I’ll preface saying I’m not a security expert but my understanding Is sometime in 2025 they changed the encryption scheme in matrix following a lot of disclosures of how it was broken to a new scheme that uses MLS and supports forward secrery. I haven’t seen a post yet from security experts discrediting it yet. It sounds like it still has issues from what you’re saying, about soatok disclosing some new problems with it.

On the call side they have element call instead of relying on a jisti widget (but only a few client support it). Afaik it supports encryption. They talked about it last year at the matrix conference https://cfp.2025.matrix.org/matrix-conf-2025/talk/BQZHAH/

You’re right, I was wrong about signal using MLS. I recall reading it somewhere but can’t find the source now.

As for my response, it was about forward secrecy which they do claim to have now. Yeah I wouldn’t rely on matrix E2EE right now, and until its been seriously audited and replaced with something security experts agree on.

For a discord replacement (with public not E2EE rooms) it seems to be the best replacement just because that’s where communities are right now. XMPP+OMEMO is not that interesting to me because I don’t know of any communities that are on there or other users to be a Discord replacement and its E2EE story is not as good as Signal to be a Signal replacement.

For a signal replacement I’m not sure SimpleX or Briar are there yet. SimpleX doesn’t have multi device support last time I checked which is annoying if you’re used to useing signal on your phone + desktop. Any Briar doesn’t work on IOS, so if you chat with anyone who has an iphone they are SOL.

Does matrix have forward secrery now since the switch to MLS? (I.E. the same encryption scheme Singal uses) https://matrix.org/blog/2025/06/dispelling-myths/

They still have a large metadata leak that to my understanding can’t be fixed until they introduce stuff like pseudo anonymous user handles and room handles.

Not a good discord replacement but setting up nextcloud talk (simple p2p voice chat) and then the high performance backend (better supports video/voice calls between 3+ people) was relatively easy. We use it among my family now to have group calls instead of relying on facebook messenger.

If you use the AIO it comes with the high performance backend already set up afaik.

I run nextcloud using the official release without the docket AIO image, but you can just run the high performance backend from docker. This is what I do on my nextcloud server. https://arnowelzel.de/en/nextcloud-talk-high-performance-backend-with-docker

It’s pretty straightforward, just run docker container, if you use a reverse proxy much sure the signaling server is properly configured on the reverse proxy and then modify the next cloud settings to point to the self hosted HPB.

If OP wants voice and video chat like they say they’d have to host synapse and use element afaik.i don’t think any of the other home servers support matrix calling. Cinny and fluffychat don’t support voice or video calls. Fluffychat has it as an “option” but it’s currently broken last time I tried it. Schildi chat might work for voice and video since it’s an element fork. I’ve not tried it so I don’t know for sure.

Was this images that were auto uploading from a mobile phone? I think the bug was a permission issue in Android, if you don’t grant location access it can’t get any of the meta data of the photo (iirc).

you’re probably right as to why.

I’ll note that on my gaming desktop I decided to try out Debian instead of my usual choice of Fedora and its worked fine for gaming with latest gen CPU and GPU. I did install the steam flatpak which will have a newer version of Mesa. I think this is a good middle ground for a system you don’t want to mess with too much.

I think he’s referring just to the letters OGC in the font they chose.

By desktop do you mean the jitsi call widget thing? Instead of the native call support that I believe element x uses?

Do the voice call and video features work with continuwuity?

The idea would be two monitors, keyboard, and mice connected to one PC so two people could play games on the same beefy computer at the same time. To avoid issues with steam detecting another instance running, it would be great if the two users were isolated from each other in some way. Also ideally avoiding the need to purchase a second beefy GPU. So PCI-passthrough is out, as you’re giving exclusive access to the GPU in the VM (some GPU support virtualization, but my 9070 xt does not). My understanding is that multi-seat as described here for systemd https://wiki.debian.org/Multi_Seat_Debian_HOWTO should be able to do this as you can have two user logged in at the same time, but this require each seat to have its own dedicated GPU for display. The docs from debian seem to suggest the DRI_PRIME may still work to use the other GPU. I am curious if anyone has tried this before and knows if it works I go around buying a cheap secondary GPU.

VNC seems like an interesting idea, I wonder what the latency would be like for

How do you do it with x? I would be interested in looking at this.

I think in theory it could be done in Wayland if a compositor implements multi-seat support. There is a fork of wlroots & labwc in this repo that seems like it’s trying to do that https://github.com/garlett/multiseat

Very coincidental that you just posted this. I’ve been looking into p2p apps and Nostr caught my attention. Unfortunately like most p2p stuff it seems that most people using it are crypto affliated which is a big turn off.

The more I looked at it though nostr didn’t seem that interesting to me as a protocol compared to other p2p protocols like ipfs, Yggdrasil, i2p. Manly because it still seems to centralize around relays and the effectively ended up being your server. From my understanding its easier to move from relay to another since you can publish to multiple relays and your identify is just a key pair so your ID is “portable”. The big thing I see from Nostr is a priority to build apps on top of their protocol, compared to the other p2p protocols.

I think it would be neat if there was a non crypto affiliated social media platform built on top of a p2p protocol that did the following

• Use key identify system so your ID is portable and not tied to a single identity server
• All data is locally stored on your machine by default with the option to pin it to a server similar to the ipfs pinning servers
• Since it p2p, built with the idea that your peer maybe offline and queue sharing posts until they are online. The pinning servers could also act as an always online client for you to store messages. Like a bouncer in IRC
• No public feed, since it would be a moderation nightmare, you can only see what your followers post and what they reshare. Probably there would be feeds from trusted people you could subscribe to. This shared feeds could be a great way to build communities like in the fediverse
• Built on a p2p protocol that handles thing like NAT punch through and peer connection so anyone’s device can act like a peer without needing some server to relay messages to them, or having to port forward on their home connection. Nostr doesn’t appear to do this, since it relies on all messages passing through (and hosted by) relay servers. So your own device can’t act as a peer on Nostr.

These are the things that would make p2p social media more interesting to me than activitypub. Sadly as far as I can tell Nostr isn’t really this, and I’m pretty sure none of the other protocols I mentioned have build an app like this on top of them.

It’s unfortunate that sweden decided to lock 2FA behind proprietary smartphone apps.

For every country its going to be a different story. I think instead of trying to build an app ecosystem for things like bank apps on linux it would be easier for citizens of those countries to convince the government / banks to allow other 2FA methods like OTPs that can work on any a device using an OTP client. That would honestly benefit more people as whole since they wouldn’t be lock down to just Android/Apple or even owning a smartphone. They could do all their important government/finance stuff just with a computer.

Why can’t we just use banking websites? You don’t need an app ecosystem for that. They just need to build a responsive website that will work on a computer or phone. If you have bank to bank transfer (like e-transfer in Canada) that can be done from the mobile website as well.

Payment like NFC payment is a different story. I suspect its unlikely we ever see that.

I’m not sure if you can do it without authenticating on the remote. Have you seen sshuttle? Maybe you can run that on the remote to connect to the local machine. If the issue is that the remote “can’t see” the local machine to ssh into it then you could try something like reverse tunnel the ssh port to the remote, and then use sshuttle to connect to the local port that is forwarding traffic.