this post was submitted on 26 Aug 2023
392 points (100.0% liked)

Technology

37603 readers
526 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

While Jitsi is open-source, most people use the platform they provide, meet.jit.si, for immediate conference calls. They have now introduced a "Know Your Customer" policy and require at least one of the attendees to log in with a Facebook, Github (Microsoft), or Google account.

One option to avoid this is to self-host, but then you'll be identifiable via your domain and have to maintain a server.

As a true alternative to Jitsi, there's jami.net. It is a decentralized conference app, free open-source, and account creation is optional. It's available for all major platforms (Mac, Windows, Linux, iOS, Android), including on F-Droid.

top 50 comments
sorted by: hot top controversial new old
[–] Cube6392@beehaw.org 97 points 1 year ago (4 children)

Those are all SaaS providers with meeting software available. If someone was using Jitsi, it was specifically to not use a login with any of those providers. They're actively deciding not to continue operation with this. Its like when OnlyFans declares they wouldn't allow adult content going forward

[–] adamnejm@programming.dev 17 points 1 year ago (2 children)

Its like when OnlyFans declares they wouldn't allow adult content

So... Tumblr?

[–] ram@lemmy.ca 23 points 1 year ago (1 children)
[–] snooggums@kbin.social 15 points 1 year ago

I laughed pretty hard at OnlyFans trying to remove the only thing that I was aware they hosted.

[–] Cube6392@beehaw.org 12 points 1 year ago

Yeah but at least Tumblr had a majority of non porn content. Jitsi is almost entirely privacy wonks, and only fans is almost entirely porn

[–] bedrooms@kbin.social 10 points 1 year ago

I imagine that, at least, the videos wouldn't go through those SAAS providers, and that's relatively a plus still.

[–] gelberhut@lemdro.id 4 points 1 year ago (2 children)

Never used Jitsi. Above you indirectly say that from the functional point of view Jitsi is noticeably worse than meeting solutions of MS/Google/FB. Is this really so?

[–] Cube6392@beehaw.org 6 points 1 year ago (3 children)

I don't know how I indirectly said that. I certainly didn't mean to. Its less well known, perfectly fine, and it's killer feature for a long time has been being decoupled from privacy disrespecting big tech companies

load more comments (3 replies)
[–] anlumo@feddit.de 4 points 1 year ago

My experience has been that Jitsi is much better when the connection is bad. However, its default setting is that video is cropped to be square, which is very bad. I don’t even think that the user can change that.

[–] masterspace@lemmy.ca 4 points 1 year ago

Those are all SaaS providers with meeting software available.

With paid for commercial meeting software available.

If someone was using Jitsi, it was specifically to not use a login with any of those providers.

Or because they didn't want to pay ongoing SAAS fees.

They're actively deciding not to continue operation with this. Its like when OnlyFans declares they wouldn't allow adult content going forward

It's literally nothing like that since Onlyfans is not an open source project that lets you host your own instance and run it however you like.

If you want anonymity run it yourself. If you want to use their servers it's reasonable that they expect to know a modicum about how to verify you are who you say you are. There is literally no other way to prevent abuse other than identity verification of bad actors.

[–] ubergeek77@lemmy.ubergeek77.chat 67 points 1 year ago (5 children)

Why is everyone up in arms about this? The abuse of their free service was rampant. This isn't a core project change, this is just a measure to keep a version of the project up for free without completely taking it down. They don't even have a way to monetize this. An alternative was to simply shut it down and only allow you to self host it.

I self host my Jitsi instance, but as a privacy nut, I don't see a problem with this. Absolute privacy cannot always coexist with free anonymous services. Don't blame Jitsi, blame the people who ruined it for everyone else.

load more comments (5 replies)
[–] gonzoknowsdotcom1@monero.town 65 points 1 year ago

This is its downfall

[–] Kajika@lemmy.ml 45 points 1 year ago (2 children)

Earlier this year we saw an increase in the number of reports we received about some people using our service in ways that we cannot tolerate. To be more clear, this was not about some people merely saying things that others disliked.

