I was one of their strongest advocates, but their progress is unbearably slow. SimpleX for example has advanced a lot more in the same timeframe.
To me it seems like at the current pace they will need another two to three years to solve their problems.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
I really like the idea of creating a decentralized network that has a fair monetization model built right in, instead of relying on donations like the Fediverse. Crypto got a very bad rep, but this kind of stuff is exactly what it's good for imo.
It also has some core features that are missing from other similar messengers, like multi-device sync. And lastly, the devs seem pretty capable and open as well. They are very transparent with their work and seem to have the right ideas about where things should go and which trade-offs to make. E.g. their reasoning for not using the Signal protocol seems solid to me.
So I'm hopeful, but time will tell if it all works out.
When I last looked it over (maybe a year or so ago) these problems stood out:
- Immature code base.
- Custom onion network that seemed unlikely ever to have enough users to be very effective against attacks.
- Small limit on chat group size. (I think they have raised it from 10 to 100 more recently.)
- Small limit on media attachment size.
- Desktop support appeared to be an Electron app. (I avoid those because they're incredibly wasteful of resources, and often suffer from Electron's many bugs.)
Its design showed some neat ideas, but it was not practical for my needs.
Also, I have read more recently that Session removed forward secrecy, which rather undermines its value proposition.
The session developers are interesting. But I don't recommend anybody use session.
They took the signal protocol, and removed perfect forward secrecy because they found it hard to implement.
That's crazy.
Also all of the file transfers on session go through servers in Canada. Centralized.
I give them kudos for trying to make the network self-sustainable through their crypto thing, but they never found a way to actually monetize it, there's no paper use, it feels like the idea is kind of dead in the water at this point. I would not recommend session for any serious non-experimental usage
I wouldn't see a reason to use Session over SimpleX
My use of session is limited to my kids, wife and a couple of friends. I had high hopes for it when I started using it, but its devs have fallen incredibly short. I have also tried SimpleX on and off, but for some reason, it drinks battery like there's no tomorrow, so I'm off of it for now.
Hello! In the latest v5.8 of SimpleX there are various improvements that might be of interest, including for battery consumption.
Yup. Just tried it again with a few paranoid friends like me, and the battery drain is now gone. Just moved the FAM over too 🤣🤣
The concept behind Session is nice, but the implementation is poor. im gonna give a full review here for future generations and their posterity and all that, since I have a lot of experience with it.
First if all, their org is based in Australia, one of the worst countries on earth for privacy. They have openly admitted that the government there can secretly force them to ship backdoored binaries and packages. Huge red flag.
Session runs on the oxen network, an onion relay that runs on crypto stakes instead of straight up volunteering. however, a node requires 15000 OXEN tokens to run, which currently is about 2500USD. in the past it was much more expensive. so the barrier of entry is high. you can say that it makes it more secure or less sure. i think they should lower it now that sybil attacks are much less likely, with most of the tokens locked up in nodes.
The oxen network is SLOW. I mean really slow. For conparison, try running both SimpleX over TOR, and Session, side by side, for a few days, you will notice a huge difference. Trying to message someone in Session is a crapshoot. you will either wait 1 second or 10 seconds for message delivery, sometimes more. I've experienced message delivery times of up to two minutes. Face paced messaging is not a thing.
the oxen network can stored messages for up to two weeks, and this is nice for that centralized app experience while being a decentralized app, when the sync works correctly. but also it may be uncomfortable for some people to keep them stored on-chain.
User experience is ABYSMAL in the long term. Device sync, message deletion, file transfer, just to name a few things that are buggy as hell, confusing, or plain dont work half the time. im not gonna go into it, let's just say that it can get sucky in the long term, weird stuff happens. messages may not be truly deleted either. And of course, we have the slow message delivery, among other little stupid bugs. it's definitely not a "just werks" app.
The UX is made worse by the fact that their apps are just poorly maintained forks of Signal. the phone app is okay I guess. the desktop app is worse. The desktop signal app was already not that great, just thrown-together Electron garbage. but Session didnt even bother to make their own electron app. And electron is extremely insecure by the way. and slow. not what you want for secure messaging. also the electron version hasnt been updated in a while, so there are many zero days in both signal and session apps. signal and session both screwed up on this whole thing.
Also somehow even though Signal accomplished it themselves, Session couldn't seem to accomplish Perfect Forward Secrecy while also keeping multi-device sync. Generally everything about the Session team screams "we aren't that smart"
Session has two notification settings, one is for google cloud messaging which does work with MicroG too, the other spins the app up once in a while and checks for messages. both of these have been unreliable for me in different instances though, especially in work profiles. but in main profile with microG it's actually 90%+ reliable to be honest.
Session has some good points. There are no signups obviously. The Session ID / User Id model is easy for newbies to understand. easier to share than a long af SimpleX link. even if buggy sometimes, you can easily link your ID with other devices and message from them, which is something that is not easy with SimpleX currently. it also provides you onion routing out of the box without having to run Orbot in the background which takes up a decent amount of battery power.
Recently-ish, Session/Oxen team announced that they are going to make a network overhaul at some point. Yet despite having built nothing at all yet, they have already minted an erc20 token and begun presales and all the usual crypto token bullcrap that comes with the standard scammy overtones of a lot of crypto projects and random eth tokens. It's pretty sad.
Overall, session is decent out of the box for a quick need but not for long term stable UX.
I use it, it works pretty good tbh.
My opinion: it's good. I would use it on a daily basis if someone would ask me to text on it with her. But I'd never ask someone else to use it because there are, in my opinion, better options like matrix and signal which I mandate people to use.
I use it for our family chat. It's okay. The biggest issue is sometimes messages are delayed (up to half-an-hour at times). Other than that, it's fine. It meets our needs.