Meet DAVE: Discord’s New End-to-End Encryption for Audio & Video
https://lemmy.ml/post/20406991
=> More informations about this toot | More toots from morrowind@lemmy.ml
Huh
=> More informations about this toot | More toots from GolfNovemberUniform@lemmy.ml
These people provide outdated, bloated Electron. As if I am going to trust them.
=> More informations about this toot | More toots from velox_vulnus@lemmy.ml
bro, just use firefox or Librewolf or something.
=> More informations about this toot | More toots from yonder@sh.itjust.works
I am content with Matrix and IRC. Discord is a privacy nightmare.
=> More informations about this toot | More toots from velox_vulnus@lemmy.ml
False, this is a lie. Discord is anti-libre software. We do not control it. It fails to include a libre software license text file.
=> More informations about this toot | More toots from autonomoususer@lemmy.world
Interesting. I was able to access the linked whitepaper and repositories without trouble and the 3rd party stuff too. Do you have local config preventing you from downloading the source code to review?
While I can respect your distaste for non-libre software, you’ll need to back up the malware claim. There are real security concerns out there in common non-libre; labeling things that are not libre as malware solely because they are not libre muddies the waters and makes your message much less palatable.
=> More informations about this toot | More toots from thesmokingman@programming.dev
You think the whole app is one lib? While it keeps banning us from proving its claims, they’ll never infect my devices.
=> More informations about this toot | More toots from autonomoususer@lemmy.world
what the hell are you doing that you keep being banned from discord?
=> More informations about this toot | More toots from morrowind@lemmy.ml
It’s anti-libre software. We do not control it.
It bans us from modifying its source code, sharing exact and modifies versions, using it for any purpose, etc.
You’ve never heard of copyright law?
=> More informations about this toot | More toots from autonomoususer@lemmy.world
Why put the effort into such a hostile service?
=> More informations about this toot | More toots from toastal@lemmy.ml
You replied to the wrong comment?
=> More informations about this toot | More toots from autonomoususer@lemmy.world
Responding broadly to the thread of folks talking about userScripts & add-ons. This effort would be better put to getting folks to a different protocol where client modification & alternate clients are the norm.
=> More informations about this toot | More toots from toastal@lemmy.ml
Trying telling the other guy.
=> More informations about this toot | More toots from autonomoususer@lemmy.world
I’ve been using a modified client for about 2 and a half years now without being banned.
=> More informations about this toot | More toots from Blxter@lemmy.zip
Show us Discord’s whole source code.
Discord bans us from modifing its source code and more. We don’t control it.
=> More informations about this toot | More toots from autonomoususer@lemmy.world
The claim is that audio and video are E2EE. I’m not sure how you’re unable to disprove that using the linked code, audit report, and COTS debugging tools. Can you expand on that? I see a lot of FUD without anything more than “they’re not libre” which, again, doesn’t do a great job of selling your point.
=> More informations about this toot | More toots from thesmokingman@programming.dev
Do you think anyone will wsste their lifr going knee deep in disassembled binaries for on every update of every app on all their devices? 🚩
It has shown it’s openly hostile. How stupid and gullable do you think I am?
=> More informations about this toot | More toots from autonomoususer@lemmy.world
In another post you’re actively looking at purchasing GPS systems. The satellites you’re sending info to are not available to dissect and I highly doubt the firmware of the devices you’re looking at is publicly available much less libre. Your trolling is not internally consistent so it’s clear you don’t have any clue what you’re on about. Good luck with that.
=> More informations about this toot | More toots from thesmokingman@programming.dev
Do you think I own a satellite?
They are bound by software licenses of their software on their devices. I am bound by my software on my devices. Their software licenses are their problem.
Are you deliberately conflating Anti-Libre Software with Service as a Software Subtitute (SaaSS) or are you trying to teach me copyright law you don’t even know?
=> More informations about this toot | More toots from autonomoususer@lemmy.world
I don’t think you need to send info for a GPS client to work. You are just a receiver, no data sent.
=> More informations about this toot | More toots from GreyCat@lemmy.world
If you believe anything you write or say on discird is private or even would be encrypted, I want whatever you’re smoking please.