Cannot be less clear.

Anyway I don't understand why you'd need an account. I've always created rooms and share the link to people to invite. You can setup a password if you want privacy. Any reason to login?

[–] cerevant@lemm.ee 45 points 1 year ago (1 children)

They are probably talking about using it to share CSAM or other illegal content. They need one person to login to be not anonymous so they can give it to the authorities if necessary.

[–] Smoke@beehaw.org 5 points 1 year ago (2 children)

But why a Google/FB/MS account? Why isn't an email account from an established provider enough, why centralise to three megacorps?

[–] cerevant@lemm.ee 5 points 1 year ago (1 children)

Because these three provide federated login most email providers do not.

[–] Smoke@beehaw.org 3 points 1 year ago (1 children)

I didn't think I'd unironically hear "This is an advantage because now one company controls all your logins" as a reply to privacy concerns.

[–] cerevant@lemm.ee 3 points 1 year ago

I didn’t say that. Security and privacy are nearly opposites. This is a security decision.

[–] Shadow@lemmy.ca 3 points 1 year ago (1 children)

There's plenty of disposable email services out there.

load more comments (1 replies)
load more comments (1 replies)
[–] bmaxv@noc.social 40 points 1 year ago (1 children)

@esaru

"One option to avoid this is to self-host, but then you’ll be identifiable via your domain and have to maintain a server."

Makes it a non issue.

It's free as in freedom not as in free beer and that's that.

Jitsi doesn't have to offer free service and they particularly don't have to provide anonymity.

The same is true for the fediverse, since the admins have info that could help identify users. That has it's uses too.

[–] esaru@beehaw.org 11 points 1 year ago* (last edited 1 year ago) (2 children)

Jitsi remains free. As you can see, this isn't about money but rather about privacy, which has diminished compared to before.

The issue with centralized systems becomes more apparent: the provders are held accountable for their users' actions.

[–] PeterBronez@hachyderm.io 9 points 1 year ago

@esaru @bmaxv @technology concur that this reduces privacy for users of Jitsi’s hosted service. It also has some concrete benefits for Jitsi - they get to outsource account validation and security. Perhaps they were struggling to contain abuse.

[–] masterspace@lemmy.ca 3 points 1 year ago* (last edited 1 year ago)

Privacy has not diminished, you can host your own instance of the jitsi software account-free and take on the liability of people using your server for child porn yourself if you want to.

[–] PlatypusXray@feddit.de 33 points 1 year ago
[–] Forcen@lemmy.one 25 points 1 year ago (2 children)

Good thing that you can still self host it, post your favorite jitsi instances below for everyone to use.

I'll start with this one: https://calls.disroot.org/

[–] UdeRecife@literature.cafe 5 points 1 year ago* (last edited 1 year ago)

Thanks for that link. I didn't know disroot hosted Jitsi.

For others in this thread, here's a list of Jitsi instances: https://jitsi.github.io/handbook/docs/community/community-instances/

load more comments (1 replies)
[–] owiseedoubleyou@lemmy.ml 25 points 1 year ago (2 children)

It's hypocritical to call your service "privacy friendly" and then require the use of a Google/Facebook/GitHub account to log in. I kinda understand the reason why they do this, but they could have at least allowed you to use a more private email provider.

[–] masterspace@lemmy.ca 16 points 1 year ago (2 children)

Calling them hypocritical is hysterical when they offer all the source code for free and you can host your own instance that doesn't need an account.

[–] esaru@beehaw.org 8 points 1 year ago (1 children)

The software is free open source. But this case is not about the software. It's about the web instance that the majority of the people was using. And that instance now lost its privacy feature and shouldn't call itself privacy friendly anymore.

load more comments (1 replies)
[–] VolunTerry@monero.town 7 points 1 year ago* (last edited 1 year ago) (1 children)

I agree with you and it's an important distinction. But for me it's also about the ethos of the developers or company. Promoting free and open source tools is great, but requiring the opposite as a prerequisite to use the largest publicly facing implementation of that is a very odd decision.

