So You Want To Write An Open Source Discord Replacement

[enejjohhem@mastodon.social]

@0xabad1dea End to end encryption would be a really cool bonus

[isotopp@infosec.exchange]

@enejjohhem @0xabad1dea No.

[isotopp@infosec.exchange]

@isis @0xabad1dea com.apple.quarantine is not a security feature.

It is a sales tool.

[isis@infosec.exchange]

@isotopp @0xabad1dea If you’re German, I must ask you not to reply to my posts. T.I.A.

[wooshell@chaosfurs.social]

@ay @0xabad1dea If Telegram spent any effort into making their voice calls (p2p and group) more stable and user-friendly, nobody would need Discord anymore.

[troglet@mastodon.social]

@0xabad1dea Certainly, most of this is true. You can always add the Things You Don't Need later. You need the other stuff to gain any traction at all, though.

Admittedly, I do not have any fucking clue how Discord works, and I have literally zero idea why people use it. I've spent some time there and found the entire experience fucking horrible.

(Which is why I'm not trying to write the replacement. I'm more than happy with IRC)

[ury@fedi.trough.lol]

@0xabad1dea I think that federation at this point it's not a luxury, but a necessity. Given the direction of where global net is headed (regulation, centralization, etc), users must have a way to migrate their accounts and friends to some independent server hosted in a neutral location.

[mkoek@mastodon.nl]

@0xabad1dea I fail hard on the last item on your list of needed things, so I will not start such a project, I promise 🙂

[creepy_owlet@mastodon.online]

@RogerBW @0xabad1dea these are fair points, but you need to keep in mind that not every chat room is designed for high stakes conversations. Offline parallel: you're applying the security standards of a revolutionary cell to a comic convention or a book club. Which would be fine if it did not lead to significantly degraded user experience.

[rogerbw@discordian.social]

@creepy_owlet @0xabad1dea I agree that that's a valid argument; the downside is that leaving out encryption is essentially telling significant numbers of people (deliberately or not) "we're not for you, we're only for people with enough social capital that they don't have to watch what they say and people who are eternally on edge".
That may work for whatever use case you have in mind of course, and I've done things like that myself, but these days it's not a good smell.

[the_wub@mastodon.social]

@creepy_owlet @RogerBW @0xabad1dea My experience of trying to keep chat channels for specific purposes on topic is that many people find it hard to stay on topic

Suddenly personal information pops up as they either forget or can't be bothered opening another channel or a private chat. Or they really don't understand the difference between "private" and "private".

So if you apply the security standards of a revolutionary cell to normal chats then what you "blurt out" will always remain private.

[the_wub@mastodon.social]

@0xabad1dea P2P communications when technically appropriate (one to one chats and small groups).

So you only need to leave a trace on a presence server/system.

I would suggest that federation is needed given the internet "land grab" that has taken place since the heady days 1990s. Power over the internet is now concentrated in very few hands.

That a problem with one AWS server farm can have such a big impact on the world is ridiculous not to mention insane from a strategic standpoint.

[ljrk@todon.eu]

@stella @0xabad1dea Oh, absolutely, don't worry, no danger there :D

[the_wub@mastodon.social]

@0xabad1dea "- a user interface that is Normal "

Perhaps "a range of user interfaces to suit a variety of preferences that can be select and changed by the user at will."

Not just light vs dark themes but also the difference between more traditional desktop metaphors (IceWM/XFCE) and the swipe driven small-screen-optimised user experience that many phone users seem to favour (for reasons known to those users).

[ljrk@todon.eu]

@katarjin.bsky.social @0xabad1dea Idk, I dislike Skype but it did tick those boxes as well :'-D

But it's mostly the UX. I find the threads and channels and idk everything very... overwhelming. I never find the stuff I wanted to reply to.

[crowfea@app.wafrn.net]

To be honest I do not think the normal user who is just sick of Discord and looks for something similar does really care, but it is good to have it in case you want it later I guess

Most of my friends do not even know what federation means, I have to explain to them what I learned from using Mastodon and WAFRN myself

[catsalad@infosec.exchange]

@0xabad1dea Also needed:

- a cat mascot!

[realn2s@infosec.exchange]

@ljrk @katarjin.bsky.social @0xabad1dea
I'm with you. I didn't/don't get Slack, Discord, Matrix (and neither IRC). I understand group chats but as soon as they get busy I'm completely overwhelmed and feel left alone by the tools

[maswan@mastodon.acc.sunet.se]

@catsalad @0xabad1dea catcatchat!

[isotopp@infosec.exchange]

@enejjohhem @0xabad1dea

A system with end-to-end encryption has no access to message content on the server because that is literally the definition of E2E encryption.

That means you will never have access to past content – you weren't in the receiver list of a channel when the message was sent, and you won't retroactively get it, because the server cannot add you. You are essentially joining an empty channel or even server.

That also means that the server cannot look into message content, for example to identify and autoban spammers, work on message moderation or otherwise do what anybody would reasonably expect a server to do in terms of safety and abuse control.

It also means that the server cannot provide you with a meaningful server based search at all. Instead the client has to download the content it has keys for and then search locally. That won't happen except on desktop devices, and even there it won't work well.

You could add a server machine user to every message so that search and automoderation would have access to message content. But that means effectively you don't have, and don't need end, and don't want to end-to-end encryption.

Which you don't.

It's not a cool feature, for anybody except the most limited set of users, and these will still hate every second of the experience they are forced to have by their circumstances.