Discussion
Loading...

Post

Log in
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Taggart
Taggart
@mttaggart@infosec.exchange  ·  activity timestamp 19 hours ago

Since I wrote this, many have introduced me to movim, and it's pretty slick! I'm still experimenting, but I like a lot of what I see. Still missing moderation tools for groups, though.

https://movim.eu

  • Copy link
  • Flag this post
  • Block
Jim Rea
Jim Rea
@provuejim@techhub.social replied  ·  activity timestamp 3 hours ago

@mttaggart 💯agree with your assessment of Discourse. Setting up a Discourse forum for my small software business is possibly the smartest decision I’ve made in my career - it’s been going strong for a decade now. We’ve had various flavors of user forums going back to modem based BBS software in the early 90s, but Discourse runs circles around all of them.

  • Copy link
  • Flag this comment
  • Block
Graham Perrin
Graham Perrin
@grahamperrin@mastodon.bsd.cafe replied  ·  activity timestamp 4 hours ago

A few design decisions for a new chat platform - the sporks space

<https://sporks.space/2026/02/10/a-few-design-decisions-for-a-new-chat-platform/>

– via <https://lobste.rs/s/ovmayf/few_design_decisions_for_new_chat>.

For the record:

― I'm neither seeking, nor promoting, yet another new chat platform

― I stopped using Discord around a year ago

― I use Matrix.

@mttaggart

the sporks space

A few design decisions for a new chat platform - the sporks space

Discord has recently made a controversial decision that could be the start of long-term decline. The situation has people looking at alternatives. However, a lot of the alternatives I feel bark up the wrong tree, or are good for certain… Continue reading →
  • Copy link
  • Flag this comment
  • Block
Graham Perrin
Graham Perrin
@grahamperrin@mastodon.bsd.cafe replied  ·  activity timestamp 4 hours ago

Hacker News discussion of Michael's post:

<https://news.ycombinator.com/item?id=46949564>

@mttaggart

Discord Alternatives, Ranked | Hacker News

  • Copy link
  • Flag this comment
  • Block
Francesco P Lovergine :debian:
Francesco P Lovergine :debian:
@gisgeek@floss.social replied  ·  activity timestamp 5 hours ago

@mttaggart Missing https://delta.chat

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 5 hours ago

@gisgeek As Delta Chat has no group moderation capabilities—or even separate roles in groups—I did not include it as a viable alternative to Discord. Even Signal has group admins. It's a chat app, but that's not what I was writing about.

  • Copy link
  • Flag this comment
  • Block
Francesco P Lovergine :debian:
Francesco P Lovergine :debian:
@gisgeek@floss.social replied  ·  activity timestamp 2 hours ago

@mttaggart
Did you check this one too?

https://simplex.chat/

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 2 hours ago

@gisgeek I certainly did. Not only is the founder kinda fashy, but the only way to use the desktop app is by binding a mobile device while using it. Tested and dismissed.

  • Copy link
  • Flag this comment
  • Block
airakose
airakose
@airakose@mastodon.gamedev.place replied  ·  activity timestamp 7 hours ago

@mttaggart one major concern I have with Discourse is how loudly pro-AI they are. Billing OpenAI as a major customer, pushing for "AI leaders", and their AI bot integration

That's probably worth reevaluating their security over

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 7 hours ago

@airakose My instance has no AI to speak of. I don't really see how one implies the other.

  • Copy link
  • Flag this comment
  • Block
Jeff Atwood
Jeff Atwood
@codinghorror@infosec.exchange replied  ·  activity timestamp 9 hours ago

@mttaggart I am in this picture AND I LIKE IT 😘💛 p.s. https://blog.codinghorror.com/launching-the-rural-guaranteed-minimum-income-initiative/

Coding Horror

Launching The Rural Guaranteed Minimum Income Initiative

It's been a year since I invited Americans to join us in a pledge to Share the American Dream: 1. Support organizations you feel are effectively helping those most in need across America right now. 2. Within the next five years, also contribute public dedications of time or funds towards
  • Copy link
  • Flag this comment
  • Block
Resuna
Resuna
@resuna@ohai.social replied  ·  activity timestamp 12 hours ago

@mttaggart

If Discord gets a 4/5 for functionality then something is fucked up, it's an appallingly bad piece of software that gets in the way more than anything else. It's a disaster.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 11 hours ago

@resuna Okay, bye!

  • Copy link
  • Flag this comment
  • Block
slash
slash
@agreeable_landfall@mastodon.social replied  ·  activity timestamp 12 hours ago

@mttaggart @janeishly I've never understood why people like Discord. I've always just used Jitsi. Simple, and FOSS licensed, so I can run it on my own server. You need to be careful with security, but I usually just start it up and shut it down as needed.