[–] masterspace@lemmy.ca 7 points 1 year ago (1 children)

Is there another OAuth identity provider they should use? I agree that it's ludicrous that advertising companies are the primary identity providers we use, but I have no issue with GitHub / Microsoft as an identity provider.

At the end of the day they could create their own account system and take on the liability of storing passwords, but why? That's not what their software is about and as instance admins it will take away their time and focus.

At the end of the day I think what you're chafing against is not their fault but a fundamental problem with open source software at the moment, we have no system of decentralized identity verification, and identity verification is basically a necessary part of ensuring your system isn't abused.

load more comments (1 replies)
load more comments (1 replies)
[–] Jummit@lemmy.one 23 points 1 year ago* (last edited 1 year ago)

That said, it is completely understandable that some users may feel uncomfortable using an account to access the service. For such cases we strongly recommend hosting your own deployment of Jitsi Meet. We spend a lot of effort to keep that a very simple process and this has always been the mode of use that gives people the highest degree of privacy.

Seems like you can avoid it by self-hosting. Still a very suspicious move, kinda defeats the whole point of an alternative to big tech conference services.

Google, GitHub and Facebook for starters but may modify the list later on

Maybe they could support some auth provider from some fediverse app? That would be kinda neat.

[–] Moonrise2473@feddit.it 22 points 1 year ago (1 children)

Wasn't easier to just shutdown the server?

I use jitsi just because doesn't have Facebook/Google/Microsoft login

[–] zzz@feddit.de 5 points 1 year ago

Wonder why email as an identifier wasn’t sufficient…

[–] gunpachi@lemmings.world 21 points 1 year ago (3 children)

This is indeed sad news. I made my friends (who don't care about free software) switch from google meet to jitsi for video calls just the other month.

The only thing that got them sold on jitsi was that it required no login.

load more comments (3 replies)
[–] andrew@lemmy.stuart.fun 19 points 1 year ago* (last edited 1 year ago) (1 children)

ITT: People not understanding the difference between a free publicly hosted instance and the OSS tool itself.

[–] esaru@beehaw.org 8 points 1 year ago* (last edited 1 year ago)

This is about the free publicly hosted instance, used by the majority of the Jitsi users, who used it because they didn't have to login with a Google/Facebook/Github account. Which they now have to.

[–] CanadaPlus@lemmy.sdf.org 16 points 1 year ago

I really hope this doesn't become a trend, but every time I see a few buttons for signup with email coming last I have to wonder.

[–] kev@lemmy.kevhomeit.trade 11 points 1 year ago

Oh hell no. Why they dont make it optional?

[–] Twashe@lemmy.ml 10 points 1 year ago
[–] PrinzKasper@kbin.social 5 points 1 year ago (1 children)

If its open-source, couldn't somebody just fork it and remove the login requirement?

[–] sab@kbin.social 22 points 1 year ago (2 children)

You can self host it as well. This is just a restriction of the online service - the problem being that most people are not going to self-host their conference calls.

load more comments (2 replies)
[–] shortwavesurfer@monero.town 4 points 1 year ago

Well, time to find another instance, cause fuck that noise

[–] ono@lemmy.ca 4 points 1 year ago

How disappointing.

It was great for sharing private contact info with Google/Facebook/etc friends without revealing it to those invasive services. Instead of sharing your private address where it would be harvested, you could meet in an anonymous Jitsi room, exchange addresses there, and contact each other directly from then on.

Self-hosting doesn't solve that use case, unless perhaps you're willing to buy throw-away domains and IP addresses every time you do it.

[–] beta_tester@lemmy.ml 3 points 1 year ago (1 children)

You can also use matrix. Matrix currently uses jitsi. In the future it'll use "element call" but right now, jitsi.

load more comments (1 replies)
load more comments
view more: next ›