Briar - secure p2p group communications (briarproject.org)
from possiblylinux127@lemmy.zip to selfhosted@lemmy.world on 04 Oct 04:08
https://lemmy.zip/post/50216260

Briar is a messaging app designed to be used by groups of people to allow for secure and censorship resistant communications.

This technically isn’t self hosted in the strictest sense but I think it is still relevant.

#selfhosted

threaded - newest

LodeMike@lemmy.today on 04 Oct 05:01 next collapse

This project runs on Tor. You are effectively hosting a Tor site.

sexy_peach@feddit.org on 04 Oct 05:04 next collapse

Not at all. You’re effectively using a messenger that can only receive messages when your phone has an internet connection because briar doesn’t have servers. Also the connections are made through the Tor network, which hides metadata

victorz@lemmy.world on 04 Oct 05:58 next collapse

a messenger that can only receive messages when your phone has an internet connection

To be fair, that’s true for most messengers, even ones that do have servers.

IanTwenty@lemmy.world on 04 Oct 07:35 collapse

Messages are only sent when both online though, thet’s the bigger difference (unless using Briar Mailbox). Also it can send over wifi and bluetooth without internet connection i.e. no other devices involved.

victorz@lemmy.world on 04 Oct 08:54 collapse

Messages are only sent when both online though

That’s an entirely different thing, yes. 😄

I’ve always wondered what the utility is in sending messages over Bluetooth. Exchanging data secretly and securely in person, I guess?

FrostyPolicy@suppo.fi on 04 Oct 10:21 next collapse

No one else then the parties messaging can see that the communication even occurs.

victorz@lemmy.world on 04 Oct 13:45 collapse

Right, but you have to be so close to each other for Bluetooth to work.

TheButtonJustSpins@infosec.pub on 04 Oct 16:00 collapse

It transfers across other peers; you don’t have to have a direct connection to the recipient, just an eventual connection to them.

victorz@lemmy.world on 05 Oct 06:19 collapse

But you have to directly connect to other people’s devices via Bluetooth along the way, right? Like a relay race of handing over the message until you either reach a network, or the recipient?

TheButtonJustSpins@infosec.pub on 05 Oct 15:23 collapse

I… don’t actually know. I wouldn’t think that would be necessary (at least manually).

victorz@lemmy.world on 05 Oct 17:09 collapse

If not, it goes against everything I thought I understood about Bluetooth 😆 Curious to know how it actually would work.

artyom@piefed.social on 04 Oct 11:36 next collapse

Anytime you have bad/no cellular reception. Think being at a large event where the cell network is saturated, or in a rural area with no cell service.

victorz@lemmy.world on 04 Oct 13:45 collapse

Right, but you have to be so close to each other for Bluetooth to work, so it seems very limited in utility. But of course, data exchange in person would be one thing.

artyom@piefed.social on 04 Oct 14:19 collapse

Bluetooth has a pretty significant range, especially outdoors. So you might be watching something on the stage while a friend or family member is 300 feet away at a concession stand.

victorz@lemmy.world on 05 Oct 06:21 collapse

That’s pretty far, that makes it better I guess. Like you could send messages across buildings if you have line of sight e.g. That’s neat.

bandwidthcrisis@lemmy.world on 04 Oct 13:53 collapse

I’ve used it to message someone while on a flight.

victorz@lemmy.world on 05 Oct 06:27 collapse

That’s brilliant use, I like it.

So how does it work? Do you just need to “have Bluetooth turned on” and it reaches the recipient, or do you need to connect to each other somehow? Can this work for a group chat with a family, or colleagues on a conference trip perhaps?

bandwidthcrisis@lemmy.world on 05 Oct 15:45 collapse

You need to enable Bluetooth as a method of connection in the app settings (and can turn off wifi and data there).

The phones can be in airplane mode but with Bluetooth turned back on (as you would to use earbuds).

I don’t recall pairing the phones, but there is a “connect via Bluetooth” option on each chat that might be doing that automatically.

You link accounts to each other by scanning qr codes.

It does have a group chat but I haven’t used it, so I don’t know if that works with Bluetooth alone.

I just tried testing this with an old phone of mine, but can’t get it to work right now (maybe because it has Graphene os?), but I have actually used it on flights in the past.

bandwidthcrisis@lemmy.world on 05 Oct 19:29 collapse

I tested some more and can’t get it to work any more. I found a post saying it worked in 1.5.2 so maybe something broke in newer versions.

artyom@piefed.social on 04 Oct 11:35 collapse

Briar does not require an internet connection. It can send messages over Bluetooth and WiFi.

possiblylinux127@lemmy.zip on 04 Oct 13:58 collapse

Sort of I guess

Why does it matter?

leraje@piefed.blahaj.zone on 04 Oct 10:35 next collapse

Seems pretty similar to Jami except that it lacks the iOS and desktop clients that Jami already has.

possiblylinux127@lemmy.zip on 04 Oct 13:56 collapse

Don’t use Jami. It is a security nightmare and unreliable.

leraje@piefed.blahaj.zone on 04 Oct 14:54 collapse

Could you link me some resources for that? I may need something to demonstrate that to others.

possiblylinux127@lemmy.zip on 04 Oct 15:27 collapse

My personal experience

Also they haven’t had a security audit

leraje@piefed.blahaj.zone on 04 Oct 15:49 collapse

Lack of audit is not great I agree. I can see from a basic web search that security is an issue but I’m not sure ’nightmare’ is warranted. The lack of audit seems to be main focus of concern and I’d say thats a judgement call for each person depending on threat model. I was hoping for something more conclusive than that. Its certainly adequate for a more privacy-centric way of communicating than an app that doesn’t cater for Apple users at all.

possiblylinux127@lemmy.zip on 05 Oct 05:15 collapse

I’m never going to recommend something that I can’t get to work reliability. Also the lack of a security audit is a major deal breaker.

Communications is one of those things that needs to be absolutely solid.

tuxec@infosec.pub on 05 Oct 11:05 collapse

After a loot of research and testing different tools (Briar, Jami, Simplex, Session), I ended up using XMPP (Snikket). The call quality is good, has E2EE, Self-hosteable

Edit: fixed a typo

lemonuri@infosec.pub on 05 Oct 20:51 next collapse

I don’t know why this gets downvoted. Xmpp is my solution as well. Lightweight, selfhostable and federated, it’s just a great solution. Briar is good as well and probably one of the best solutions if your are an activist/journalist. But it will eat your battery as all p2p solutions will. Is you host your own xmpp server at home, that’s really as secure as it will get imho.

tuxec@infosec.pub on 05 Oct 22:39 collapse

Yeah… I’m a bit surprised by the downvotes also. I just shared my experience without saying anything bad about any apps. Anybody is free try any tool they want until they find the one that fits their need. Thanks for the support 🤝

Lemminary@lemmy.world on 05 Oct 23:29 collapse

I will never not grin slightly at the name XMPP.