Social Media - Instant Messaging (Telegram, Matrix, Threema)

  • EpicureanFriends account at Matrix.org


    Update 2-6-22: This account is still there, but I am not signing in very often. I have cooled off toward Matrix for a variety of reasons, mainly that they too seem to be getting a lot of mysterious funding that no doubt has strings attached. They are open source and the security may be there if you run your own server, but at this point they don't make it easy to do that and so using the matrix.org main server probably subjects you to unwanted vulnerabilities.

  • Here is the link to join the EpicureanFriends Telegram channel. Please be sure to use this link rather than searching within Telegram, because due to the way Telegram seems to work there are some older and now unused channels of the same name. The links below are the best way to get to the right place:



    EpicureanFriends
    The telegram group of EpicureanFriends.com
    t.me



    Update 2-6-22: As with Matrix, this account is still there, but I am not signing in very often. I have cooled off toward Telegram just like Matrix, mainly that they too seem to be getting a lot of mysterious funding that no doubt has strings attached. They are not fully open source, nor are they fully encrypted, so they are considerably less secure even than matrix. 

  • Cassius

    Changed the title of the thread from “Social Media - Telegram Channel” to “Social Media - Instant Messaging (Telegram, Matrix, Threema)”.
  • Today at the suggestion of another user here I have started exploring THREEMA as an alternative messenger. The great advantage that Threema has over Signal, Telegram, Whatsapp, and similar is that it does not require any identifying information like Telephone numbers (which Signal and Telegram require). The "disadvantage" is that there is a four dollar one time (lifetime) fee to join the network. I put "disadvantage" in quotes because I agree with Threema's argument -- that if you aren't paying something for the product, then "YOU are the product" because the only way such companies can stay in business is data mine your information. I also don't consider it a major disadvantage because the cost is minimal, and probably serves the good purpose of making sure that those who join are serious (to the extent that four dollars is "serious"). Threema is based in Switzerland where the European privacy laws seem to be considerably stronger than they currently are in the USA.


    I have set up an EpicureanFriends group on Threema, but consistent with its privacy focus it's no possible to find it on a public directory. Someone who is currently a member has to add you to the group.


    I will probably make a post about this on the front page, and if things continue to look good Threema will probably become my main backup alternative to the forum itself. I've been tempted to launch a Telegram channel, but I think in the end that this forum software does most of the communication we need, and if we want a second / backup solution to communicate when the forum is down or in an emergency, Threema makes the most sense.


    If you use Threema and would like to be a part of the EpicureanFriends group there, and thereby be part of our emergency backup / instant messenger system, just send me a message and we will get you added. That way if anything ever happens to your account of the forum goes down for a period of time you'll have a way to stay in touch until we are back up.




    A comparison of the major messengers from Threema's point of view is here.

  • Cassius, all of these tools are good. (Tho I would say don't consider the opinion of one of the competitors as the best source fir a comparison, as they just might have a bit of bias in their position! 🙂). Signal, the only private messenger that uses open source code & peer-reviewed cryptographic protocols, is IMO the most secure of them, but jeez... EF doesn't really have military level secrets or anything anyway! All or these are good products. Threema should do fine, and not requiring your phone # is a nice touch! But I'm not sure I understand why EF needs an "emergency backup / instant messenger system". What would that do for us? Under what circumstances would it be needed?

  • First and foremost in case a glitch in the site causes it to go down for more than a few minutes. We've been very lucky so far that the software has been very stable and your humble administrator has avoided some of his more hamfisted acts of technical stupidity.


    Secondly, while you are right that we have no state secrets, it's less clear that we have no reason for anyone to dislike us. A large part of our safety has come through obscurity. Hopefully we won't always be so secure, at which point a number of Epicurean beliefs would make it less than popular everywhere and this subject of a malicious meddling.


    Third (and this is not emergency backup) I do think some people like instant messangers for the notification abilities the website doesn't have, and the reason for threema is that I think we want to provide users with the ability to contact each other directly but also anonymously (if both agree) and Threema's no personal id architecture seems to suit that best.

