Retroshare uses several websites by default to find users IP adresses, but you can disable that and use each other to discover other users, but for that at least one user has to always be online.
Software that really cares about privacy and freedom should give you an option to host your own server and an option to disable that feature alltogether.
With XMPP and IRC you can host your own server, but it is not actually easy to do, the only program I know where it is easy is mumble, where you just launch the executable and your own server is online.
Especially since smartphone users are basically always online I see no need for a central server, if you have a bigger friends list you could even use each other as server, so that no outside connection will ever be made.

>>12170

> Most smart devices collect all data by default and then send it somewhere to someone, so of course there is no need for a backdoor, because everything that can be spied on is already spied on by default.

And most windows doesn't? man you don't still understand what i am talking about, after explaining so many times, i have mention it literally 2 times already, now it is the third time i am saying, just use wireshark for god sake 🙏 and see how much data is actually being collected by DEFAULT (results may differ depending on the phone).

> Backdoors are usually used all the time, what is the point in having a backdoor, if it is not used?

Again this goes completely against logic of a reasonable mind, just why would they use backdoor all the time? Wouldn't that make way more likely for it to be caught? Backdoor keept for people who actually threatened their existence not for normal people, for all we know there is they can RCE through Intel management system but it's probably not used very often.

> It is not yet reviewed on shadowiki https://shadow.lifestyle/im.xhtml

Jesus Christ, is it really that hard to do research by yourself? Like this guy isn't going around and reading the source code and making this list, all he is doing is looking whether the software is open source or not, is it decentralized or not? And maybe checking all the connections that the software makes through Wireshark (4th mentioned) and past reputation, and IRC is not even decentralized but all of that aside do you really need approval of fucking "shadow wiki", i mean nothing against the guy he's work is decent but man considering how much you care about decentralized and anonymity, you should be well equipped with the knowledge to judge software by your self and so far there has been no valid criticism you have made at all, all i have seen from you is "ohh downloading problems, age verification, QR code, AGPL BAD"

All of which turns out to be complete bs as i have explained in my previous replies.

A desktop computer does not have a microphone or a camera build in, so regardless of what you install on it, it will not record you and take pictures of you.

It also is not capable of wireless connection to the internet, you need to plug in a cable, so if you do not want to, you can prevent data being send.

When you have a cable you can run Wireshark and see what is being send, with a mobile phone you actually would need a device that can intercept wireless communications to really check what is send.

Also a Desktop Computer does not track your location whereever you go, since it does not come with you.

Maybe Windows also requires an internet connection now to work, but no idea I have not used it in a while. Anything from Microsoft or Apple should not be used. Windows is actually superior to Linux in some ways for example it having a firewall. In the past it was also common to have a separate firewall installed on WIndows so you could control every internet connection for every program, but most of those firewalls have been discontinued.

>>12183

I think your understanding of how simplex works might be completely flawed because simplex in every way is better than XMPP and difinitely IRC.

> it seems that it relies heavily on it's centralized servers to discover other users.

That is completely wrong, i think your issue might be related to this issue, you can create use your own domain name for sharing your account as explained in the docs, there is no global ID for account sharing or no central register or anything.

>>12224

> A desktop computer does not have a microphone or a camera build in, so regardless of what you install on it, it will not record you and take pictures of you.

Well it doesn't matter when Microslop is actively pushing to record your screen, does it? And most motherboards have built in wifi card now days, this Desktop vs Phone wasn't even my point, my point was default trackers on Windows vs Android, there is no actual point in comparing features of smartphones and a desktop pc because they are made for different use cases

> When you have a cable you can run Wireshark and see what is being send, with a mobile phone you actually would need a device that can intercept wireless communications to really check what is send.

it is so easy to setup your own VPN and then route your phone network through the VPN and the capture traffic on server end (which is what i do now) but the most easy way is to probably turn your laptop or PC into wireless access point or you can root the phone (which what used i to do)

> Anything from Microsoft or Apple should not be used.

I completely agree with this, the same goes for Android but with android you still have lot of choice, with different manufacturers, different chip makers, different phone makers with different roms and privacy settings, the whole rom/rooted android scene.

>>12228
What is the point running a computer to then route your phone through it why not use the computer directly?

>>12230

Tf you mean?? You don't run wireguard??? No self hosting?? No pi hole???

Bro do you really care about privacy or are you just pretending to care cause its cool and you think you are fighting the matrix??

In what world are you living? everyone is who actually care about privacy is probably like me running their own dns server and probably routing all of their devices network traffic through Wireguard or Tailscale (yeah ik Tailscale is corporate but i have used in the past and really i like their networking magic),

Damn i think i should stop this bullshitry, cause its getting tiring at this point, in this whole thread the only guy who said anything worth noting was the guy who said "i think XMPP is good enough".