  • Copy link
  • Flag this comment
  • Block
Pavel A. Samsonov
Pavel A. Samsonov
@PavelASamsonov@mastodon.social replied  ·  activity timestamp 12 hours ago

@mttaggart Huh, Stoat is that bad? It's the one I'm seeing people recommend.

  • Copy link
  • Flag this comment
  • Block
Alan Levine
Alan Levine
@cogdog@cosocial.ca replied  ·  activity timestamp 13 hours ago

@mttaggart You had me (discourse mangler/wrangler) at the opening meme.

Be more distracted.

  • Copy link
  • Flag this comment
  • Block
maswan
maswan
@maswan@mastodon.acc.sunet.se replied  ·  activity timestamp 13 hours ago

@mttaggart FWIW, we've been using rocketchat for years at work with about 100 users and we haven't missed any of the paid features yet. The biggest downside is how hard they push you towards their "plans".

  • Copy link
  • Flag this comment
  • Block
hackillu
hackillu
@hackillu@mas.to replied  ·  activity timestamp 13 hours ago

@mttaggart Nice! I thought about discord alternatives too!

  • Copy link
  • Flag this comment
  • Block
SarahV
SarahV
@admin@mastodon.futurelab.social replied  ·  activity timestamp 15 hours ago

@mttaggart what about the ones that don't have AI shoved down users' throats?

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 15 hours ago

@admin I think you'll find the list refreshingly AI-free. While Discourse has plugins, they are optional and not default.

  • Copy link
  • Flag this comment
  • Block
SarahV
SarahV
@admin@mastodon.futurelab.social replied  ·  activity timestamp 15 hours ago

@mttaggart from rocket.chat's front page:

"AI-powered conversations

Automate the busywork, surface the right insights instantly, and keep your teams to drive
operational success."

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 14 hours ago

@admin I would separate marketing hype from product reality. Again, optional modules and nothing doing in self-hosted.

  • Copy link
  • Flag this comment
  • Block
Bryan Redeagle :bc:
Bryan Redeagle :bc:
@bryanredeagle@beige.party replied  ·  activity timestamp 15 hours ago

@mttaggart A another knock against Matrix is the ordering of messages. I've been using it more recently, and I struggle to piece together a conversation because the messages are in the wrong order.

  • Copy link
  • Flag this comment
  • Block
Ville 'cos' R
Ville 'cos' R
@cos@sauna.social replied  ·  activity timestamp 15 hours ago

@mttaggart good list, but I don't think it's fair to Matrix today.

The CSAM attacks happened, but moderation tools have taken a big leap since. You can quite easily use a moderation bot that subscribes to public ban lists. This almost fully ends any generic spam.

Also you talk about matrix.org as "flagship server". Friends don't let friends use matrix.org. Use small/medium sized servers instead and you get better performance. Same applies to Mastodon - don't use mastodon.social, decentralize!

My main criticism would be the buggy mobile clients, and super slow migration from Element Classic to Element X. Element web/desktop are decent quality, but far from polished.

Oh and you don't even mention bridges. Other alternatives don't even try to support them. Bridges are a key feature.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 15 hours ago

@cos

The CSAM attacks happened, but moderation tools have taken a big leap since.

I would appreciate links to these new resources. Last I saw, Draupnir was still very much inadequate.

As for server choice, I think Mastodon itself is evidence of what a fussy server selection process can do to adoption.

This reply is written from the perspective of a computer enthusiast. Probably a volunteer sysadmin/self hoster—like me. We cannot be the target for a general alternative.

  • Copy link
  • Flag this comment
  • Block
Ville 'cos' R
Ville 'cos' R
@cos@sauna.social replied  ·  activity timestamp 14 hours ago

@mttaggart for example etke.cc offers a public draupnir instance: https://etke.cc/help/bots/draupnir/
That combined with good policy lists should be quite good against spam. Of course targeted attacks are harder to block.

Also I think I heard that in FOSDEM Element said that there will be some kind of server chooser at last.. IMO using matrix.org as default has been a bad choice. Of course a curated list of servers makes a handful of new problems.

Currently a list of open servers can be found at https://servers.joinmatrix.org/

etke.cc

etke.cc | Draupnir

A highly capable Matrix moderation bot and protection platform, trusted by room moderators and homeserver admins alike.
  • Copy link
  • Flag this comment
  • Block
william.maggos
william.maggos
@wjmaggos@liberal.city replied  ·  activity timestamp 16 hours ago

@mttaggart

you seem to be very knowledgeable and fair about all these, but I so want the answer to be #matrix cause it could also theoretically do all our messaging and video chat and even POTS eventually. I feel like if we want the less techy to embrace our world, it can't be just about switching apps yet again, but also must at least offer the possibility of eliminating the need for other apps. IDK.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 16 hours ago

@wjmaggos Matrix can be the answer! I was very optimistic, and I still think there's a lot to like. For private communities, I think it's wonderful. The problem arises in large public communities because of the lack of moderation tooling. Without that aspect of the platform, it's simply too dangerous to open the doors to the general internet.

