Title.

I’ve used it before, but I’m not really sure how I feel about it. Would you use it on a day-to-day basis?

  • shrugal@lemm.ee
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    2 months ago

    I really like the idea of creating a decentralized network that has a fair monetization model built right in, instead of relying on donations like the Fediverse. Crypto got a very bad rep, but this kind of stuff is exactly what it’s good for imo.

    It also has some core features that are missing from other similar messengers, like multi-device sync. And lastly, the devs seem pretty capable and open as well. They are very transparent with their work and seem to have the right ideas about where things should go and which trade-offs to make. E.g. their reasoning for not using the Signal protocol seems solid to me.

    So I’m hopeful, but time will tell if it all works out.

  • mox@lemmy.sdf.org
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    2 months ago

    When I last looked it over (maybe a year or so ago) these problems stood out:

    • Immature code base.
    • Custom onion network that seemed unlikely ever to have enough users to be very effective against attacks.
    • Small limit on chat group size. (I think they have raised it from 10 to 100 more recently.)
    • Small limit on media attachment size.
    • Desktop support appeared to be an Electron app. (I avoid those because they’re incredibly wasteful of resources, and often suffer from Electron’s many bugs.)

    Its design showed some neat ideas, but it was not practical for my needs.

    Also, I have read more recently that Session removed forward secrecy, which rather undermines its value proposition.

  • jet@hackertalks.com
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    2 months ago

    The session developers are interesting. But I don’t recommend anybody use session.

    They took the signal protocol, and removed perfect forward secrecy because they found it hard to implement.

    That’s crazy.

    Also all of the file transfers on session go through servers in Canada. Centralized.

    I give them kudos for trying to make the network self-sustainable through their crypto thing, but they never found a way to actually monetize it, there’s no paper use, it feels like the idea is kind of dead in the water at this point. I would not recommend session for any serious non-experimental usage

      • jet@hackertalks.com
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        2 months ago

        It’s not a lie. I have read their post. And my interpretation reading between the lines is they dropped it because of complexity

          • jet@hackertalks.com
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 months ago

            Fair enough. They did not explicitly say they removed it for complexity.

            The facts are: they started with a protocol that had perfect forward secrecy, and they removed it, but not for philosophical reasons.

            They were not opposed to perfect forward secrecy

            In today’s ecosystem there are products that use onion networks and provide perfect for secrecy like simple x, and briar over tor…

            You’re welcome to make any decision you like, if you want to use session go right ahead. I’m not going to stop you, and I’m happy you’re doing so. We’re all better for choice

      • jet@hackertalks.com
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 months ago

        https://getsession.org/session-protocol-technical-information

        Nope. Whenever anybody ask them, they refer to this and close the ticket

        I find their technical rationale, while welcome, a lot of hand waving to say they couldn’t figure out how to implement it, but it was not important because it’s not a big threat, because if somebody has the device they can get all the messages on the device anyway…

        Losing perfect forward secrecy for “simpler code” is a strong design choice they made. I respect them for documenting this, I wish them the best of success, but that’s not a trade-off I’m willing to make for no benefit

  • Lemmchen@feddit.de
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    2 months ago

    I was one of their strongest advocates, but their progress is unbearably slow. SimpleX for example has advanced a lot more in the same timeframe.
    To me it seems like at the current pace they will need another two to three years to solve their problems.

    • youmaynotknow@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      2 months ago

      My use of session is limited to my kids, wife and a couple of friends. I had high hopes for it when I started using it, but its devs have fallen incredibly short. I have also tried SimpleX on and off, but for some reason, it drinks battery like there’s no tomorrow, so I’m off of it for now.

        • youmaynotknow@lemmy.ml
          link
          fedilink
          arrow-up
          3
          ·
          2 months ago

          Yup. Just tried it again with a few paranoid friends like me, and the battery drain is now gone. Just moved the FAM over too 🤣🤣

    • narc0tic_bird@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      2 months ago

      I think the server infrastructure is different? SimpleX is similar to a federation network, isn’t it? Session uses an Onion-based approach like Tor.

      • EngineerGaming@feddit.nl
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        2 months ago

        Yes. The difference is that you need to pay to host a Session node, and pay BIG money. That locks out most people that aren’t cryptobros, companies or government agencies. While both a Tor/i2p node and Simplex server (or XMPP, or Matrix) are decidedly easy to set up.

        • 𝚜𝚑𝚊𝚍𝚎𝚊𝚛𝚐@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          2 months ago

          Each SimpleX release gets me closer to using it. The upcoming v5.8 update is no exception:

          This release focus is improving the app usability, and preparing the foundation for v5.8 that will provide an in-built protection of user IP addresses when connecting to unknown file and messaging servers, reducing the need to use Tor (which would still remain supported via SOCKS proxy, for additional privacy).

          And another round of security audits:

          We are planning a 3rd party security audit for the protocols and cryptography design in July 2024, and also the security audit for an implementation in December 2024/January 2025,

          Looking good.

          Edit: SimpleX v5.7.5 is 313 MB without Data/Cache on Android. Yikes.

          Client Version App size
          SimpleX v5.7.5 313 MB
          Threema Libre 5.3.1l 138 MB
          Jami 20240521-01 102 MB
          Briar 1.5.11 101 MB
          Session 1.18.4 99 MB
  • DuckGuy@mander.xyz
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    I really do wonder why more people aren’t using Delta Chat.

    spoiler

    Me included.

    Anyway. I remember using Session for a few months a couple of years ago. Something about the interface was bugging me. It felt sluggish.

    • mox@lemmy.sdf.org
      link
      fedilink
      arrow-up
      1
      ·
      2 months ago

      Delta Chat

      It’s an email front-end with opportunistic PGP, including all the drawbacks thereof.

      Not really comparable to a modern e2ee instant messenger.

  • skribe@aussie.zone
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    I use it for our family chat. It’s okay. The biggest issue is sometimes messages are delayed (up to half-an-hour at times). Other than that, it’s fine. It meets our needs.

  • swooosh@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    2 months ago

    My opinion: it’s good. I would use it on a daily basis if someone would ask me to text on it with her. But I’d never ask someone else to use it because there are, in my opinion, better options like matrix and signal which I mandate people to use.

    • JustMarkov@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      2 months ago

      signal

      I personally think that Session is better than Signal. At least it doesn’t require a phone number to register.