  • Continued Technology Planning:


    This post is not meant to be a comment on politics, and for the time being I will continue to censor myself or any threads that publicly take sides in some of the existing world controversies. Of course feel free to discuss those privately - just not in the public threads. But as custodian of the forum I have to remain aware of relevant events, and I have to make several observations:


    (1) It is increasingly clear that de-platforming of ideas and groups that are not approved by societal elites is the next frontier in modern warfare and social control.


    (2) Throughout history, there have been few viewpoints which have been more disapproved by societal elites than Epicurean philosophy.


    (3) I understand that Julian Assange and perhaps others on the cutting edge of technological privacy are now recommending "Briar" ( https://briarproject.org/ ) as the most resilient instant messenger current available. It requires no telephone number or identifying information, and is free.


    (4) I intend to start experimenting with Briar, and I have set up a cassiusamicus account there. I expect this to remain strictly experimental and there is no need for anyone here use it. However if we have other "techies" here who like to keep on top of secure communication alternatives, please let me know what you think of Briar and/or other emerging alternatives.


    (5) I would also like to continue to explore backup plans and other disaster response scenarios to get the forum or at least its basic information back online if there is a disruption with our hosting provider, so once again any techies who have ideas on this subject, please feel free to comment in the thread or contact me privately.

  • Suppose I don't want to create profiles on a whole bunch of social media applications that I will otherwise never use; is there a way to simplify all of this, perhaps with RSS?


    I suspect there are quite a lot of people like me. We don't want to manage more apps, we don't want more notifications to ignore, we don't want a cluttered email inbox with stuff we've already seen on the website, but we might want that one all-important doomsday notification when the site goes down.


    Also, we'd like it to be quite simple ^^

  • Briar has some worthy technology, but it does seem very focused on human rights activists, journalists in war situations, etc. It might be so secure it is too restrictive for this purpose. Not saying so, just saying something to consider as we eval.

  • I have several impractical ideas; Big Ben striking 20; blue smoke from the Sistine Chapel; a searchlight signaling the face of Epicurus on the clouds over New York City...

  • I'm digging the Epirurus face search light! :thumbup:


    (Sorry, Cassius, we're being irreverent! The "kids are running loose in the front yard!!!")

  • I think we can all rest assured that we aren't going to need such a system in the immediate future. Rather I am mainly posting to stir sparks of interest in the geeks among us to plan for the future - which come to think of it is sort of a theme of many of my posts! Division of labor!

  • Hi there! I completely understand your sentiment about Matrix.org and the potential vulnerabilities when using its central server. It's good to hear that you are still using this account, even if you aren't signing in as often. We live in an age where data security is of paramount importance. When it comes to using Matrix.org, I think it's important to consider the potential risks and weigh them against the benefits of using their services. Anyway, also I would recommend creating a TikTok interactive account to promote EpicureanFriends. You can use platforms like fanhype.de to boost the audience. It will bring a lot of people to the community.

  • TaasEart good to hear from you. Sounds like you are tech-oriented. If you have any thoughts about the relative benefits and detriments of communication platforms I would be glad to hear them. Although we have a messaging system here on the forum software, it seems likely that at some point more of us will want to remain in closer contact, and the technology in this field is constantly changing, which also has to be balanced against how many people are willing to use a particular platform and many other factors.

  • Looks like my first comment will be something not about Epicureanism. It will instead be something I actually have a decent amount of knowledge about -- cybersecurity!


    Briar is good but it is only available on Android, so iPhone users will miss out.


    Telegram is terrible for privacy and security and should be avoided. End-to-end encryption (E2EE) is only available on 1:1 chats, not group, and it uses its own encryption algorithm, which hasn't been tested as much as the Signal Protocol which WhatsApp, Facebook Messenger, Google's Messaging app and others use. Although its channel feature can be very useful, it's only really needed if you were to have thousands of people.


    I can't comment on Matrix as I've never used it. And the Online Safety Bill in the UK may jeopardise them if that is passed. Though I'm sure they wouldn't give in as some of their customers are EU governments and even the UK government.


    As you stated Cassius, Signal does currently require a phone number. However, they are adding the option to add a username to message people. You will still need to sign up with a phone number, but you will no longer need to give someone your phone number to contact them. When that feature will be released is unknown. I believe the latest information was this year but I guess we'll see. Would you be likely to create an Epicurean group on Signal whenever that feature is live?


