typing indicator is buggy

[ralyodio]

Doesn't work on pwa/desktop on arch/linux nor in firefox/librewolf -- works on macos/chromium but shows a snippet of code next to the typing indicator.

[kaushalyap]

@ralyodio Can you please assign me on this?

[kaushalyap]

Doesn't work on pwa/desktop on arch/linux nor in firefox/librewolf

@ralyodio If I understand correctly desktop app is a PWA, it does not work on Arch Linux? and not working on Firefox at all regardless of OS?

[ralyodio]

Yes I use lubrewolf which is a fork of Firefox

[kaushalyap]

Do I have to buy a sender mobile number from Twilio to test this?

I tried hosted version, by typing indicator you mean, like in whatsapp where you see an indicator that other participant is typing? For such case I need dummy users to test this with, is not it?

[ralyodio]

no i have a test number. send me your email, it will email you our OTP

[kaushalyap]

@ralyodio I think using SMS is not secure for 2FA and it is more costly. Industry have moved away from SMS verification due to its security issues (sim swapping). It is much better to use emails OTP since we already ask for emails from the user. This way we could remove the dependency on Twilio by implementing OTP algorithm on server and send emails using nodemailer or use dev friendly email service like resend if there are email delivery struggles.

Also this need for Twilio Account, morer the sender mobile number add more friction to contributor experience.

I sent you an email anyway.

[ralyodio]

sorry, SMS/phone is a design decision we are not going to change. we do not ask for emails either.

[kaushalyap]

we do not ask for emails either.

Seems like I was mistaken for some other issue.

sorry, SMS/phone is a design decision we are not going to change.

It's okay, I was sharing my opinion, but I'm curious about this decision, since matrix / element also use email?

[ralyodio]

emails are easy to fake. phone numbers not as much.

[kaushalyap]

I thought case was the other way, since blank sim cards be programmed. I wonder how someone would spoof something like gmail?

[ralyodio]

sorry i meant to say "emails are more anon than sms" -- i suppose your right but I think most people don't know how to reprogram a sim card. We want some level of identity to scale back the illegal potential activity, so I think phone number is enough to keep the bad actors away.

[kaushalyap]

but I think most people don't know how to reprogram a sim card

Yeah, normal people can't but I heard sim swapping attacks are common.

We want some level of identity to scale back the illegal potential activity, so I think phone number is enough to keep the bad actors away.

Oh I see this is about regulations, while US currently support E2E apps, I remember some bill proposed in past crack down encryption. In UK E2E are not possible AFAIK.

[ralyodio]

well open source is free speech so long live freedom!!!!