October 1st, 2024

Matrix-Libera IRC Bridge Temporary Shutdown, a Retrospective (2023)

Libera.Chat has shut down its Matrix bridge due to ongoing security and privacy concerns, including bot abuse and communication failures, despite attempts to improve its functionality.

Read original articleLink Icon
Matrix-Libera IRC Bridge Temporary Shutdown, a Retrospective (2023)

Libera.Chat has officially shut down its Matrix bridge following ongoing security and privacy concerns. Initially launched in May 2021, the bridge was intended to facilitate communication between IRC and Matrix users. However, over time, Libera.Chat faced significant challenges, including a surge in bot abuse, privacy leaks, and communication failures with Element Matrix Services (EMS). Despite attempts to address these issues, including implementing a privacy filter and negotiating improvements, the situation deteriorated. By early 2023, Libera.Chat staff recognized the need to limit the bridge's functionality, leading to discussions about disabling the portalling feature. After a series of incidents, including a critical regression in the privacy filter, Libera.Chat staff decided to escalate their request for a complete shutdown of the bridge. On August 5, 2023, EMS complied with this request, marking the end of the bridge's operation. Libera.Chat emphasized the importance of transparency with its users and acknowledged the professional engagement of EMS staff throughout the process.

- Libera.Chat's Matrix bridge was shut down due to security and privacy issues.

- The bridge faced significant bot abuse and communication failures over time.

- Initial attempts to improve the bridge's functionality were unsuccessful.

- A critical regression in the privacy filter prompted the final decision to shut down the bridge.

- Libera.Chat aims to maintain transparency with its user community regarding operational decisions.

Related

Discord vs. IRC Rough Notes

Discord vs. IRC Rough Notes

The comparison between Discord and IRC, particularly in Lobsters chat room, emphasizes text chat functionality and user experience. Discord offers better GUI and security, but faces criticism for user-hostile aspects and performance issues. IRC struggles with user interface and integration, highlighting challenges in feature development. Other text-oriented chat platforms and open-source solutions are briefly mentioned.

Libera IRC Channels Sorted by Number of Users

Libera IRC Channels Sorted by Number of Users

The IRC network Libera.Chat, established in May 2021, hosts over 33,386 users and 23,157 chat rooms. Popular rooms cover topics like Linux, Python, security, and more, offering support and resources.

Security Issues in Matrix's Olm Library

Security Issues in Matrix's Olm Library

The Matrix's Olm library has critical cryptographic vulnerabilities, including cache-timing attacks and malleable signatures. The security team will not address these issues, advising users to switch to the vodozemac library.

Meta kills off CrowdTangle despite pleas from researchers, journalists – AP News

Meta kills off CrowdTangle despite pleas from researchers, journalists – AP News

Meta Platforms has shut down CrowdTangle, a vital tool for monitoring misinformation, facing backlash from researchers and organizations. The new Meta Content Library is criticized for limited access and effectiveness.

Update on Native Matrix Interoperability with WhatsApp

Update on Native Matrix Interoperability with WhatsApp

Matrix.org is integrating with WhatsApp for interoperability under the Digital Markets Act, allowing EU users access, but facing challenges like EEA restrictions and funding needs for development.

Link Icon 7 comments
By @j3s - 7 months
great post from the libera staff, respecting the matrix folks while dealing with all of that must have felt disheartening.

matrix has other driving forces and incentives. there’s only so much time they can spend on things like individual bridges.

meanwhile, they devote developers to writing two different homeserver implementations in parallel. or writing an experimental p2p homeserver - or the three guys working on thirdroom. ugh

i just hope they realize what’s important. people just want to chat on a distributed platform that isn’t irc - make it as simple and fun as possible. that is your entire mission.

no metaverse, no experimental backend shit, no securitygasm cryptography - nobody is buying drugs on matrix. this isn’t signal or whatsapp, this is discord for tech dorks.

just focus on making GROUP chatting good, simple, and fun. the ux just utterly sucks right now.

it’s the difference between scrolling through a menu on an ipod versus a self checkout kiosk - the kiosk just FEELS bad, simple human revulsion. the element interface offers the same experience.

and we _still_ don’t have custom emojis or selfserve moderation, even though matth himself promised them to us 2 YEARS ago: https://news.ycombinator.com/item?id=33014245

element is _the product_, and it hasn’t moved a single inch in years from my point of view.

By @joecool1029 - 7 months
Putting aside all the other problems this post talks about, for me the biggest issue was the bridge itself appeared to be run by a single person. When the bridge crashed and he was asleep or on vacation just got stuck waiting hours/days for it to come back. Made for a terrible user experience.

Since then I just run 1-to-1 heisenbridge connections with my homeserver. It's not as fancy but it works reliably.

By @7bit - 7 months
> We have been reluctant to go into detail before now because the last thing we wanted was to put our communities through another public dispute with a for-profit company. However we believe you, our users, deserve to know the circumstances of our decision, so this post is an attempt to satisfy your expectation of transparency from us as an organisation.

The idea of transparency being a "burden" is ridiculous. It implies that sharing information is a problem, which seems like an excuse to avoid accountability.

By @rapnie - 7 months
Really a pity this. Suddenly all those bridged-to-matrix chatrooms were left out in the cold. I am using IRC now to reach those, and they lost a lot of folks that were active in their channel before.
By @blenderob - 7 months
Are there any alternatives to the official bridge that someone who is a user of both Libera and Matrix can run for themselves to bridge the channels they operate?
By @wkat4242 - 7 months
> Within a few months after welcoming the bridge, we were routinely dealing with a sizable and often automated abuse load from the bridge that made use of easy anonymous registration and the protocol’s persistent and distributed archiving of files, including images, videos, and long messages converted to pastebins.

Umm libera itself allows "easy anonymous registration". You don't even need to have an account. You just join with a made-up name if you want to.

This is in fact one of the things I love about IRC. Nothing wrong with it but it feels wrong calling matrix out on that.

The archiving makes kinda sense for matrix' features of scrollback on demand. I believe there's an IRCv3 feature for it too. The bridge should have a provision to prevent users to see any backlog from before the moment they joined.

Ps I really hate those new "single puppet" third party bridges they recommend. Because they break nick colouring and also the actual nick of the user speaking is in a different place. Having each matrix user have their own IRC puppet is much nicer on the IRC side. Especially when there's more matrix than irc users.

By @ranger_danger - 7 months
I think libera has enough problems with moderation as it is. And most of the regulars (including most mods) in all the biggest channels seem to have cosmically inflated god complexes and are regularly and demonstrably abusive to their users with no recourse available (if you try to report it they just ban you).