instant-messenger: add privacy concerns warning to Riot #1024

Merged
Mikaela merged 1 commits from riot2 into master 2019-07-17 00:15:40 +00:00
Mikaela commented 2019-07-11 16:01:31 +00:00 (Migrated from github.com)

Closes: #1007
Closes: #1004
Closes: #1023 (supersedes)

See also: #840

Closes: #1007 Closes: #1004 Closes: #1023 (supersedes) See also: #840
blacklight447 (Migrated from github.com) reviewed 2019-07-11 16:01:31 +00:00
jonah reviewed 2019-07-11 16:01:31 +00:00
Vincevrp (Migrated from github.com) reviewed 2019-07-11 16:01:31 +00:00
netlify[bot] commented 2019-07-11 16:02:07 +00:00 (Migrated from github.com)

Deploy preview for privacytools-io ready!

Built with commit 5015c49994

https://deploy-preview-1024--privacytools-io.netlify.com

Deploy preview for *privacytools-io* ready! Built with commit 5015c49994e12d842d57abdccb1e33d9cdf04929 https://deploy-preview-1024--privacytools-io.netlify.com
ggg27 (Migrated from github.com) reviewed 2019-07-15 02:36:35 +00:00
@ -26,3 +26,3 @@
image="/assets/img/tools/Riot.png"
description="Riot.im is a decentralized free-software chatting application based on the <a href\"https://matrix.org/\">Matrix</a> protocol, a recent open protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too. <span class=\"badge badge-warning\" data-toggle=\"tooltip\" title=\"The software is currently in beta and the mobile client states 'End-to-end encryption is in beta and may not be reliable. You should not yet trust it to secure data.'\">beta <i class=\"far fa-question-circle\"></i></span>"
description="Riot.im is a decentralized free-software chatting application based on the <a href\"https://matrix.org/\">Matrix</a> protocol, a recent open protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too. <a href=\"https://github.com/vector-im/riot-web/issues/6779\"><span class=\"badge badge-warning\" data-toggle=\"tooltip\" title=\"The end-to-end encryption is currently in beta and the mobile client states 'End-to-end encryption is in beta and may not be reliable. You should not yet trust it to secure data.'\">Experimental <i class=\"far fa-question-circle\"></i></a></span> <a href=\"https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0\"<span class=\"badge badge-danger\" data-toggle=\"tooltip\" title=\"Riot sends a lot of data to matrix.org and vector.im with default settings that aren't trivial to change, also with selfhosted homeservers\">Privacy concerns</span></a>"
website="https://riot.im/"
ggg27 (Migrated from github.com) commented 2019-07-15 02:36:30 +00:00

What data does Riot send? They have opt-in analytics, is there any other issues?

What data does Riot send? They have opt-in analytics, is there any other issues?
Mikaela (Migrated from github.com) reviewed 2019-07-15 08:24:11 +00:00
@ -26,3 +26,3 @@
image="/assets/img/tools/Riot.png"
description="Riot.im is a decentralized free-software chatting application based on the <a href\"https://matrix.org/\">Matrix</a> protocol, a recent open protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too. <span class=\"badge badge-warning\" data-toggle=\"tooltip\" title=\"The software is currently in beta and the mobile client states 'End-to-end encryption is in beta and may not be reliable. You should not yet trust it to secure data.'\">beta <i class=\"far fa-question-circle\"></i></span>"
description="Riot.im is a decentralized free-software chatting application based on the <a href\"https://matrix.org/\">Matrix</a> protocol, a recent open protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too. <a href=\"https://github.com/vector-im/riot-web/issues/6779\"><span class=\"badge badge-warning\" data-toggle=\"tooltip\" title=\"The end-to-end encryption is currently in beta and the mobile client states 'End-to-end encryption is in beta and may not be reliable. You should not yet trust it to secure data.'\">Experimental <i class=\"far fa-question-circle\"></i></a></span> <a href=\"https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0\"<span class=\"badge badge-danger\" data-toggle=\"tooltip\" title=\"Riot sends a lot of data to matrix.org and vector.im with default settings that aren't trivial to change, also with selfhosted homeservers\">Privacy concerns</span></a>"
website="https://riot.im/"
Mikaela (Migrated from github.com) commented 2019-07-15 08:24:10 +00:00

Did you click the link, https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0 ?

It has many components that Riot phones home to often, some are mentioned "in a small print" that you have to understand in login screen or settings (even if you cannot change them) or follow some rooms actively to understand and some aren't even mentioned anywhere such as the integration server Scalar.

