cy-x.net on Simplex chat?

32 replies
2 attachments
Started 3d ago
[AutoMod] action=keep R:10 E:7 N:8 C:10 | Directly addresses the thread topic (centralized vs. decentralized discovery in Simplex), provides technical critique, and references broader privacy tools (Tor, I2P) for comparison. Includes a quoted response for context.

As far as my experience with SimpleX chat has gone, it seems that it relies heavily on it's centralized servers to discover other users. when I want to share my contact with someone, my user ID (or address as they call it) is not on a decentralized server of my choice like when using XMPP, it has a single repeated domain or subdomains that can be attacked and used to provide decoy accounts.
> https://smpN.simplex.im/a#<Gibbrish>
This single point in design can be the downfall of the whole protocol if we call it a protocol, I would respect it if it achieved the smp://<user_id.chat> level which then it becomes a great tool just like tor, i2p ...etc.
it's still better than whatsapp and telegram, but not better than XMPP and IRC.
Replies: >>12226

[SE] [TOR]
[AutoMod] action=keep R:8 E:7 N:9 C:10 | Directly addresses privacy concerns (Retroshare vs. centralization) and offers a fresh technical comparison (self-hosting options, peer-to-peer discovery). Compares to XMPP/IRC and introduces a unique angle (e.g., smartphone always-on behavior).

Retroshare uses several websites by default to find users IP adresses, but you can disable that and use each other to discover other users, but for that at least one user has to always be online.
Software that really cares about privacy and freedom should give you an option to host your own server and an option to disable that feature alltogether.
With XMPP and IRC you can host your own server, but it is not actually easy to do, the only program I know where it is easy is mumble, where you just launch the executable and your own server is online.
Especially since smartphone users are basically always online I see no need for a central server, if you have a bigger friends list you could even use each other as server, so that no outside connection will ever be made.

[DE]
[AutoMod] action=keep R:10 E:6 N:0 C:10 | Directly responds to the quoted post with technical/philosophical arguments about data collection and backdoors, but repeats prior discussions without new data or perspective.

>>12170

> Most smart devices collect all data by default and then send it somewhere to someone, so of course there is no need for a backdoor, because everything that can be spied on is already spied on by default.

And most windows doesn't? man you don't still understand what i am talking about, after explaining so many times, i have mention it literally 2 times already, now it is the third time i am saying, just use wireshark for god sake 🙏 and see how much data is actually being collected by DEFAULT (results may differ depending on the phone).

> Backdoors are usually used all the time, what is the point in having a backdoor, if it is not used?

Again this goes completely against logic of a reasonable mind, just why would they use backdoor all the time? Wouldn't that make way more likely for it to be caught? Backdoor keept for people who actually threatened their existence not for normal people, for all we know there is they can RCE through Intel management system but it's probably not used very often.

> It is not yet reviewed on shadowiki https://shadow.lifestyle/im.xhtml

Jesus Christ, is it really that hard to do research by yourself? Like this guy isn't going around and reading the source code and making this list, all he is doing is looking whether the software is open source or not, is it decentralized or not? And maybe checking all the connections that the software makes through Wireshark (4th mentioned) and past reputation, and IRC is not even decentralized but all of that aside do you really need approval of fucking "shadow wiki", i mean nothing against the guy he's work is decent but man considering how much you care about decentralized and anonymity, you should be well equipped with the knowledge to judge software by your self and so far there has been no valid criticism you have made at all, all i have seen from you is "ohh downloading problems, age verification, QR code, AGPL BAD"

All of which turns out to be complete bs as i have explained in my previous replies.

[IN]
[AutoMod] action=keep R:10 E:9 N:8 C:10 | Directly addresses privacy concerns (centralized servers, data interception) and technical specifics (Wireshark, firewall) in a detailed, technical manner. Builds on prior discussion about decentralization and adds unique insights about hardware limitations (no mic/camera, wired-only internet).

