Skip to content

Is Matrix cooked?

Technology
37 20 0
  • In today's episode of Kill The Messenger, Matrix co-founder Matthew Hodgson reveals how full of bullshit is the writer of the original article.

    The messages were published in the Office of the Matrix.org Foundation room: https://matrix.to/#%2F!sWpnrYUMmaBrlqfRdn%3Amatrix.org%2F%24XpQe-vmtB7j0Uy1TPCvMVCSCW63Xxw_jwy3fflw7EMQ%3Fvia=matrix.org&via=element.io

    https://paper.wf/alexia/matrix-is-cooked is fascinatingly incorrect

    Until the 6th of November 2023 when they—in their words—moved to a different repository and to the AGPL license. In reality, the Foundation did not know this was coming, and a huge support net was pulled away under their feet.

    fwiw, the Foundation had a front-row seat in the fact that Element (as incorporated by the folks who created Matrix) had donated $$M to the Foundation over the years, but wasn't going to survive if it kept giving all its work away as apache-licensed code - which in turn would have been catastrophic for the Foundation.

    Yes, the high expenses for the Matrix.org homeserver are largely because they are still managed by Element, just not as donated work but instead like with any other customer.

    nope, Element passes the hardware costs (and a fraction of the people costs) of running the matrix.org server to the Foundation without any overheads or markup at all.

    Either way it shows that Element is seemingly cashing in on selling ,Matrix to governments and B2B as a SaaS solution without it going back to the foundation

    Element has literally put tens of millions into the foundation, and is continuing to do so - while some of the costs get passed to the Foundation, Element donates a bunch too (e.g. by funding a large chunk of the Matrix conference as the anchor sponsor, and by donating time all over the place to help support trust & safety etc)

    At the same time I can't help but think that this could have been prevented. Even Matthew himself recognizes that putting the future on Matrix on the line with VC funding and alike was not the best idea for the health of Matrix.

    No, even Matthew knows that Matrix would never have been funded without routing the VC funding from Element into... building Matrix. We tried to fund it originally purely as a non-profit, but failed (just as it's a nightmare to raise non-profit for the Foundation today even now that Matrix exists and is successful!). If you need to raise serious $ for an ambitious project, you either need to get lucky with a billionaire (as Signal did with Brian Acton) or you have to raise on the for-profit side. Perhaps it would have have been best for Matrix to grow organically, but I suspect that if it did, it would have failed miserably - instead, it succeeded because we already had a team of ~12 people who could crack on and jump-start it if they could work on it as their dayjob; the team who subsequently founded Element.

    Ultimately, for-profit companies will do what makes them profit, not what's the best option. Unless the best option happens to coincide with making the most profit.

    No, Element is not profitable. Nor is it trying to maximise profit. Right now it's trying to survive and get sustainable and profit-neutral (i.e. break-even) - while doing everything it can to help keep Matrix healthy and successful too (given if Matrix fails, Element fails too).

    Unfortunately, supporting the foundation through anything more than “in spirit” and a platinum membership is out of their budget, apparently. I think that morally they owe a lot more than that.

    wow.

    the FUD level is absolutely astonishing, and I really wonder what the genesis of this is

    so, absolutely, spectacularly, depressing

    this, my friends, is why we can't have nice things.

    In response to an other person suggesting that the publisher is also known as a reasonable person on the platform:

    Interesting, the matrix handle that seems behind this blog seems always to have been quite a reasonable person

    somewhat why i’m wondering what the backstory is, and whether this is an unfortunate example of spicy lies outpacing the boring truth

    I self host matrix. Should anyone who’s not on the foundation’s home server care? Do these changes affect anyone else?

  • In today's episode of Kill The Messenger, Matrix co-founder Matthew Hodgson reveals how full of bullshit is the writer of the original article.

    The messages were published in the Office of the Matrix.org Foundation room: https://matrix.to/#%2F!sWpnrYUMmaBrlqfRdn%3Amatrix.org%2F%24XpQe-vmtB7j0Uy1TPCvMVCSCW63Xxw_jwy3fflw7EMQ%3Fvia=matrix.org&via=element.io

    https://paper.wf/alexia/matrix-is-cooked is fascinatingly incorrect

    Until the 6th of November 2023 when they—in their words—moved to a different repository and to the AGPL license. In reality, the Foundation did not know this was coming, and a huge support net was pulled away under their feet.

    fwiw, the Foundation had a front-row seat in the fact that Element (as incorporated by the folks who created Matrix) had donated $$M to the Foundation over the years, but wasn't going to survive if it kept giving all its work away as apache-licensed code - which in turn would have been catastrophic for the Foundation.

