Post B9Gtv1AUL9PfYqIdLU by JBrickelt963@framapiaf.org
 (DIR) More posts by JBrickelt963@framapiaf.org
 (DIR) Post #B9GfpbDzyG3AIDSndQ by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @dansup I'm in several different signal groups that also share threat intelligence
       
 (DIR) Post #B9GtNMdk0BkmJCw1h2 by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 @dansup please describe how one would use fediverse apps to *securely* process confidential intelligence
       
 (DIR) Post #B9GtUdOm5ml4JOOwTo by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 @dansup (this isn't to say that discord is suitable for purpose either, but fediverse is simply not appropriate for sharing confidential threat intelligence in its current state)
       
 (DIR) Post #B9GtX6Wskv9ZEqN4rI by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne @dansup Not necessarily on the Fediverse, but there were so many other options: Signal, Matrix, etc. Discord, really?
       
 (DIR) Post #B9Gtv1AUL9PfYqIdLU by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne @dansup I’m not saying that the Fediverse is suited to this either. Not at all, given that the protocol is designed to be interconnected and visible on the web.But Discord, really? Is there really no open-source solution or one within the free software ecosystem that could have been chosen?Matrix or Signal would have been more consistent from an ethical standpoint. Other, more ethical solutions for encrypted conversations could have been far better.
       
 (DIR) Post #B9Gu7y3rCeElgoNAzg by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 why would Signal, whose backend server is proprietary, be more ethical than Discord?why would Matrix, whose E2EE encryption implementation is unsuitably fragile for production use, be more secure than Signal?
       
 (DIR) Post #B9Guyx3Pg6ltuiQhsG by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne Why? Because it’ll already be better than Discord, for a start. I’m not claiming that either one would actually be better suited to the need.But whilst I can understand the concerns about Signal and its central server, I don’t yet see why Matrix would be unsuitable. A Fediverse admin ‘space’ – you can set it to invitation-only mode; and, just like Discord, you can add channels.Could you elaborate on exactly what would be unsuitable about E2EE for a Fediverse moderator group? 1/2
       
 (DIR) Post #B9GvLENLxQHu0TNdBY by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 because matrix E2EE is fragile.  have you not seen basically everyone memeing about "unable to decrypt message"?
       
 (DIR) Post #B9GvlkNtZXYcoEHHH6 by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne Seriously? Is that really the only reason?? It takes two seconds to download the recovery keys to decrypt messages on any device. I’m a bit sceptical that this is the only reason for not choosing Matrix. But I’m all ears.
       
 (DIR) Post #B9Gvxh5ldgLW4aUlOa by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 well, i mean, if you want to go deeper than matrix's encrypted UX being too fragile, the underlying metadata and things like reactions are not encrypted at all.which is bad, by the way.  very bad.
       
 (DIR) Post #B9GwvrbzeiQO4gGATo by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne 🤔 I admit I don’t know how things stand with reactions and metadata on Matrix. That said, I remain convinced that there are other, more ethical alternatives to Discord in the free and open-source world. A quick search on AlternativeTo brings up: Olvid (which had a contract with the French government), Tchap (developed in France and based on Matrix), Adamant Messenger, Armada, Quiet Chat and i2p. I don’t know how good they are.
       
 (DIR) Post #B9GyqOWQaDcUJZAzbM by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 we agree that Discord is not appropriate for processing confidential information.my problem is with the pivot to Matrix, which is also not appropriate for processing confidential information.
       
 (DIR) Post #B9GzYlMd1DNRtokVlI by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne "We"? I’m sorry if you’re part of the group and felt offended by my initial messages. I realise I’m not in the best position to understand the need for this sort of use.If more effort were put into reactions and metadata, would you consider this a tool that could be used in this sort of situation?Alternatively, perhaps we could find a decentralised messaging service that uses Signal’s encryption. I’m not sure how important the encryption of metadata and reactions is to moderators.
       
 (DIR) Post #B9GzmLuQSKiJ0T2OLA by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 we are not part of the group, nor do we have any desire to interact with anything with such delusions of grandeurwe sometimes use plural pronouns to refer to ourselves because we are plural
       
 (DIR) Post #B9H0FpZjEkK7PdPfs0 by JBrickelt963@framapiaf.org
       0 likes, 0 repeats
       
       @ariadne Oh, OK, sorry. No problem ^^
       
 (DIR) Post #B9H0Nca7QmcrQiJJ2G by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @JBrickelt963 as for your question: maybe.  but we would require a lot of convincing to accept an E2EE retrofit as suitable for processing confidential data.
       
 (DIR) Post #B9H9n6EfDMbsE8Uz56 by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @dansup by threat intelligence I mean sharing intelligence on fediverse trolls