#cwtch — Public Fediverse posts

@cwtch I prefer the self reliance of p2p over the centralisation in SimpleX but SimpleX has quantum resistant encryption so I will continue to main that for now

#SimpleX #P2P #Cwtch

Fuck #Signal. There are so many articles from different sources online that make it sound like they can just redirect new messages sent to the account to someone else at any time they want. I wish I could test it for myself, but I can't even get past the HateCAPTCHA.
Just use #XMPP, #Matrix, Delta, Session, #Cwtch, SimpleX, or many others...
Yes, I'm aware that for many of those protocols, the server admin can just delete or intercept one's account at any time. But it's more decentralized, so it's safer (vs one big silo like Signal).

« #SimpleX busca reducir la exposición de metadatos eliminando identidades globales. #Cwtch se centra en dificultar la construcción de grafos sociales y en limitar la información disponible para el análisis de relaciones. #Briar prioriza la continuidad de las comunicaciones incluso bajo condiciones de censura o interrupción de infraestructura. #TinfoilChat, por su parte, se preocupa por escenarios donde el propio dispositivo ya no puede considerarse completamente confiable.»

@sarahjamielewis

Almost as ridiculous as requiring age verification to boot an operating system.

Okay, it's even more ridiculous

#FOSS #Privacy #Cwtch #SimpleX #p2p #e2ee #Nimrods

⛵

RE: https://mastodon.social/users/sarahjamielewis/statuses/116716370524884893

Hi, has anyone figured out how to run #cwtch in "headless" mode? I'd like to run a CWTCH server on a server, without the UI.
#privacy #messaging

@R3yScale @cwtch I would love if cwtch could replace simplex, fascist project maintainer and cwtch is more decentralised and censorship resistant

All it would take I think for me to say the switch is worth it would be quantum resistant encryption and new cryptographic identities in every chat (perhaps a different tor address for every new chat)

I also need to compare the deniability features - simplex has a nice hidden profile feature

#FLOSS #E2EE #PSA #Privacy #Anonymity #Cwtch #SimpleX #Tor #Deniability

I like how people are recommending a bunch of FLOSS messengers now, its an opportunity to check out underrated projects like I just a few minutes ago learned about the FLOSS project Quiet (https://tryquiet.org) from a discord community trying to relocate.

The website says its all E2EE P2P with tor built in, channels like slack/discord, no email or phone number required. Unfortunately no quantum resistant encryption on the roadmap so I still would recommend SimpleX for general purpose instant messaging but Tor-by-default and P2P are genuine advantages over Simplex

If you found this post interesting you might also be interested in these decentralised encrypted messengers with various pros and cons compared to eachother:

Cwtch
https://cwtch.im
http://cwtchim3z2gdsyb27acfc26lup5aqbegjrjsqulzrnkuoalq5h4gmcid.onion/

Briar
https://briarproject.org/

Meshtastic
https://meshtastic.org/

#FLOSS #E2EE #PSA #Privacy #Security #Anonymity #Deniability #Meshtastic #Briar #Cwtch #SimpleX #Quiet #P2P #Tor #Slack #Discord

@delta deltachat is high on my list, but I've gotta give the crown to #cwtch - one of the most straightforwardly-obvious "this is a significant step better than others" chat systems I've seen in a very long time, possibly ever.

@escape_velocity

Thank you for being the only other person I see on my feed talking about simplex its refreshing

Imo its the gold standard in private anonymous group messaging. Better than Signal, briar, cwtch, deltachat, meshtastic.

All of them have some benefit over simples whether it be signals ease of use and stability, briars ability to share the binary over bluetooth, cwtch's simple in-app gui for self hosting, deltachat's interoperability with email, or meshtastics resilience in mesh networks.

But only simplex has no profile ids, quantum resistant encryption, advanced invite/multi profile management, as well as being decentralized

I think that especially anarchists and activists should seek this level of privacy because compromised contacts can have their conversations with you be corroborated to show you are the same person when you have a static id even if its a random string

Since I don't get to talk to people who use simplex much I should mention why I dont talk to the people in public simplex rooms: it skews far right because the creator is a trans hating[1] climate denier with a bunch of other right wing beliefs I cant remember, you know the usual.