  • Copy link
  • Flag this comment
  • Block
shom ✊🏽🐧📷🤿🏔️🪚
shom ✊🏽🐧📷🤿🏔️🪚
@shom@gts.shom.dev replied  ·  activity timestamp 17 hours ago

@mttaggart this is fantastic!
I've had excellent experience with Discourse but haven't been part of one that has enabled chat. Have you had a chance to try it?

Discourse - Civilized Discussion

Discourse Chat Features

Our chat solution developed for communities
  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 17 hours ago

@shom I have. It's functional, but I wouldn't call it a first-class citizen yet. And as noted elsewhere E2EE is not a feature, so be aware of that.

  • Copy link
  • Flag this comment
  • Block
Brett Haines
Brett Haines
@bretthaines@infosec.exchange replied  ·  activity timestamp 17 hours ago

@mttaggart the first company I worked for used Rocket.Chat for their IMs and it worked better than MS Teams or Google Chat, both of which I've used at later employers. Didn't look as flashy but it was far more stable. I really hope they stick with it for my old coworkers' sake.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 17 hours ago

@bretthaines It's very good! And their native federation protocol has entered general availability.

  • Copy link
  • Flag this comment
  • Block
Murdoc
Murdoc
@murdoccc@infosec.exchange replied  ·  activity timestamp 18 hours ago

@32x33 I miss the CrankySec community, but I really don't miss Discord.

  • Copy link
  • Flag this comment
  • Block
George Ellenburg (he/him/his)
George Ellenburg (he/him/his)
@gme@bofh.social replied  ·  activity timestamp 18 hours ago

@mttaggart@infosec.exchange
Technically though Matrix is a more functional equivalent than Discourse.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 18 hours ago

@gme I'm not sure what criteria you're using, but for public communities it absolutely is not. The utter lack of moderation capability makes it unsafe for that use case. Private comms? Fine. But that's not really Discord's primary purpose.

  • Copy link
  • Flag this comment
  • Block
George Ellenburg (he/him/his)
George Ellenburg (he/him/his)
@gme@bofh.social replied  ·  activity timestamp 17 hours ago

@mttaggart@infosec.exchange When's the last time you used Matrix or Element? Because I'm staring at a user in one of my rooms and these look like moderation controls to me (as the room's owner/ creator):

Sorry, no caption provided by author
Sorry, no caption provided by author
Sorry, no caption provided by author
  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 17 hours ago

@gme That is not what I'm talking about. When you run a community, moderation is per room, which doesn't scale in the least. The automation via bots like Draupnir is rudimentary at best, and incredibly hamfisted (especially for E2EE). Yes, I can take action on individual users. I cannot prevent attacks usefully at scale. And setting all of the additional tooling up for what does exist is the kind of sysadmin nightmare that Discord successfully abstracted away.

Meanwhile, Discourse has these tools out of the box. They serve different purposes, but I contend that for community building, one is far superior.

  • Copy link
  • Flag this comment
  • Block
George Ellenburg (he/him/his)
George Ellenburg (he/him/his)
@gme@bofh.social replied  ·  activity timestamp 17 hours ago

@mttaggart@infosec.exchange
> Meanwhile, Discourse has these tools out of the box. They serve different purposes, but I contend that for community building, one is far superior.

Couldn't agree with you more. I love Discourse (self-hosting) but the reality is for 99.9999% of Discord (not Discourse) users, Matrix is an open, private, and secure alternative.

To be fair, Discourse doesn't have E2EE either.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 17 hours ago

@gme Ah, but what has a community profited to gain E2EE, only to lose trust and safety? As always, "it depends," but IME a public Matrix server is just courting disaster.

  • Copy link
  • Flag this comment
  • Block
Mike Siegel
Mike Siegel
@mikesiegel@infosec.exchange replied  ·  activity timestamp 18 hours ago

@mttaggart I'll just go back to IRC. Wait I never left...

  • Copy link
  • Flag this comment
  • Block
RootWyrm 🇺🇦:progress:
RootWyrm 🇺🇦:progress:
@rootwyrm@weird.autos replied  ·  activity timestamp 19 hours ago

@mttaggart Stoat has actually moved SHOCKINGLY quickly and I would say it is easily 85%+ parity for the majority of users at this point. The biggest sticking point would probably be servers with >100 custom emojis or highly dependent on bots (which are relatively easy to port.)

