• not actually a cat
    5·
    4 years ago

    this is fantastic news imo. I can finally actually consider Threema which I haven’t been able to so far because of it being proprietary. consider me interested!

    e: I hope they open source everything… servers, clients, etc. if not, this’ll be pointless. I also hope they pick a good license, not something obscure.

    • some_dudeOP
      5·
      4 years ago

      Within the next months, the Threema apps will become fully open source, supporting reproducible builds

      Doesn’t sound like the server software will be open sourced. Of course it would be nicer if they did that as well but as long as you don’t have to trust the server in any way I’m kinda okay with it

      • ster
        2·
        4 years ago

        You have to trust the server with all your meta data. So it’s as good as whatsapp.

        • some_dudeOP
          3·
          4 years ago

          But I also have to trust the server with my meta data if they open source it? Threema still has the advantage that they don’t need any personal information at all to create an account to the metadata can be as little as “key 1 send a message to key 2”

          • ster
            4·
            4 years ago

            The metadata is who (IP address, so location) is contacting whom and how frequently they are doing so. Unless it’s P2P, which it doesn’t seem to be.

            It’s an inherently flawed system due to its centralisation. Check out https://matrix.org for a fully free and open source software stack where you can host your own instance and control your own metadata.

              • ster
                2·
                4 years ago

                ISPs are pretty cancerous, yeah. I mean even if you don’t host it yourself you’re susceptible to whoever you get to host your server and their ISP. You could use a VPN but you still have to trust the VPN provider. But ISPs have extraordinary amounts of metadata in almost every case anyway. In the UK ISPs are legally obliged to keep a list of websites that have been accessed.

                Self-hosting is normally better than not self-hosting, and decentralised is normally better than centralised. But this is because of freedom much more than it is because of privacy. For privacy the best thing is to not use the internet at all.

          • ster
            1·
            4 years ago

            No, but the data is end to end encrypted, allegedly

            • not actually a cat
              1·
              4 years ago

              allegedly

              so the benefit of Threema in this scenario over Whatsapp would only be the clients being open source, and how good that is depends on how much clients actually do

      • not actually a cat
        2·
        4 years ago

        I’m just hoping it’s worded funny. I don’t know what not trusting the server would look like but as long as it’s proprietary I’ll still avoid it

          • some_dudeOP
            4·
            4 years ago

            No it shouldn’t. And even if the server would be open source we could not verify that the one running is using the published code

          • not actually a cat
            2·
            4 years ago

            I’m not 100% knowledgeable on how that’d work so I can’t say, but I’d always have “why haven’t they open sourced the server?” in the back of my head when using it

            I’m already messaging apps that are 100% FOSS – I’d only get interested if Threema did the same tbh

    • Future Me
      2·
      4 years ago

      This could mean the server-side code remains closed source. Good catch!

  • k_o_tM
    1·
    4 years ago

    ok that’s cool but that’s a missed opportunity for a good domain hack

  • Adda
    1·
    4 years ago

    Never heard of Threema, but it sounds interesting. Will keep an eye on it. Thanks for letting me know.