    Yes, the high expenses for the Matrix.org homeserver are largely because they are still managed by Element, just not as donated work but instead like with any other customer.

    nope, Element passes the hardware costs (and a fraction of the people costs) of running the matrix.org server to the Foundation without any overheads or markup at all.

    Either way it shows that Element is seemingly cashing in on selling ,Matrix to governments and B2B as a SaaS solution without it going back to the foundation

    Element has literally put tens of millions into the foundation, and is continuing to do so - while some of the costs get passed to the Foundation, Element donates a bunch too (e.g. by funding a large chunk of the Matrix conference as the anchor sponsor, and by donating time all over the place to help support trust & safety etc)

    At the same time I can't help but think that this could have been prevented. Even Matthew himself recognizes that putting the future on Matrix on the line with VC funding and alike was not the best idea for the health of Matrix.

    No, even Matthew knows that Matrix would never have been funded without routing the VC funding from Element into... building Matrix. We tried to fund it originally purely as a non-profit, but failed (just as it's a nightmare to raise non-profit for the Foundation today even now that Matrix exists and is successful!). If you need to raise serious $ for an ambitious project, you either need to get lucky with a billionaire (as Signal did with Brian Acton) or you have to raise on the for-profit side. Perhaps it would have have been best for Matrix to grow organically, but I suspect that if it did, it would have failed miserably - instead, it succeeded because we already had a team of ~12 people who could crack on and jump-start it if they could work on it as their dayjob; the team who subsequently founded Element.

    Ultimately, for-profit companies will do what makes them profit, not what's the best option. Unless the best option happens to coincide with making the most profit.

    No, Element is not profitable. Nor is it trying to maximise profit. Right now it's trying to survive and get sustainable and profit-neutral (i.e. break-even) - while doing everything it can to help keep Matrix healthy and successful too (given if Matrix fails, Element fails too).

    Unfortunately, supporting the foundation through anything more than “in spirit” and a platinum membership is out of their budget, apparently. I think that morally they owe a lot more than that.

    wow.

    the FUD level is absolutely astonishing, and I really wonder what the genesis of this is

    so, absolutely, spectacularly, depressing

    this, my friends, is why we can't have nice things.

    In response to an other person suggesting that the publisher is also known as a reasonable person on the platform:

    Interesting, the matrix handle that seems behind this blog seems always to have been quite a reasonable person

    somewhat why i’m wondering what the backstory is, and whether this is an unfortunate example of spicy lies outpacing the boring truth

    Sidenote, the modern web is so fucked because how am I supposed to teach a kid that I would trust the random website "paper.wtf" I have never seen before with literally "meow" randomly above their article MORE than businessinsider.com which is like at the top of every search result

  • I self host matrix. Should anyone who’s not on the foundation’s home server care? Do these changes affect anyone else?

    AFAIK it only affects the matrix.org server.

  • SimpleX Chat – Many suggested this and I will explicitly recommend against it due to the founder's positions on various topics. This includes being anti-vaxx, believing COVID-19 was a hoax, trans- and homophobia, climate denial; In the SimpleX Groupchat he's also been seen basically bootlicking trump a couple times, but I've lost receipts to that

    Unrelated to the main points I kind of always thought SimpleX seemed sketchy...

    Also there are not many competitors to Matrix. Just XMPP for the most part.
    SimpleX and Signal are not good at supporting chat rooms with large amounts of people. Telegram does it okay but isn’t decentralized.

  • I self host matrix. Should anyone who’s not on the foundation’s home server care? Do these changes affect anyone else?

    It doesn't affect you in the slightest, other than it might further fund Synapse's/the spec's development meaning your server might get new features.

  • While I understand the need for them to maintain a steady income, all I can think of is Discord’s Nitro when I think of this upcoming Premium account offering.

    Except the premium offering pretty much just relates to media upload limit. I'm honestly surprised that they even allowed people to upload as much as they do.

    Makes sense to limit free users (will also help with spam) if they're not drowning in VC money.

  • The author responded to this response. You can see that here.

    (This looks the same until you scroll down; you linked to a differen,t older version of the site that did not update the linked post)

    The response is less of a response, more of an explanation of their current feelings pertaining to matrix. Seems odd when Matthew made some clear, individual points that could've been addressed.

  • Why would you think a chat app has full write access to your disk?

    Because any programs have that access??

  • The author responded to this response. You can see that here.

    (This looks the same until you scroll down; you linked to a differen,t older version of the site that did not update the linked post)

    @WhyJiffie@sh.itjust.works please update your link

  • Because any programs have that access??

