Notes on privacy and data collection of Matrix.org

Email
Comment *
File	Select/drop/paste files here
Password	(Randomized for file and post deletion; you may also set your own.)
* = required field	[▶ Show post options & limits] Confused? See the FAQ.

Comment *

File

Select/drop/paste files here

Password

(Randomized for file and post deletion; you may also set your own.)

* = required field

[▶ Show post options & limits]
Confused? See the FAQ.

Flag
Oekaki	Show oekaki applet (replaces files and can be used instead)
Options	Do not bump (you can also write sage in the email field) Spoiler images (this replaces the thumbnails of your images with question marks)
Allowed file types:jpg, jpeg, gif, png, webm, mp4, pdf Max filesize is 16 MB. Max image dimensions are 15000 x 15000. You may upload 3 per post.

Flag

Oekaki

Show oekaki applet
(replaces files and can be used instead)

Options

Do not bump
(you can also write sage in the email field)

Spoiler images
(this replaces the thumbnails of your images with question marks)

Allowed file types:jpg, jpeg, gif, png, webm, mp4, pdf
Max filesize is 16 MB.
Max image dimensions are 15000 x 15000.
You may upload 3 per post.

File (hide): f629897fccc21ef⋯.jpg (1.7 KB, 125x114, 125:114, 1542877671049s.jpg) (h) (u)

[–]

▶Notes on privacy and data collection of Matrix.org Anonymous 06/14/19 (Fri) 04:19:06 No.1069980 [Watch Thread][Show All Posts]

TL;DR: matrix.org and vector.im receive a lot of private, personal and identifiable data on a regular basis, or metadata that can be used to precisely identify and/or track users/server, their social graph, usage pattern and potential location. This is possible both by the default configuration values in synapse/Riot that do not promote privacy, and by specific choices made by their developers to not disclose, inform users or resolve in a timely manner several known behaviours of the software.

https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0

https://archive.fo/sgnPn

▶Anonymous 06/14/19 (Fri) 13:51:15 No.1070036>>1070051

Self-host XMPP and keep OMEMO on at all times, a fucking 12 year old could do it and it costs less than 10$ a year depending on how janky you want to get

▶Anonymous 06/14/19 (Fri) 14:39:33 No.1070044

Fucking great, hope the matrix devs give a fuck and fix this shit.

▶Anonymous 06/14/19 (Fri) 15:35:50 No.1070050>>1070051

File (hide): bb449cce32c64d2⋯.png (178.87 KB, 354x413, 6:7, rhett.png) (h) (u)

Fucking hell, just moved my friend group over to Matrix from Discord, now I see this shit

▶Anonymous 06/14/19 (Fri) 15:41:23 No.1070051>>1070052

>>1070050

See

>>1070036

Which means: self-host and verify traffic.

▶Anonymous 06/14/19 (Fri) 15:51:42 No.1070052>>1070058

>>1070051

I would, but the problem is that it was hard enough to have everyone switch (only one of my friends is a /tech/ guy) and Matrix provides all the features we want/need. If there's a way to fix the privacy issues and still self-host a Matrix instance, then I'll be all for that. Fuck.

▶Anonymous 06/14/19 (Fri) 17:02:59 No.1070058

>>1070052

Anything that talks to a master server should automatically be distrusted until fully proven otherwise.

And you failed to do that.

/tech/ - Technology★

General

WebM

Theme

User JS

Do not paste code here unless you absolutely trust the source or have read it yourself!

Favorites

Customize Formatting

Filters