That being said the developers have very little control over what happens on even their own servers: they can disable invite links they dont like but not rooms (invites can easily be regenerated), they can remove file links that get reported but not messages, (files are deleted after 48h anyway bc its a relay network they cant delete it when group members have it cached) and if either of these are hosted on another simplex server since its decentralised they cant do anything

except ig the nuclear option to totally cut connection to stop their own users connecting to users on that other server. but simplex is fairly simple to self host, we should be moving away from the official servers anyway

[1]
https://x.com/epoberezkin/status/1881832239186759841

#Simplex #FLOSS #E2EE #PSA #Privacy #Anonymity #QuantumResistantEncryption #Transgender #Climate #ClimateDenier #Signal #Briar #Cwtch #DeltaChat #Meshtastic

#threema wurde verkauft

scheint immer mehr darauf hinauszulaufen dass die einzige möglichkeit für privacy bei #messenger ist, das zeugs selbst zu hosten 🙄

oder p2p messenger wie #cwtch zu nutzen

@sarah Okay if simplex is off the table my next favourites are Cwtch, Briar, and Meshtastic they each have different use cases but none have quantum resistant encryption so if I had to ditch simplex I might have to use Signal the only other messenger I know to have quantum resistant encryption but I'd had to weigh that against the anonymity problems with signal

#PSA #Privacy #Anonymity #FLOSS #E2EE #Cwtch #Signal #Simplex #Briar #Meshtastic #QuantumResistantEncryption

@neil This is why we need decentralised e2ee apps like Simplex Meshtastic Cwtch Briar Deltachat, become ungovernable

#FLOSS #E2EE #SimpleX #Meshtastic #Cwtch #Briar #Deltachat #Anarchism

@juliette Teens will just move to decentralised open source encrypted apps where they can't be policed. And I'm not talking about fediverse where individual instance owners can potentially be held accountable I mean stuff like SimpleX Cwtch or Briar

#SimpleX #Cwtch #Briar #FLOSS #E2EE #Fediverse #SocialMediaBan #YouthLiberation

@DreamAcademy I would really like to know what people think about @session and @cwtch.

#session #cwtch

"Here you'll find reviews and research about services and how they affect your #privacy both in person and online backed by real world findings and data collected from testing"

Some apps analysed include: :discord: :matrix: :telegram: :wechat: :xmpp: :whatsapp:

🏆 @simplex (@threemaapp seems to be an undisputed winner on other lists)
🥈 @briar
🥉 @cwtch

https://privacyspreadsheet.com/messaging-apps

EDIT: this info is controversial (see comments)

#matrix #telegram #xmpp #signal #whatsapp #threema #wire #zoom #CWTCH

@cwtch Is there a group on #cwtch to join for discussing the direction of the project? I would like to ask for #QuantumResistantEncryption as this is one of the things that keeps me from switching from #simplex but I wasn't sure if asking here was the best place

If you would like to establish an anonymous channel with ITN, visit https://fifthdimensionnews.substack.com/about for how to start an #anonymous #chat with #Cwtch or #Onionshare via #Signal

First, use Signal to send Cwtch onion address
(in #Go but client is more user friendly and no Javascript)
and/or Onionshare onion address
(in #Python and updated across platforms but requires JS) and private authorization key or vice versa

and to send time for chat
[date, hour UTC-0/GMT]

Signal inbox is checked at least every few days.

then, metadata resistant chat with #Tor onion E2EE can commence at scheduled time

http://docs.lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion/2.6.3/en/features.html#chat-anonymously
https://onionshare.org

@avoca @mcc i didnt mean for it to be, but #session relies on a #cryptocurrency for the network to function so it shouldnt be on the list anyway, its just a way to start thinking about the different categories of encrypted messengers, #deltachat and #simplex would either be categorised alongside federation or be in a category halfway between federation and peer to peer, #cwtch and #meshtastic would go in the p2p section

@sparklepanic Signal's centralisation makes it vulnerable to state subpoenas, decentralised messengers on the other hand cant be fully compromised because the idea is theres no single point that can be forced to give up info such as ip logs or connection times and of the decentralised #FLOSS messengers I'm aware of (https://simplex.chat https://matrix.org https://briarproject.org https://delta.chat/en/ https://cwtch.im, https://getsession.org) only simplexchat shares quantum resistant encryption with signal, it even uses the exact same double ratchet algorithm that #signal made open source #simplex #matrix #briar #cwtch #deltachat #session