    Again, no.

  • Because any programs have that access??

    Not sure what platform you're on but on Linux flatpak can limit access to files, and things like AppArmor can do that for any native app as well (though it can be pretty tedious to configure)

  • Again, no.

    how are programs denied that access? how is it that they can't do that?

    with the computers that I know, if I download a program, that'll be able to read, and also modify all the files that I have access to. this includes the ability to read the saved passwords from my browser, and to install browser addons without my consent or knowledge.

    what makes it so that it cannot happen on mainstream desktop computers?

  • Not sure what platform you're on but on Linux flatpak can limit access to files, and things like AppArmor can do that for any native app as well (though it can be pretty tedious to configure)

    on linux. flatpak. now, how mainstream is that setup exactly? are you saying that the issue I brought up does not apply to most of the people on the internet?

    it does not matter what platform I'm on. what matters is what do most people use. in the world where I live, most people use the windows operating system. there is no such protection at all. except when accounting for sandboxie and other obscure programs virtually no one knows about

  • how are programs denied that access? how is it that they can't do that?

    with the computers that I know, if I download a program, that'll be able to read, and also modify all the files that I have access to. this includes the ability to read the saved passwords from my browser, and to install browser addons without my consent or knowledge.

    what makes it so that it cannot happen on mainstream desktop computers?

    how are programs denied that access? how is it that they can't do that?

    Apps are typically given their own dedicated storage volume, and access to any other part of the filesystem requires permission from the user.

    this includes the ability to read the saved passwords from my browser, and to install browser addons without my consent or knowledge.

    WTF kind of computers are you using?

  • how are programs denied that access? how is it that they can't do that?

    Apps are typically given their own dedicated storage volume, and access to any other part of the filesystem requires permission from the user.

    this includes the ability to read the saved passwords from my browser, and to install browser addons without my consent or knowledge.

    WTF kind of computers are you using?

    Apps are typically given their own dedicated storage volume, and access to any other part of the filesystem requires permission from the user.

    uh, no? on smartphones, yes, but not on computers.

    and even on smartphones. the chat app does have access to your messages, as I originally said

    WTF kind of computers are you using?

    desktop.. computers? you probably heard about operating systems, like windows, and linux..

  • Apps are typically given their own dedicated storage volume, and access to any other part of the filesystem requires permission from the user.

    uh, no? on smartphones, yes, but not on computers.

    and even on smartphones. the chat app does have access to your messages, as I originally said

    WTF kind of computers are you using?

    desktop.. computers? you probably heard about operating systems, like windows, and linux..

    uh, no?

    Uh, yes.

    the chat app does have access to your messages, as I originally said

    What you originally said was gibberish, but I digress. The chat app is open source, so you can evaluate what it's doing with those messages for yourself.

  • Apps are typically given their own dedicated storage volume, and access to any other part of the filesystem requires permission from the user.

    uh, no? on smartphones, yes, but not on computers.

    and even on smartphones. the chat app does have access to your messages, as I originally said

    WTF kind of computers are you using?

    desktop.. computers? you probably heard about operating systems, like windows, and linux..

    uh, no? on smartphones, yes, but not on computers.

    That's not true. Most operating systems at least have filesystem permissions, and on a lot of Linux distros you additionally get AppArmor or PolKit to further restrict what files a program can read/write.

  • on linux. flatpak. now, how mainstream is that setup exactly? are you saying that the issue I brought up does not apply to most of the people on the internet?

    it does not matter what platform I'm on. what matters is what do most people use. in the world where I live, most people use the windows operating system. there is no such protection at all. except when accounting for sandboxie and other obscure programs virtually no one knows about

    I mentioned Linux specifically because something like this is the hardest to set up on Linux. I (wrongly) assumed that since you were complaining about it not existing, you were on a platform where setting these permissions up isn't straightforward. App-specific file-acess permissions are on MacOS out of the box as a configurable setting for all applications (in the system settings menu), and I'm pretty sure Windows 10/11 has something similar in its settings menu as well.

    Edit:
    Also, if we're being pedantic, this is also a setting on both Android and iOS, with Android displaying the option to change access pretty much every time you pick out a file.

  • Matrix has always been way too bulky for being a simple messenger. Imo their architecture was cooked from the start.

    But its not a simple messenger though. If you want something simple, IRC is always available for use.