    From my research, nothing comes close to Signal. Even Threema has a few problems. Alternatively, you do have Session which is a fork of Signal which also requires no Personally Identifiable Information (PII), but that is still fairly new and it doesn't have Perfect Forward Secrecy, which Threema also lacks (unless that's changed?). The main feature that makes Session unique is that it uses a Tor-like system where messages are sent to several relays before reaching their destination (similar to the Tor browser). Session is also based in Australia.


    Either way, Threema is mostly fine. Even the Swiss army use it. It's just that I like to keep my online accounts and apps on my phone to a bare minimum. Less is more.

    'Friendship dances around the world, bidding us all to awaken to the recognition of happiness.'

  • Thanks for your thoughts, Blank_emu!


    To some extent the issue is privacy, but maybe to an equal extent the issue is avoiding be "deplatformed" or having your existing message base deleted at the whim of someone or some entity that decides it doesn't like you.


    I don't see us as a target of that kind of problem anytime soon, but that doesn't mean that having things as best as possible under one's own control isn't desirable.


    This is definitely a changing field and it looks like you stay on top of it so please update as you think helpful.

  • This subject comes to mind again due to our recent outage on 8/17/23.


    The big issues in choosing an alternate communication platform is something that is actually used by a significant number of people. If people don't have the platform loaded on their telephone then they won't get notifications, and it will take much longer to notify people of outages and get back in communication if something significant takes down the forum for more than a few hours.


    I'd be happy to hear latest thoughts from anyone but especially from EricR , TauPhi, Cleveland Okie, and others who are into the FOSS options. I don't want to tie us to a major platform where we are subject to content-based censorship, even for backup communications. Right now that doesn't seem to be an issue at all, and hopefully it will never be, but let's plan for the future.


    Each of the options discussed in this subforum is probably viable and workable, but none stand out to me as the obvious choice. For purposes of backup communication and regrouping if the server suffers a catastrophic failure, it's more important to be easy to remember and easy to get to and easy to use than it is to be super-secret or encrypted. For those who know what it is I am tempted to set up an IRC channel as the easiest and most flexible, but there are many options, including some kind of public xmpp location, which is the protocol which our friend stpeter helped popularize.


    So it seems to me that the main criteria for a backup communication platform would include:


    1. Necessary: Free / Open Source
    2. Necessary: Easy to remember web address (we can set up a domain to point there too)
    3. Necessary: Quick and easy to sign up and use without using a dedicated app
    4. Necessary: Allows basic moderation (keeps a list of users and potentially allows them to save an email which could be used as an emergency contact).
    5. Necessary: Very simple and does not have a lot of complicated features (unlike Matrix)
    6. Necessary: Not a full forum or replacement for Epicureanfriends but just a place to hold a running exchange of users where info about outages etc can be posted.
    7. Necessary: Not video or audio - chat only (rules out zoom and jitsi etc)
    8. Necessary: Not a high profile service run by google or facebook or twitter or reasonably likely to be under the direct control of a state-sponsored security agency. Every service is subject to that problem, but some more than others, and the more features that a service offers while still being "free" the more it is likely that the security of communications and user data is compromised. Related to this would be - not a service aligned with an overt political or religious agenda (which would also make it more likely to be subject to attack or compromise).
    9. Desirable but not necessary: Some ability to provide phone notification to users of new messages. This is the main thing that apps like Telegram and Whatsapp offer, but the problems that come with this probably make it preferable to have an easy simple web domain that can be remembered so everyone knows "If Epicureanfriends is down all I do is go here _______"



    Another alternative is a simple "mailing list manager" where people can register their emergency contact email addresses, and then when we have a problem we can email that group. But if we go that route we would want some ability for members of the group to contact each other, in case is not just with the server being indisposed but with Cassius himself being indisposed!

  • I would guess that probably only a few frequent and/or core members would be interested in being notified whenever the forum is down with an alternative mode of communication. If something were to happen and the forum was down for 3 days, probably some of us would want to communicate. I could begin with compiling a list of active members and then next step would be to verify email addresses.