Bit of an odd intro: I'm a carpenter, 42 years at the bench. I'm the type who can't stand making the same thing everyone else makes, so I've always chased the technical side too - CNC, laser cutting, and lately building software to run my machines.
At some point I wanted to send my own designs to people without them leaking anywhere, and I went down the rabbit hole of how messaging actually works. What got me was realising how much of the "free" stuff is paid for with our privacy. That annoyed me enough that I decided to build my own messenger, mostly to learn. It grew from something simple into a real thing. I called it Sherlock.
Two things I cared about: proper encryption, and NOT tying it to a phone number - I built a different system for that.
I'm not going to pretend I reinvented cryptography. I'm a woodworker who got obsessed. So I'd rather hear it straight from people who actually know this stuff:
- How much does the "no phone number" approach really buy you if I get the rest wrong?
- For a small independent project, what's the bar before any of you would even consider trusting it - open source, audit, something else?
Genuinely here for the criticism, not the pats on the back.
You + Ai are better at writing in English than 54% of native speakers. Well done!
Thank you, that really means a lot - because honestly, after that last comment I started to feel like an intruder here, like using AI made me unwelcome in this group. So your words landed well.
I'm not trying to fool anyone. I just use what AI knows to build my own dreams and to get through everyday things. That's all it is for me - a tool, the same way a laser or a chisel is a tool in my workshop.
I actually have more I'd like to say, but after that last comment I got a little afraid to say anything at all. Your message made it easier. Thank you for that.
(Note: English isn't my first language - I write in my own and AI helps me translate.)
I think you'll find I didn't accuse you of trying to deceive anyone, I just suggested that you not gloss over using AI in your projects. Because yes, in my experience people here take it very badly if it looks like you're trying to present AI generated work as your own (note: that doesn't have to be your intent, it just has to look like it was). I was trying to be helpful, and as far as I can see my wording and tone were mild, so I see no reason that my comment should have made you feel unwelcome. The more fool me for the attempt, I guess.
Consider they are almost certainly translating the comments here back to their language using AI which could lose nuance.
I considered it, and the point stands. I came here offering advice - good advice, grounded in two decades of IT career, because nobody who cares about security rolls their own app with encryption unless they know what they're doing. There's too much risk of a bad implementation and leaving holes for bad actors to find.
They can just do what I do and use AI to set up their Matrix server. I set it up before AI was a thing too, but it's so much faster now. That uses a lot less tokens, too. But they don't seem particularly interested in actually taking advice onboard, so I'm not holding my breath.
edit: well that's refreshing, he listened! Don't get that on the internet too often these days.