• haui
    link
    fedilink
    29 months ago

    Thats what I meant. The admin is the person that most always has your data but data breaches are other people getting in which is not that hard to prevent. You dont have to run faster than the bear… just faster than the guy next to you.

    For signal we assume that native connections are e2ee, for whatsapp I‘m less sure thats really the case and for discord we know that nothing is encrypted.

    So yes, if someone got into the server and started poking around undetected, one might have their signal texts laid bare. I‘m pretty sure the likelyhood isnt as high as a phone getting hacked, especially for small servers that are obscure.

    In any case, you do you.

    • @[email protected]
      link
      fedilink
      29 months ago

      Which gets right back around to my point. If you use Signal, but you stick a Matrix server onto it, you have made your data less private.

      It’s not choosing between “your phone could get hacked” OR “another admin can see or accidentally leak your data”…

      It’s choosing between “your phone could get hacked” or “your phone could get hacked and extra points of failure are added too.”

      Matrix bridging is a convenience service, like Beeper was… Definitely not a privacy one.

      • haui
        link
        fedilink
        29 months ago

        And it turns right around into my point: aside from signal, there is no such thing as privacy and discord and whatsapp should at best not be executed on your phone. And no, the person using a bridge on a server that is not their own is not the person that correctly sandboxes the app or roots their phone.