=> More informations about this toot | More toots from Eeyore_Syndrome@sh.itjust.works
Yeah, Discord is not a privacy preserving service in the slightest. Honestly I'm only using it because of the network effect at this point.
=> More informations about this toot | More toots from LostXOR@fedia.io
That and it has full functionality in the browser. No bullshit “download the app”.
=> More informations about this toot | More toots from yonder@sh.itjust.works
But not for text?
=> More informations about this toot | More toots from als@lemmy.blahaj.zone
nah, selling messages is way easier
=> More informations about this toot | More toots from Oha@lemmy.ohaa.xyz
It’s interesting that the threat model also includes participants. They take into account that when a user leaves, it should be impossible for them to continue listening.
=> More informations about this toot | More toots from dyc3@lemmy.world
screams in Matrix
=> More informations about this toot | More toots from possiblylinux127@lemmy.zip
=> More informations about this toot | More toots from hal_5700X@sh.itjust.works
How will they comply with the US government?
=> More informations about this toot | More toots from possiblylinux127@lemmy.zip
That can deliver the days that they do have, which will be encrypted. Though I doubt they were ever recording calls anyway.
=> More informations about this toot | More toots from acockworkorange@mander.xyz
How would the US government be able to see the messages? They need to monitor for young people leaking data from the Pentagon. /s
=> More informations about this toot | More toots from possiblylinux127@lemmy.zip
Their TOS says they don’t record but who knows…
=> More informations about this toot | More toots from Quail4789@lemmy.ml
End to end directly to ccp
=> More informations about this toot | More toots from ryannathans@aussie.zone
Am I too harsh in believing that if you claim to have E2EE but I can’t verify a) your source code b) my client was built from that source code (i.e. reproducible builds) then you don’t have E2EE? The whole point of encrypting my traffic on the client is I don’t trust you. Why would I believe you aren’t sending the encryption keys off to your server if I didn’t trust you before?
=> More informations about this toot | More toots from Quail4789@lemmy.ml
you aren’t. to me this is just PR
=> More informations about this toot | More toots from ReversalHatchery@beehaw.org
They just mean you now really have to pay to get private data. 🤣
=> More informations about this toot | More toots from warmaster@lemmy.world
Am I too harsh […]?
No. If there’s no way to verify anything then all we have to go on is their word.
The word of a company generally isn’t worth a whole lot. Same with Telegram.
=> More informations about this toot | More toots from Chais@sh.itjust.works
The clients are source available for telegram though
=> More informations about this toot | More toots from jeffhykin@lemm.ee
Which is how we know their self-rolled encryption is shit.
There’s a reason why Telegram CEO can be arrested when Signal’s can’t. Because Telegram has information they can give but refuse to whereas Signal give everything they’ve got, which is basically nothing.
=> More informations about this toot | More toots from Quail4789@lemmy.ml
I mean technically the client is verifiable if you use discord in a browser tab… and verify it every time you load the web page…
=> More informations about this toot | More toots from jeffhykin@lemm.ee
You said it better then me here. I’m stealing your line. 🤣🤣🤣
=> More informations about this toot | More toots from autonomoususer@lemmy.world
Welp, better than nothing, right?
=> More informations about this toot | More toots from JustMarkov@lemmy.ml
No I’m not.
=> More informations about this toot | More toots from Etterra@lemmy.world
=> More informations about this toot | More toots from dingdongitsabear@lemmy.ml
but why?
=> More informations about this toot | More toots from mat@linux.community
Hey Discord, give us the ability to stream audio when sharing our screen on Linux ffs.
=> More informations about this toot | More toots from OR3X@lemm.ee
No. 😡
=> More informations about this toot | More toots from MashedTech@lemmy.world
Vencord/Vesktop supports audio streaming on Linux and is just a generally better experience compared against the Discord official app. Free and open source.
=> More informations about this toot | More toots from Lemongrab@lemmy.one
+1 for vesktop works great for me
=> More informations about this toot | More toots from Blxter@lemmy.zip This content has been proxied by September (ba2dc).Proxy Information
text/gemini