Spyke
privacyguides·Privacy Guidesbycarnha

meet.jit.si, the Jitsi Team's instance, now requires a Google, Microsoft, or Facebook account for their online service

cross-posted from: https://beehaw.org/post/7363991

While Jitsi is open-source, most people use the platform they provide, meet.jit.si, for immediate conference calls. They have now introduced a "Know Your Customer" policy and require at least one of the attendees to log in with a Facebook, Github (Microsoft), or Google account.

One option to avoid this is to self-host, but then you'll be identifiable via your domain and have to maintain a server.

As a true alternative to Jitsi, there's jami.net. It is a decentralized conference app, free open-source, and account creation is optional. It's available for all major platforms (Mac, Windows, Linux, iOS, Android), including on F-Droid.

meet.jit.si, the Jitsi Team's instance, now requires a Google, Microsoft, or Facebook account for their online servicehttps://jitsi.org/blog/authentication-on-meet-jit-siOpen linkView original on lemm.ee
rar
discuss.online

This almost sounds like a 5D chess move to promote using alternative instances instead of the main demo. I'm thinking of selfhosting one for my friends group.

Requiring an acc is understandable but making it Meta/MS and not even something like openID really kills the vibe.

33
lemm.ee

That is a massive disappointment. Hopefully Element gets their video calls sorted. Why can I not just have privacy tools that I can use? Why are the good ones taken away?

30
garrettreply
infosec.pub

Short answer is that a lot of privacy-focused tools get abused like hell and put these companies in an untenable position. It sounds like Jitsi had something fairly bad happening that would’ve put them in a regulatory pinch.

22
lemm.ee

But the companies chosen for login is a slap in the face of anyone who cares about privacy.

If it is e2e encrypted, why would this change mitigate what they are concerned about?

1

“Slap in the face” is a bit dramatic when this doesn’t impact the truly private version of this software, the version you host on a system you control.

I’m also not sure what end-to-end encryption has to do with this since preventing the sign up of an abusive user essentially addresses the issue. It’s probably not something they’d wanna do but I’d wager they were getting some subpoenas and/or warrants that they couldn’t provide much information for and LEOs were ratcheting up pressure. Unfortunately, the legal side of tech is more than “ha ha can’t do that, officer”.

1
Detun3dreply
lemm.ee

I don't remember Element using the Jitsi Team's instance. Element.io had their own so this shouldn't affect it's Matrix users at all.

3

Yes. Jitsi was one of the best for a while. Secure and just works. I think Element wasn't e2e encrypted while debugging but I'm guessing is close to usable. I mentioned it more as a FOSS alternative.

4

If I had my druthers I'd start a business setting up and hosting these sorts of things because it's way better than using a centralized service.

Unfortunately, my druthers fields lie barren.

4
infosec.pub

Just destroyed everything they built in 1 fell swoop. There’s absolutely no reason to use Jitsi at this point.

They built a great software. The software is still there.
meet.jit.si is just a demo instance for the software, nothing more. You're supposed to use the software yourself.

11

Jami? GNU Ring?

Well, there is also Tox(p2p), Matrix(fed) and Mumble(isolated)

4

Earlier this year we saw an increase in the number of reports we received about some people using our service in ways that we cannot tolerate. To be more clear, this was not about some people merely saying things that others disliked.

Let me translate this into a language we can understand: We got some mean letters about CSAM and are reactively responding to it

2

You reached the end