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 19 hours ago

@rootwyrm Last I checked the moderation tools were still nowhere near adequate, and that is a dealbreaker for me.

  • Copy link
  • Flag this comment
  • Block
leberschnitzel
leberschnitzel
@leberschnitzel@existiert.ch replied  ·  activity timestamp 18 hours ago

@mttaggart ah yeah if you manage big communities that might be a problem. For my 25 friends it doesn't really matter.
I tried it when it was still revolt and really liked it, but never actually made the move

@rootwyrm

  • Copy link
  • Flag this comment
  • Block
RootWyrm 🇺🇦:progress:
RootWyrm 🇺🇦:progress:
@rootwyrm@weird.autos replied  ·  activity timestamp 19 hours ago

@mttaggart most of Discord's power user moderation tools are reliant on third-party bots or demonstrably ineffective. Baseline moderation tools are at this point, 1:1 or better. Channel visibility can be set per-role, you can include a reason along with a ban. The UI could use some polish, but it's there.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 19 hours ago

@rootwyrm

most of Discord's power user moderation tools are reliant on third-party bots or demonstrably ineffective.

As an admin of a 3000+ user server, I strongly disagree. AutoMod is a lifesaver and I can't imagine running a public space without something equivalent.

  • Copy link
  • Flag this comment
  • Block
RootWyrm 🇺🇦:progress:
RootWyrm 🇺🇦:progress:
@rootwyrm@weird.autos replied  ·  activity timestamp 19 hours ago

@mttaggart I also admin on rather large servers. If Discord makes one more claim their 'automod' actually stops the hacked account spamming, I will stab that employee in the face.
It absolutely does not. Literally 99% of the 'moderation' I do, is cleaning up after spammers posting obvious phishing links in every single channel that their 'suspected spam' block continuously lets through.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 19 hours ago

@rootwyrm That's true, but the ability to create useful blocklists of terms limits the attacks to one per technique. The lists I have block the vast majority of attempts. If Stoat has that capacity, great.

  • Copy link
  • Flag this comment
  • Block
Joe Nash
Joe Nash
@joenash@hachyderm.io replied  ·  activity timestamp 19 hours ago

@mttaggart uh oh what did they do now

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 19 hours ago

@joenash Paternalism as a service: https://discord.com/press-releases/discord-launches-teen-by-default-settings-globally

Discord Launches Teen-by-Default Settings Globally

Discord is announcing enhanced teen safety features rolling out globally that reinforce its long-standing commitment to creating a safer and more inclusive experience for users over the age of 13.
  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 19 hours ago

Since I wrote this, many have introduced me to movim, and it's pretty slick! I'm still experimenting, but I like a lot of what I see. Still missing moderation tools for groups, though.

https://movim.eu

  • Copy link
  • Flag this comment
  • Block
Movim
Movim
@movim@piaille.fr replied  ·  activity timestamp 1 hour ago

@mttaggart 🫶

  • Copy link
  • Flag this comment
  • Block
Tim Makarios
Tim Makarios
@TMakarios@theres.life replied  ·  activity timestamp 11 hours ago

@mttaggart
Other (interoperable!) XMPP clients, such as Cheogram, allow for moderation of individual messages in groups, though the disappeared messages may not disappear from all clients that have already received them.

#XMPP #Cheogram

  • Copy link
  • Flag this comment
  • Block
leberschnitzel
leberschnitzel
@leberschnitzel@existiert.ch replied  ·  activity timestamp 13 hours ago

@mttaggart that actually looks like one of the best options you posted so far, have to look into that one!

  • Copy link
  • Flag this comment
  • Block
tehfishman
tehfishman
@tehfishman@ioc.exchange replied  ·  activity timestamp 17 hours ago

@mttaggart Have you tried the streaming functionality? I have a small Discord community that uses the streaming features pretty often, and it'll be a hard to convince people to ditch Discord if streaming isn't very good.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 17 hours ago

@tehfishman I haven't, but I'm keen to.

  • Copy link
  • Flag this comment
  • Block
Taggart
Taggart
@mttaggart@infosec.exchange replied  ·  activity timestamp 19 hours ago

Let me add that I am keenly aware of the cryptographic issues you are about to bring up about any of these options. I read and deeply respect the work of @soatok and others, and understand the concerns around OMEMO for XMPP, Matrix, etc.

Security is a balance between risk and value. I cannot decide for you what the right balance is, but I know from hard-won experience that building a community is about more than "perfect" security.

  • Copy link
  • Flag this comment
  • Block

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.2-alpha.7 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct