I wanna know if MATRIX recipients know my IP, and more globally what the recipients know about me (how the matrix protocol works). THX

  • mox@lemmy.sdf.org
    link
    fedilink
    arrow-up
    0
    ·
    5 months ago

    The network layer of all internet servers reveals almost everything you listed. Signal has the same problem, and there’s nothing they can do about that. The only way to avoid it is to use a completely peer-to-peer model (Matrix has started work on this, btw) and avoid communicating across network routes that can be monitored.

    There might be one exception, depending on what you mean by “Accounts”: The user IDs participating in a room can be seen by server operators and room members. But then again, server operators can already see their users’ IP addresses (which is arguably more sensitive than a user ID), and I believe room members have to be allowed into the room in order to see them. For most of us, that’s fine. Far from a disaster.

    • poVoq@slrpnk.net
      link
      fedilink
      arrow-up
      0
      ·
      5 months ago

      No, because Matrix stores all this info and gives it freely to other servers retroactively(!). Also with network layer sniffing (which is anyway much harder to do) you can only see which home-server talked to with other homeserver and what clients talked to their homeserver. If you have the full room meta-data you can easily make a social graph of which account talked to whom when and where.

      • mox@lemmy.sdf.org
        link
        fedilink
        arrow-up
        0
        ·
        5 months ago

        Matrix stores all this info and gives it freely to other servers retroactively(!)

        Can you show me the part of the spec that allows a server with no room members to get private room info from another server? I’m skeptical, but if true, I believe that would be worth reporting as a bug.

        network layer sniffing (which is anyway much harder to do)

        You’re funny.

        • poVoq@slrpnk.net
          link
          fedilink
          arrow-up
          0
          ·
          5 months ago

          Obviously you need someone joining the room for the room metadata to be shared between homeservers. But that is really only a minor barrier and once that has happened the worst case scenario takes place immediately. On other messengers (federated or not) a newly joining member has very limited access to past room metadata. Not so with Matrix, where a joining homeserver get full retroactive access to all the room metadata since the room’s creation. If you can’t see the problem with that, you really need to stop privacy LARPing 🙄

          • mox@lemmy.sdf.org
            link
            fedilink
            arrow-up
            0
            ·
            5 months ago

            Obviously you need someone joining the room for the room metadata to be shared between homeservers.

            Well then, your assertion that Matrix gives it freely is false.

            Not so with Matrix, where a joining homeserver get full retroactive access to all the room metadata since the room’s creation.

            This is false, too. Historical event visibility is controlled by a room setting. (And if you don’t trust admins of a sensitive room to configure for privacy, then you’re going to have bigger problems, no matter what platform it’s on.)

            you really need to stop privacy LARPing

            LARPing? I’m not the one stirring up drama with falsehoods and patronizing snark, am I? Farewell.

            • poVoq@slrpnk.net
              link
              fedilink
              arrow-up
              0
              ·
              5 months ago

              Well then, your assertion that Matrix gives it freely is false.

              My point is that it should never give out that data, or even store it permanently in the first place. This is just a fundamentally bad design from a privacy perspective, and other messengers don’t do that.

              This is false, too. Historical event visibility is controlled by a room setting. (And if you don’t trust admins of a sensitive room to configure for privacy, then you’re going to have bigger problems, no matter what platform it’s on.)

              This is not false, what you mean only hides it for normal users, but it still ends up in the database of all participating homeservers and all the admins of those have full access to it. I happen to run a Matrix homeserver myself…