@kkarhan xmpp has almost no good clients and yet the ux is still better with it compared to element or any other matrix client
@hexaheximal @kkarhan i already use cinny
@hexaheximal @esm Why would anyone want that anyway?
There are native #XMPP+#OMEMO client for literally any relevant platform!
https://mstdn.social/@kkarhan/111404942780525408
Any #E2EE #Messenger with #SelfCustody of all Keys should be considered security-sensitive and thus should not he used as a #WebApp.
Also #ChromeOS supports #Android-Apps and if you don't have administrative privilegues on a machine then consider it insecure and nit trustworthy for yourself as a user!
@kkarhan @esm Not all chromeos devices do. (e.g. ones where apps are restricted by management), and there are still other scenarios where a web app is the best/only way to do it. #ArgumentValid
@hexaheximal@blob.cat @esm @hexaheximal@wetdry.world
You may call me a #minimalism evangelist but
everytime something that could've been barely Megabytes as an #AppImage, #FlatPak, #Snap or Kilobytes as a #CLI tool instead shoves yet another entire half gig copy of the #Bloatware-#Browser that is #Chromium onto the Desktop despite using not even 0,1% of it's featureset
I call this a systemic failure in Software Architecture.
Browsers are the most attacked applications on #Linux beyond CMSes and Webservers...
@hexaheximal@blob.cat @esm @hexaheximal@wetdry.world ...and even if we think local #WebApps are a legitimate way to handle sensitive comms - they ain't but let's just assume they are for the sake of argument - WHY would you do anything beyond a .desktop file that includes startup parameters for #Firefox (or even #Chrome if you're that kind of Cyber-Masochist!) that specify the browser, and the file to load.
Because any good #WebApp should be reduceable as #HTML5 + #JS6 + #CSS3 and measured in kB or maybe a few MB.
@hexaheximal@blob.cat @esm @hexaheximal@wetdry.world Shit like #Discord is an abomination and #Microsoft only won because regulators are systematically dysfunctional, corrupt and staffed with #TechIlliterates, otherwise all the #GAFAMs, #Adobe and #Autodesk among others would've been forcibly disbanded the same way #StandardOil was.
Microsoft feared #Linux but nowadays they basically gave up on #Desktop and #Server OSes since #Xbox, #Office365 & #Azure make the real profits & margins!
https://blob.cat/objects/29e2ce65-026f-4fb6-aa2a-2de2c1ebe4c5
@hexaheximal@blob.cat @esm @hexaheximal@wetdry.world Like #Atlassian & #Adobe & #Autofesk before them, #Microsoft is working hard to forcibly #Subscription-ize & #Cloud-ify (aka. #Enshittify) their products and subsequently cancel any #OneTimePurcase, #OnPremise / #SelfHosting and #LocalInstall options until there's only #Microsoft365 / #Office365 as a #WebApp with no control over anything whatsoever...
And OFC that'll be weaponized against anyone and everyone!
https://twitter.com/frank_rieger/status/999319383917957121
@hexaheximal@blob.cat @esm @hexaheximal@wetdry.world
So yeah, don't trust any #WebApp where it's trivial to siphon away credentials.
And don't trust any #Service, because they WILL LIE TO YOU just like the #Honeypots of #ANØM and @protonmail did/still do.
Keep your keys in self-custody and encryption as well as decryption locally or don't even bother at all!
And I'd certainly not do critical comms from an insecure device where I don't have full control!
http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/547af5650b3853a3b24e
@hexaheximal@blob.cat @esm @hexaheximal@wetdry.world @protonmail I do work on getting that part fixed...
https://github.com/KBtechnologies/PocketCrypto
In the meantime, learn #OpenPGP / #GnuPG (#PGP/MIME) and/or #XMPP+#OMEMO...
Tools like #enc make it even easier to do so...
https://github.com/life4/enc
Just like #gpa and #Kleopatra on #GUI Desktops or #OpenKeychain on #Android...