Did you click the link, https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0 ? It has many components that Riot phones home to often, some are mentioned "in a small print" that you have to understand in login screen or settings (even if you cannot change them) or follow some rooms actively to understand and some aren't even mentioned anywhere such as the integration server Scalar.
ggg27 (Migrated from github.com) reviewed 2019-07-15 22:22:32 +00:00
@ -26,3 +26,3 @@
image="/assets/img/tools/Riot.png"
description="Riot.im is a decentralized free-software chatting application based on the <a href\"https://matrix.org/\">Matrix</a> protocol, a recent open protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too. <span class=\"badge badge-warning\" data-toggle=\"tooltip\" title=\"The software is currently in beta and the mobile client states 'End-to-end encryption is in beta and may not be reliable. You should not yet trust it to secure data.'\">beta <i class=\"far fa-question-circle\"></i></span>"
description="Riot.im is a decentralized free-software chatting application based on the <a href\"https://matrix.org/\">Matrix</a> protocol, a recent open protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too. <a href=\"https://github.com/vector-im/riot-web/issues/6779\"><span class=\"badge badge-warning\" data-toggle=\"tooltip\" title=\"The end-to-end encryption is currently in beta and the mobile client states 'End-to-end encryption is in beta and may not be reliable. You should not yet trust it to secure data.'\">Experimental <i class=\"far fa-question-circle\"></i></a></span> <a href=\"https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0\"<span class=\"badge badge-danger\" data-toggle=\"tooltip\" title=\"Riot sends a lot of data to matrix.org and vector.im with default settings that aren't trivial to change, also with selfhosted homeservers\">Privacy concerns</span></a>"
website="https://riot.im/"
ggg27 (Migrated from github.com) commented 2019-07-15 22:22:32 +00:00

Sorry, I did not see this URL.
Mistake on my end, didn't see the href for the button.

Sorry, I did not see this URL. Mistake on my end, didn't see the `href` for the button.
ggg27 commented 2019-07-16 17:49:56 +00:00 (Migrated from github.com)

You know, it might be better to instead of listing Riot list matrix.
You could them change the description to:

Matrix is a decentralized free-software protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too[1]. A full list of clients is listed here. We recommend using a free software client with E2E support like Riot or WeeChat.

[Matrix Logo]

Instead of a warning it might be better to have a notes tag:
<a href=\"https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0\"<span class=\"badge badge-danger\" data-toggle=\"tooltip\" title=\"Riot sends a lot of data to matrix.org and vector.im with default settings that aren't trivial to change, also with selfhosted homeservers\">Notes</span></a>

  • Just a thought

Btw, this whole comment is licensed under CC0.
Except for the 3rd party names such as Github, Riot, WeeChat, and Matrix.

You know, it might be better to instead of listing Riot list matrix. You could them change the description to: > Matrix is a decentralized free-software protocol for real-time communication offering E2E encryption. It can bridge other communications via others protocols such as IRC too[[1](https://matrix.org/docs/guides/types-of-bridging)]. A full list of clients is listed [here](https://matrix.org/clients/). We recommend using a [free software](https://www.wikipedia.org/wiki/Free_software) client with E2E support like [Riot](https://www.wikipedia.org/wiki/Riot.im) or [WeeChat](https://www.wikipedia.org/wiki/WeeChat). [[Matrix Logo](https://www.wikipedia.org/wiki/Matrix_(protocol)#/media/File:Matrix_logo.svg)] Instead of a warning it might be better to have a notes tag: `<a href=\"https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0\"<span class=\"badge badge-danger\" data-toggle=\"tooltip\" title=\"Riot sends a lot of data to matrix.org and vector.im with default settings that aren't trivial to change, also with selfhosted homeservers\">Notes</span></a>` - Just a thought ____________________ Btw, this whole comment is licensed under [CC0](https://bin.privacytools.io/?bccb558312d5eb46#AoCqeAyNpN2SZ05ftUE4EmZa9ZzNmUkdkuKGCZpwETY=). Except for the 3rd party names such as Github, Riot, WeeChat, and Matrix.
Mikaela commented 2019-07-16 19:53:50 +00:00 (Migrated from github.com)

You know, it might be better to instead of listing Riot list matrix.

This is being discussed in https://github.com/privacytoolsIO/privacytools.io/issues/1005.

WeeChat.

I have been using WeeChat for years and it's an IRC client, not a Matrix client. There is a third party scripts adding Matrix support, but it's complicated to install as it's not in the official weechat/scripts repository (or wasn't when I last heard) and it has depedencies that are not available in Debian Testing (or had a week or two ago). I also don't think I could get my family members to use WeeChat, so I think it gets closed out of PTIO.

I cannot think of a good client to replace Riot at this time, but I would be open to PRs adding them as worth mentioning.

> You know, it might be better to instead of listing Riot list matrix. This is being discussed in https://github.com/privacytoolsIO/privacytools.io/issues/1005. >> WeeChat. I have been using WeeChat for years and it's an IRC client, not a Matrix client. There is a third party scripts adding Matrix support, but it's complicated to install as it's not in the official weechat/scripts repository (or wasn't when I last heard) and it has depedencies that are not available in Debian Testing (or had a week or two ago). I also don't think I could get my family members to use WeeChat, so I think it gets closed out of PTIO. I cannot think of a good client to replace Riot at this time, but I would be open to PRs adding them as worth mentioning.
privacytoolsIO (Migrated from github.com) approved these changes 2019-07-17 00:15:18 +00:00
This repo is archived. You cannot comment on pull requests.
No Milestone
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#1024
No description provided.