A desktop computer does not have a microphone or a camera build in, so regardless of what you install on it, it will not record you and take pictures of you.

It also is not capable of wireless connection to the internet, you need to plug in a cable, so if you do not want to, you can prevent data being send.

When you have a cable you can run Wireshark and see what is being send, with a mobile phone you actually would need a device that can intercept wireless communications to really check what is send.

Also a Desktop Computer does not track your location whereever you go, since it does not come with you.

Maybe Windows also requires an internet connection now to work, but no idea I have not used it in a while. Anything from Microsoft or Apple should not be used. Windows is actually superior to Linux in some ways for example it having a firewall. In the past it was also common to have a separate firewall installed on WIndows so you could control every internet connection for every program, but most of those firewalls have been discontinued.
Replies: >>12228

[DE]
[AutoMod] action=keep R:10 E:8 N:9 C:10 | Directly addresses the quoted post with technical correction, cites specific documentation, and introduces a fresh perspective on decentralization via custom domains

>>12183

I think your understanding of how simplex works might be completely flawed because simplex in every way is better than XMPP and difinitely IRC.

> it seems that it relies heavily on it's centralized servers to discover other users.

That is completely wrong, i think your issue might be related to this issue, you can create use your own domain name for sharing your account as explained in the docs, there is no global ID for account sharing or no central register or anything.


[IN]
[AutoMod] action=keep R:10 E:8 N:7 C:10 | Directly replies to the quoted post, addresses the microphone/camera point, and expands on the broader comparison between default tracking on Windows vs Android, while also briefly introducing VPN/Wi-Fi interception methods.

>>12224

> A desktop computer does not have a microphone or a camera build in, so regardless of what you install on it, it will not record you and take pictures of you.

Well it doesn't matter when Microslop is actively pushing to record your screen, does it? And most motherboards have built in wifi card now days, this Desktop vs Phone wasn't even my point, my point was default trackers on Windows vs Android, there is no actual point in comparing features of smartphones and a desktop pc because they are made for different use cases

> When you have a cable you can run Wireshark and see what is being send, with a mobile phone you actually would need a device that can intercept wireless communications to really check what is send.

it is so easy to setup your own VPN and then route your phone network through the VPN and the capture traffic on server end (which is what i do now) but the most easy way is to probably turn your laptop or PC into wireless access point or you can root the phone (which what used i to do)

> Anything from Microsoft or Apple should not be used.

I completely agree with this, the same goes for Android but with android you still have lot of choice, with different manufacturers, different chip makers, different phone makers with different roms and privacy settings, the whole rom/rooted android scene.

Replies: >>12230

[IN]
[AutoMod] action=keep R:6 E:3 N:2 C:10 | Partially relevant to the thread’s discussion of cy-x.net vs. direct phone use, but lacks depth; repeats a common critique without adding new perspective or technical reasoning. Short and tangential to the privacy/security benefits highlighted in the OP’s post.

>>12228
What is the point running a computer to then route your phone through it why not use the computer directly?
Replies: >>12233

[DE]
[AutoMod] action=keep R:10 E:8 N:0 C:2 | Directly replies to the quoted post but contains personal insults and dismissive tone, undermining the original argument with exaggerated claims and mocking language.

>>12230

Tf you mean?? You don't run wireguard??? No self hosting?? No pi hole???

Bro do you really care about privacy or are you just pretending to care cause its cool and you think you are fighting the matrix??

In what world are you living? everyone is who actually care about privacy is probably like me running their own dns server and probably routing all of their devices network traffic through Wireguard or Tailscale (yeah ik Tailscale is corporate but i have used in the past and really i like their networking magic),

Damn i think i should stop this bullshitry, cause its getting tiring at this point, in this whole thread the only guy who said anything worth noting was the guy who said "i think XMPP is good enough".

[IN]

Reply

Posting anonymously. Your IP address will be recorded for rate limiting purposes.





Max 10MB per file. Allowed: images, videos, audio, PDF, text, zip