@nprofile1q... I mean for example the post I was originally replying to. Or your reply to my reply literally having "protocols" as the second word.

My post was about protocols, because it was a reply to one that was about protocols. When you noticed how the advertising based on protocols gets debunked, you quickly shift to something else.

I'm not saying DeltaChat is bad. Just get your marketing sorted and focus on UX rather than standards, protocols or encryption.

@nprofile1q... @nprofile1q... Yes DeltaChat is a messenger and XMPP is a protocol.

Why is the advertising towards DeltaChat so obsessed with protocols? Just say "DeltaChat is better than Conversations, because it provides a consistent UX across platforms including iOS." This would render your point much easier to understand for everyone and wouldn't require you to badmouth protocols you're relying on yourself.

@nprofile1q... It's easy to say that one doesn't need better protocols after those better protocols have become so ubiquitous that you don't even realize how you're using them yourself.

Apple APNS and Google FCM use #XMPP technology to deliver push messages instantly. All the other messengers listed (#Signal, #Element, #DeltaChat) thus use XMPP technology. Everyone uses XMPP, but when it is about marketing, suddenly XMPP is not necessary.

@nprofile1q... Die Frage ist was "taktische Gründe" sind. Du sagst, Die Linke sei für dich die richtige Partei, aber dabei spielen ja eine Menge Aspekte mit rein, nicht nur die Programmatik, sondern zum Beispiel auch Personen, finanzielle Mittel, die Größe, die Möglichkeiten, usw.

Wenn aber eine Partei unter anderem deshalb die richtige ist, weil sie etwas erreichen kann, dann macht es eventuell Sinn, eine andere Partei zu wählen, wenn das der Wunschpartei mehr hilft als sie selbst zu wählen.

@nprofile1q... Are you talking about https://uattest.net/? I had a glimpse at it, and they talk about multiple backends and federation of backends. As I understood it, everyone can create a backend and create tokens for devices/OS that they like, it's then subject for the app developers to accept those tokens, either directly or indirectly through federation. Which means it does allow for competitor OS to also be accepted for as long as the app developer or their selected backends support it.

@nprofile1q... @nprofile1q... Man kann mit der Girocard kontaktlos zahlen, unabhängig von VISA, MasterCard und PayPal.

Mit den Apps "Mobiles Bezahlen" der S-Payment für Sparkassen, "Pay - Die Bezahl-App" der Atruvia für Volksbanken und "Digitales Bezahlen" der Atruvia für Sparda, PSD und einige andere Banken ist das auch mit NFC-fähigen Android-Smartphone möglich, ohne das man Zahlungsdaten und Transaktionsgebühren an Google abdrücken muss.

Hauptsächlich wollen die Leute halt nicht.

@nprofile1q... @nprofile1q... I'm also genuinely surprised that people believe that ActivityPub, a protocol even named after its purpose, to publish activities, is a good protocol to pursue private instant messaging. The goals of those two couldn't be more detrimental.

I do see a purpose of being able to reuse your "ActivityPub identities", which actually are just WebFinger identities. Maybe someone should specify how to discover XMPP accounts via WebFinger and push that as a solution for AP messaging?

@nprofile1q... @nprofile1q... It's a single story from law enforcement that is then picked up by multiple media. This is literally how media publishing works. One press release leads to multiple newspapers writing about it. That doesn't make it a coordinated effort. Nobody is coordinating anything, law enforcement shares information and news outlets report what they claim. No news outlet claimed that this is their own research, analysis or anything like that.

@nprofile1q... @nprofile1q... what does "being threatened" mean? They sent an email and asked friendly? Coordinated media attacks also sounds weird for a single story (that as usual appears in various outlets). Almost as if the GrapheneOS marketing person (as usual) puts things out of proportion for publicity...

@nprofile1q... I'm now wondering if we can make use of this to run microG...

EDIT: No, not really. The signature spoofing will only happen if no com.google.android.gms is installed. This introduces a race condition (requiring microG to be installed between signature check and an app's usage of it). So we have the same security impact of microG compatible signature spoofing without the benefit of being able to use microG in practice.

@nprofile1q... Isn't this essentially adding some sort of signature spoofing, a feature GrapheneOS was always very much opposed to adding? What's the rationale to now consider it acceptable to fake to third-party apps that a package com.google.android.gms signed by Google is installed on the system when it actually isn't?

Reference: https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/blob/219b4c2895d30ebb4d0cdea2a57f25d0df269362/lib/src/app/grapheneos/gmscompat/lib/sysservice/client/GclPackageManager.java#L37-L43

@nprofile1q... @nprofile1q... @nprofile1q... Here's an excerpt from Facebook's DMA documentation about their *current* protocol. Sure, they stopped using XML, but that's only an encoding/compression thing. If you've ever seen an XMPP message, it's impossible to not see how it is based on XMPP.