Just use XMPP , I don't give a shit anymore about joining niche little platforms when XMPP is a secure decent option that works and works well on multiple systems with various clients. It reminds me of the days of people hopping between Team speak , then Ventrilo ( Whatever that was called ) , Discord. XMPP is simple

After thinking about this thread.
OP Is either a glowie because he knows XMPP Is the better based option and wants us to join some potential backdoored app or OP Is a shill for the app , and yes I'd call it what it is.. a closed source phone app.

I will wait till some experts reviewed it like shadow wiki or so.

>>12284
For voice conference software mumble is the best option, but you have to trust the server hoster, since theoretically he could run modified code.

Idk i see lots of "experts" recommending it:

• Comparisons of messaging apps by eylenburg
• Security review by Trail of Bits
• one of whonix wiki recommendations
• OPSEC Bible recommendation

First link is dead and those are not real experts from the internet.

>>12308
First one is "https://eylenburg.github.io/im_comparison.htm" my bad

> those are not real experts from the internet.

Holy f and shadow god damn wiki is?
whonix and OPSEC Bible are well respected and trail of bits are literally do cybersecurity research firm, meaning these guys actually have j*b and skills then some "shadow wiki".

Here is a summary of what happened in this thread:

> Abdul Lateef Jandali himself (a.k.a Steve jobs) makes a proposal
> Retard kid makes retard clams without any knowledge
> And Steve jobs being Steve jobs does what he does the best.

Honestly this whole thread is pathetic but i do think retard kids are ruining The Cyberix Network experience and mods should start banning retards like they used to do, otherwise Cyberix will just turn into another forums filled with retards.who just argue all the time and have nothing good to offer.

>>12307

Also the link for whonix is wrong, the actual link is: https://www.whonix.org/wiki/Chat#Recommendation

Do you know why people prefer XMPP over other programs? Because it's stable, well-documented, and highly compatible across a wide variety of server and client implementations within the protocol. It has a solid user base. In short, it's a pretty mature technology. And all these newfangled P2P messengers, there are just way too many of them. And to make matters worse, they aren't compatible with each other, which is why they don't have a large user base, there's no one to chat with on such a messenger. Plus, it's still unclear how long they'll be supported, because they were essentially created very recently and are still in their infancy. It's possible that the developers won't keep working on them. They'll just get tired of it, and that's a common problem in the FOSS community. XMPP has been around for 20 years and will be around for at least that long. Once they come up with a universal protocol for all these P2P messengers, then go ahead and start a thread. But another rehash, nobody gives a shit about that.

>>12345 I read up on this SimpleX of yours. Turns out it's not even p2p, but a client-server software suite. So I'm sitting here wondering why everyone is shiling this reinvented wheel? Because their metadata protection features can be implemented in XMPP, since it's a very flexible and extensible protocol.

> Unlike federated networks, the server nodes do not have records of the users, do not communicate with each other and do not store messages.

Now this I believe, I believe every bit of it, yeah, I'm sold.

>>12347
> metadata protection features can be implemented in XMPP
The more feature rich clients let you minimize the metadata you send in the settings alone, and if you're really trust-nobody-paranoid you and your friends could talk only on your own i2p server, implemented on a device under your physical control.

>> 12310

After reading this thread, it kind of seemed familiar to me but then i remembered this is kind of bullshitary/Lack of knowledge nihilist1 talked about in The OPSEC Bible, The lack of knowledge here is fucking crazy, retards who act in bad faith have taken over the forum and people who has actual knowledge are leaving, that's the actual truth of The Cyberix Network as of now.

http://opbible7nans45sg33cbyeiwqmlp5fu7lklu6jd6f3mivrjeqadco5yd.onion/opsec/whytheblog/

simplex is centralized shit and shouldnt be used. read their policies. its really THAT easy.

>>12366

This retard is losing hes mind

>>12367
It is legitimate criticism, when it is centralized they can see who is communicating with who and in the end all boils down to "trust me bro"

>>12368

Is it legit criticism when you are making it up?

>>12020

SimpleX Chat was initially released on January 12, 202.2. That's about 4 years old. That's far from battle-tested status compared to IRC, XMPP, Mumble, and SSH, which are all completely decentralized protocols you can spin up on a box in minutes, and they've been around for over two decades.

I do not see anything that we would gain from having a SimpleX server.
>Better privacy
You can't get more private than joining IRC or SSH over Tor and seven proxies.
>Eliminates user identifiers entirely
Our XMPP server already has occupant JIDs turned off.

>Way simpler to use then xmmp and irc (ofc not as simple as ssh, you still use a gui)
XMPP and IRC have GUI clients as well and using them is as simple as opening a menu and typing in the server address.
And of course, you can SSH into the chatroom immediately with the terminal of your choice.
If simplicity and quickness is what you need, then you should just use SSH.

Better attachments? Maybe. But are those attachments stored on the server or the centralized relay?

Speaking of: I don't like the idea of a centralized relay at all. SimpleX isn't providing anything new for us anyway and we aren't missing any features because they're already being covered by the 4 services we already have running. So no, I think it'd be best if we held off on this.

>>12377
Based admin BTFOing bandwagoner jeets/zoomers.