  • 59 Stimmen
    2 Beiträge
    1 Aufrufe
    C
    "mistakes"
  • 7 Stimmen
    6 Beiträge
    3 Aufrufe
    db0@lemmy.dbzer0.comD
    VC-backed OpenAI is the most valuable company in the world and is engaging in massive environmental destruction. The US state just went into cahoots with them to the tune of billions VC-backed Uber and AirBnb disrupted multiple estabilished industries for the worst by undercutting them through loss-leading. VC-backed Facebook killed or purchased all its rivals and consolidated almost all social media to the detriment of the whole world.
  • Why Japan's animation industry has embraced AI

    Technology technology
    12
    1
    1 Stimmen
    12 Beiträge
    5 Aufrufe
    R
    The genre itself has become neutered, too. A lot of anime series have the usual "anime elements" and a couple custom ideas. And similar style, too glossy for my taste. OK, what I think is old and boring libertarian stuff, I'll still spell it out. The reason people are having such problems is because groups and businesses are de facto legally enshrined in their fields, it's almost like feudal Europe's system of privileges and treaties. At some point I thought this is good, I hope no evil god decided to fulfill my wish. There's no movement, and a faction (like Disney with Star Wars) that buys a place (a brand) can make any garbage, and people will still try to find the depth in it and justify it (that complaint has been made about Star Wars prequels, but no, they are full of garbage AND have consistent arcs, goals and ideas, which is why they revitalized the Expanded Universe for almost a decade, despite Lucas-<companies> having sort of an internal social collapse in year 2005 right after Revenge of the Sith being premiered ; I love the prequels, despite all the pretense and cringe, but their verbal parts are almost fillers, their cinematographic language and matching music are flawless, the dialogue just disrupts it all while not adding much, - I think Lucas should have been more decisive, a bit like Tartakovsky with the Clone Wars cartoon, just more serious, because non-verbal doesn't equal stupid). OK, my thought wandered away. Why were the legal means they use to keep such positions created? To make the economy nicer to the majority, to writers, to actors, to producers. Do they still fulfill that role? When keeping monopolies, even producing garbage or, lately, AI slop, - no. Do we know a solution? Not yet, because pressing for deregulation means the opponent doing a judo movement and using that energy for deregulating the way everything becomes worse. Is that solution in minimizing and rebuilding the system? I believe still yes, nothing is perfect, so everything should be easy to quickly replace, because errors and mistakes plaguing future generations will inevitably continue to be made. The laws of the 60s were simple enough for that in most countries. The current laws are not. So the general direction to be taken is still libertarian. Is this text useful? Of course not. I just think that in the feudal Europe metaphor I'd want to be a Hussite or a Cossack or at worst a Venetian trader.
  • Pocket shutting down

    Technology technology
    2
    2 Stimmen
    2 Beiträge
    3 Aufrufe
    B
    Can anyone recommend a good alternative? I still use it to bookmark most wanted sites.
  • 1 Stimmen
    8 Beiträge
    5 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • Indian Government orders censoring of accounts on X

    Technology technology
    12
    149 Stimmen
    12 Beiträge
    4 Aufrufe
    M
    Why? Because you can’t sell them?
  • 361 Stimmen
    24 Beiträge
    5 Aufrufe
    F
    If only they didn’t fake it to get their desired result, then maybe it could have been useful. I agree that LiDAR and other technologies should be used in conjunction with regular cameras. I don’t know why anyone would be against that unless they have vested interests. For various reasons though I understand that it isn’t always possible - price being a big one.
  • 14 Stimmen
    2 Beiträge
    5 Aufrufe
    D
    "Extra Verification steps" I know how large social media companies operate. This is all about increasing the value of Reddit users to advertisers. The goal is to have a more accurate user database to sell them. Zuckerberg literally brags to corporations about how good their data is on users: https://www.facebook.com/business/ads/performance-marketing Here, Zuckerberg tells corporations that Instagram can easily manipulate users into purchasing shit: https://www.facebook.com/business/instagram/instagram-reels Always be wary of anything available for free. There are some quality exceptions (CBC, VLC, The Guardian, Linux, PBS, Wikipedia, Lemmy, ProPublica) but, by and large, "free" means they don't care about you. You are just a commodity that they sell. Facebook, Google, X, Reddit, Instagram... Their goal is keep people hooked to their smartphone by giving them regular small dopamine hits (likes, upvotes) followed by a small breaks with outrageous content/emotional content. Keep them hooked, gather their data, and sell them ads. The people who know that best are former top executives : https://www.theguardian.com/technology/2017/oct/05/smartphone-addiction-silicon-valley-dystopia https://www.nytimes.com/2019/03/01/business/addictive-technology.html https://www.today.com/parents/teens/facebook-whistleblower-frances-haugen-rcna15256