• 3 Posts
  • 20 Comments
Joined 4 years ago
cake
Cake day: February 7th, 2021

help-circle

  • How on earth do you think the various Matrix clients are “this is for nerds” like and buggy? How do you come to this statement?

    if you don’t even see the problem, I am not even sure it is worth to try to talk about it… ex. a private 1:1 chat in Matrix is a “room” the whole experience of starting a private chat with your mom is a series of “foo invited bar to room”, “bar joined the room”, etc. besides easy to end up in a state where not even you can read your own messages the famous “unable to decrypt”

    Signal can be based on Useraccounts without phone numbers as well.

    Signal depends on phone numbers, if you are talking about setting a nick-name (which Telegram supports since ages) that doesn’t mean anything a phone number is still required, just as in Telegram, and it is not an argument against my point that talked about the need for a SIM card.

    And the registration process tbh is a pro and non a con

    it is a con, period.

    if you don’t provide a secured process you will be run over by bots at some time.

    bots are supported and welcome, just as on Telegram, bots can’t spam people because, unlike on Signal with the phone numbers problem, in ArcaneChat people can’t just write to you randomly, they need your contact’s invitation link. Also in worse case, migrating your address is possible and cheap, you can have many accounts as you want and also create accounts temporarily to interact “in the wild”

    Is that feature audited?

    yes, ArcaneChat is a Delta Chat client, and the Delta Chat app and core has received several audits (six over the past of years so far), any Delta Chat client using the Delta Chat core benefits from the security audits, you can read about it here: https://chaos.social/@delta/113963707915543266 unlike many of the mentioned clients that don’t have any known security audit at all?

    BTW: Furthmore your website does not confirm with German legal requirements and makes you an easy target for bad faith lawyers,btw.

    could you tell me what is wrong with it? my address is show in the terms & privacy policy / GDPR, but I admittedly am not well informed in German law topics, so if you could point me in the right direction I would be really grateful

    post-data: please don’t read my reply as a aggressive discussion, I am just providing arguments, not trying to fight unknown people in the Internet, and I appreciate you took your time to reply, have a nice day!


    1. if they leaked something you wouldn’t know because US government law doesn’t allow them to disclose if they requested data.
    2. uses AWS servers that also the gov could ask for access to Amazon directly without even talking to Signal, being centralized and depending on AWS infra is also a weakness.
    3. needing phone numbers to register, often tied to passport and it is super easy to get your whole network when compromising 1 device
    4. all centralized services start nice, attracting users, once they have you, and money starts being a problem… meet: enshitification








  • There are a lot of reasons for each of those will try to provide some at a glance:

    SimpleX, XMPP, Matrix: The client is more user friendly, less buggy and less “this is for nerds” UI than the clients of those networks, ArcaneChat is more on the WhatsApp-like UI

    Signal is centralized, depends on phone numbers so can’t be used by children in the family that don’t have access to SIM card yet etc. Registering in Signal is also more complicated, SMS verification, solving captcha etc. No good multi-account and multi-device as ArcaneChat.

    Groups in ArcaneChat are managed independent of the server while in XMPP they are created on a given server and if the server dies the group is lost, while in matrix a lot of group state is replicated and tracked by the servers, in XMPP is easy to end up with unencrypted groups and in Matrix you often get “unable to decrypt” and emoji reaction are not even encrypted, ArcaneChat groups are always encrypted and safe against MITM (green checkmark displayed in the group name)

    ArcaneChat has in-chat mini-apps that work independent of any server, communication is only between chat members and e2e encrypted, for example collaborative editor in chat, shopping list, split bill app, several mini games with shared scoreboards etc.

    ArcaneChat works offline-first unlike many(all?) of the previous mentioned apps you can even create groups while being offline use and modify the in-chat apps and all state will be synchronized when you are back online. The app also works in slow and unstable connectivity when most of the other mentioned apps would simply not manage to connect.






  • Yes and no, it allows to login without providing any data or using any email account, in that case a random/anonymous account is created in arcanechat.me which is an email internally but optimized for chatting with similar speeds of other chatting platforms

    Also with arcanechat.me server unencrypted messages are not allowed at all so you can be sure you don’t accidentally leak any message, also all messages are removed from the server immediately after downloading them (or after a few days when using multiple devices)





  • no, there is no important metadata leaked via headers, the only obvious data the server knows is the same as on Matrix and XMPP, when you tell the server to deliver the message to a given user, the server hence knows that X sent a message to Y, but since accounts are randomly generated email addresses without any personal data tied, this is more secure than Signal where phone numbers are collected by a central server and if they wanted to they can match your IP to your phone number even if you use sealed sender to send it is obvious who you are by your IP and timing since you also connect to the server non-anonymously to receive messages



  • the app is much more on the WhatsApp and Telegram level UI wise, much more user friendly for “normies” like family and friends, while Matrix and XMPP are more “nerdy” and hard to understand and onboard

    Nice multi-device (that actually works without encryption problems) and multi-account support.

    Security-wise it is easy to end up sending unencrypted messages in XMPP (groups are often unencrypted due unusable otherwise) and in matrix it is also a mess with “unable to decrypt” and the reactions are not encrypted. ArcaneChat groups and 1:1 chats have a concept of “protected chats” via scanning QR or invite links that are warrantied to be e2e encrypted and safe against MITM attacks.

    Groups in XMPP depend on the server, if the server dies the group is lost, in Matrix the groups metadata is spread across several servers, in ArcaneChat the servers are agnostic of the group state, the group lives in the users’s devices and hence don’t depend on any server, user can even migrate account/address and keep participating in the group

    The server requirements for ArcaneChat are super lightweight (ex. https://arcanechat.me/ has +700 users right now and it is only using ~500MB of RAM and ~3GB of disk) in this regard XMPP might also be similarly lightweight but Matrix is well know for the complexity and requirements on the server

    ArcaneChat is offline-first, you can fully use the app while being offline, even create groups, search across all your groups, messages and contacts, play in-chat mini-games or use collaborative tools like in-chat WYSIWYG editors etc. send messages etc. and all will be nicely synchronized when you go back online.

    ArcaneChat is super lightweight, apk size in google play is only 13-15MB while being feature rich and beautiful

    creating bots to provide extra functionality (similar to telegram bots) is easy and there are already several bots available and discoverable in the app.

    Now lets talk about some downsides:

    ArcaneChat doesn’t support integrated phone calls at the moment (but it is planned, and it has jitsi meet videocall invitation integration)

    ArcaneChat doesn’t support discoverable public groups or channels (it is an app for private chats, you can invite people to group via invite links tho, and telegram-like channels are in the roadmap) a public bot can be used to list and join “public” groups tho, but at the moment everyone in the group is admin, there is no group admin concept as groups are private

    there are more stuff to say but this post is too long already 😅