****
https://infosec.space/@kkarhan/111968383793566135