If you would like to establish an anonymous channel with ITN, visit https://fifthdimensionnews.substack.com/about for how to start an #anonymous #chat with #Cwtch or #Onionshare via #Signal
First, use Signal to send Cwtch onion address
(in #Go but client is more user friendly and no Javascript)
and/or Onionshare onion address
(in #Python and updated across platforms but requires JS) and private authorization key or vice versa
and to send time for chat
[date, hour UTC-0/GMT]
Signal inbox is checked at least every few days.
then, metadata resistant chat with #Tor onion E2EE can commence at scheduled time
http://docs.lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion/2.6.3/en/features.html#chat-anonymously
https://onionshare.org

#Tech #News #Dialogue #Chat #Encryption #Anonymity #Source #Info #Crypto

No, #SimpleX for real privacy! Check: privacyspreadsheet.com github.com/du82/privacyspreadsheet.com = 100 #SimpleXChat = best privacy #Messenger 85 #Briar 81 #Cwtch 72.2 #Cabal 69.6 #Signal 61.5 #Status 56.5 #Wire 55.2 #Session 52.2 #Matrix 47.7 #IRC 46.5 #Threema 43.5 #iMessage 41.3 #XMPP

privacyspreadsheet.com

How are your Guards doing with your NickServ correlated with your Tor chat?
#Cwtch looks a lot better as a messenger. It just needs the #Rust !

Have you ever tried to get a rusted bolt loose? Might as well be written in weld.
-----------------------------------------------------------
How many people still use #IRC ? Is it considered trusted and a known quanity because it has been arround for a long time? #Whonix removed it because it is unmaintained. #Tor blog mentions Hexchat in the #oniux announcement. You will have troubles authenticating and never get to the Palladium #onion if you try oniux hexchat. #old or #new : who to trust? When it comes to technology, treachery of the old and fidelity of the new?
@torproject - what works:
oniux element-desktop
https://forums.whonix.org/remove-hexchat-unmaintained
https://github.com/whonix/anon-meta-packages
--> logs out of Matrix server frequently, though. #Cwtch just needs #Rust instead of golang ; )

But to have oniux, you need #Debian #Trixie and Whonix is still stable.

#Pidgin is still maintained

#anon #Matrix #encryption #privacy #security #messenger #chat #Element #Libera #Verification #Anonymity

I really would like to have a better understanding of the differences (not so technical, but also pros and cons) of decentralised messaging services, in comparison

@cwtch I really would like to have a better understanding of the differences (not so technical, but also pros and cons) of decentralised messaging services, in comparison:
@cwtch
@element
@delta

Do you know if that exists?

I'm on @signalapp , love it, but I realise that another centralised solution might not be the ultimate solution...

And I need to think wisely before bringing all my people to a new platform 🙃

Thank you!

#cwtch #matrix #deltachat #signal

@miramarmike Love this. Yesterday, my love arrived home following a week away at a conference. I spent the last week mostly on my own, recovering from surgery. Last night's hug, in the car port before she's even reached the house, was the best medicine I've had all week.

#hug #cwtch #goodmedicine

@uhuru
#DeltaChat has no forward secrecy.
And depended on SHA-1 and using MD5.
Both are considered weak cryptography if I'm not mistaken.
While I believe deltachat to be a great app with good use case, it's not what I'm looking for.

#xmpp ecosystem is?/was! pretty bad in serving proper e2ee cross platform implementation.
Till recently there was only conversations as a usable app. Since some weeks ago it seems that @dino now also offers e2ee by default. But also both conversations and Dino using an outdated omemo specification, and are by that not compatible with @kaidan.
I will reconsider xmpp when they adapt the newer specification.

@briar not mentioned, but also no, cause it's not working on #TailsOS or on android with Orbot.
So very much unusable, since it's not running on the platforms we use.

#simplex, no, I don't like nor trust the dev.

#cwtch, yes, maybe

Heddiw nes i ddarganfod bod protocol/ap negesu o'r enw 'Cwtch' #cwtsh #cwtch #cwtchapp #Cymraeg

https://docs.cwtch.im/