Hacker Newsnew | past | comments | ask | show | jobs | submit | chin123's commentslogin

Email is unencrypted by default anyway. Just encrypting your mailbox is not enough, because ultimately you are sending your email to someone else, and their mail server will have access to the email. For conversations where privacy is important, I would setup PGP or use another method of communication like Signal.


GMail has ads. It's free because you are the product, not the customer. Google's customers are the advertisers. The money has to come from somewhere.


I'm not talking about gmail. This post is about hosting an email with your own domain.


Google workspace isn't free.


Can't find any free plan either now. I guess they just discontinued them and are not upgrading existing accounts.


It's not been free for around a decade now. The free version was mostly a ploy to attract people away from Outlook at the time.


Why do you need ads for this? I don't remember the last time I bought something because of an ad. You don't need to pay for professional opinions on everything. I wanted to buy a pair of headphones recently, and so I just scouted the various headphone discussion forums on the internet (head-fi, r/headphones etc) and there was a lot of high quality information and opinions and I was able to make an informed purchase while paying nothing extra. It is very rare that I'm looking for a product and I can't find recommendations this way, and even if that happens I can ask my friends. The best part is that they probably don't gain anything from you buying some product, and that increases my level of confidence on the veracity of their reviews and recommendations.

At this point I've pretty much trained myself to zone out when I see an ad because it is probably peddling some mediocre crap.


It may reduce the environmental issues, but now miners will just go from hoarding GPUs to hoarding SSDs.


I've seen a few WebRTC server implementations pop up recently but the only clients I have seen are web browsers. Does anyone know of any WebRTC client implementations apart from the browser? Or am I misunderstanding the WebRTC architecture completely?



Just a nitpick: RAWRTC is actually written in C (also I think it focuses on data channels only).


What about Node.js clients??

To record meetings without sacrificing end to end encryption



At a low level, webrtc interoperates with VoIP. But because webrtc doesn't mandate a signalling protocol and VoIP uses SIP, generally you need a browser to run whatever proprietary signalling the site decided to implement in JS.


Matrix can also function as a signaling layer for WebRTC.


Anything can function as the signaling layer since all you need is to exchange pieces of text. I think the point was that most sites choose to implement it using JS and browser API's like ajax, websocket or SSE.


The Python library aiortc, https://github.com/aiortc/aiortc, enables client and server side communication via WebRTC.



The official one, pion (go) and webrtc-rs (rust) can all be used on both sides.


Is webrtc-rs usable? There are ticks missing for Media or DataChannel and PeerConnection. Aren't these required to do anything useful?


I think webrtc-rs is still in early development. libdatachannel has Rust bindings though: https://github.com/lerouxrgd/datachannel-rs


libdatachannel (C/C++) can also be used on both sides: https://github.com/paullouisageneau/libdatachannel



I believe that clients are available for most native MobileMe platforms as well.

https://webrtc.github.io/webrtc-org/native-code/android/

https://webrtc.github.io/webrtc-org/native-code/ios/


If you are interested in desktop implementations, you can access the telegram desktop source code, which also uses WebRTC: https://github.com/telegramdesktop/tdesktop/blob/a506e9b9eb7...


Because webrtc came from the chromium source code so you got it installed already on your browser. Then Google took it out there and made it stand alone library so you can use it on apps. I see webrtc projects occasionally here on Show HN threads


A lot of video call applications use WebRTC, I'm pretty sure slack uses it (although not in P2P mode, they use a SFU).


Except, newpipe doesn't use the YouTube API. Similar to youtube-dl, it scrapes the YouTube webpage for all its functionality. The only way I can imagine YouTube can shut this down is by introducing DRM, at which point I hope people will boycott them anyway.


The vast, vast majority of users (99.9999+%) wouldn't even notice.


Why is having one less native app an upside? From my experience, mobile websites are much more cumbersome than native apps, especially in this case because NewPipe is so much better than the YouTube mobile website.


Native Apps have more permissions to your system, like running in the background, information about your device, storage and code execution. Running a 3rd party Native Application to get around Youtube ads requires a lot of trust that that application does not have malicious behaviors.


Prism Break is also worth taking a look: https://prism-break.org/en/

I like that it has OS-specific recommendations.


One of the most frustrating things about this website is that it doesn't provide a reason for their "avoids." Why should I use KeePass over 1Password? Why should I use Mumble over FaceTime?

It wouldn't be that hard to provide a sentence-long justification for their avoids in addition to their recommendations.


The only reason is because they are closed source.


Prism Break is actively maintained and a lot of thought is being put into curation. Privacy Tools recommends Claws Mail, but Prism Break removed it after investigating the code: https://gitlab.com/prism-break/prism-break/issues/2043


Claws was one of the few email clients not affected by efail because of its conservative design.


I've been using Matrix with Riot since 2016 (then called Vector). Rooms aren't encrypted by default, however you can turn it on with the toggle of a button. One drawback I've noticed is Riot uses a lot of battery on Android (this is probably due to me not using the GCM back end), and on Linux as well (this is probably due to it being an electron app). Sadly there is no other Matrix client which is as featureful as Riot (for example, most of the others don't have E2E support), and so we're kinda stuck with it.

I also tried setting up a matrix home server with synapse, however I couldn't get it to work with an nginx reverse proxy and let's encrypt, and decided to just settle with using the default home server with E2E enabled. Others have had more success with this however, so I must be doing something wrong.

The experience is pretty good, and my friends and I have tried the Slack, IRC and Telegram bridges and they seem to work pretty well (infact the telegram bridge was so fast that I thought my friend was using the native client when he was messaging me). Haven't tried WhatsApp yet, though.

I've also used matrix and riot to connect to large group chats on IRC and Matrix and overall its a more pleasant and user friendly experience than using IRC, especially on mobile.


Apart from not being encrypted by default, Telegram uses its own homegrown crypto instead of a tried and tested one for its secret chat feature. That itself is a red flag.


Technically, Signal also uses homegrown crypto.

The difference here was it was endorsed by Moxie's acquaintances from the crypto circles, followed by a very loud and aggressive disparaging campaign against Telegram led by some of these people. I've been on metzdowd list for a very long time and while cryptographers aren't the chummiest people in the slightest, there's always an underlying mutual respect. The Telegram bashing was the first time I've ever seen geniuenly vicious behavior and hate displayed towards a project that not even remotely deserve it. Almost as if the goal was just to bury the competition.


You conveniently left out the fact that Telegram has a history of actual backdoors http://habrahabr.ru/post/206900/


This is completely unrelated to what I said.


>The difference here was it was endorsed by Moxie's acquaintances from the crypto circles

You suggest that this is the major difference between Signal and Telegram, but that's dishonest at best.


upvoting, I am having same feelings towards Telegram vs Signal. Both are man made things, maybe Telegram has not made audit on their crypto yet, but whenever I see something related to IM + crypto, people praise Signal, write hate speech towards Telegram, as if were people are waiting HN to have a mention of Telegram and writing some bad words about it.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: