Back to News
Advertisement
Advertisement

⚡ Community Insights

Discussion Sentiment

47% Positive

Analyzed from 1429 words in the discussion.

Trending Topics

#app#code#briar#security#project#don#apps#android#users#still

Discussion (18 Comments)Read Original on HackerNews

pogue•about 2 hours ago
Sounds like it's basically dead. The issue with messenger apps is that they're a dime a dozen, there are so many of them and they offer so much variability in security, privacy, but most importantly usability and uptime. If your friends won't switch to them, there's almost no point in having them or using them.
embedding-shape•about 2 hours ago
For most IMs I agree, Briar is/was slightly different though, being P2P and E2E encrypted. There isn't many IMs out there supporting Bluetooth connections between users for example.
rglullis•7 minutes ago
Being p2p, network effects are even larger: you have to convince not only your own friends to install and use, but also rely on enough density in your area?
ijustlovemath•5 minutes ago
Helene survivor here. I will be spreading the word about this project and keeping some APKs for if the shit hits the fan again. FDroid being able to sync between local devices means all you need is to get fdroid onto someones phone. Wish they had an iphone app though!
copperx•34 minutes ago
Bitchat is great, but I don't understand why it's Bluetooth only. I would think Wifi reaches further.
raybb•about 2 hours ago
Anyone have an idea how good https://qaul.net/ is?

I saw it shared at dweb camp and it seemed like a pretty long term serious project for P2P.

nubinetwork•about 2 hours ago
> unreliable background operation on android

Pretty much every app I have has delayed notifications, and no matter of battery optimization settings can fix it.

ValdikSS•2 minutes ago
Do you use VPN? This is a common misconfiguration of a server-side NAT related to too long or too short NAT timeouts combined with "act like a blackhole if we don't know anything about this connection".
dist-epoch•40 minutes ago
It seems to me this only happens if you don't use the app much. Or maybe some apps are "allowlisted", I've never had delayed WhatsApp/Slack notifications.
ozyschmozy•15 minutes ago
I use signal a lot (probably has 30-60 minutes screen time per day), and still notifications are extremely finicky no matter what battery optimization settings I tweak. So I'm leaning towards some apps being blessed
napkid•20 minutes ago
Not GP, but most of the apps I use that works without Google Play Services (specifically, FCM) have this problem too. Vendor-agnostic notification on Android, and as far as I know iOS, is still painful. Ofc Slack and WhatsApp works fine : they use the Google notification system.
nubinetwork•24 minutes ago
I use twitch almost every day, its notifications are usually off by 10-15 minutes... /shrug
vmg12•about 1 hour ago
> We considered completely rebuilding the application from the ground up, or even splitting it into separate applications for online and offline use

This is actually non-trivial. There's an app I was working on where I wanted to have a local first mode that allowed people to use the app for free without an account and there was also a cloud hosted version that allowed for team collaboration, etc.

For this kind of thing to work chunks of the app essentially need to be written twice. So, not fun.

allthetime•about 1 hour ago
Why? I use a similar model in a few mobile apps. Free, not logged in usage stores a restricted set of user activity data ephemerally (lost upon uninstall) in the phone. For subscribed users, this offline storage mechanism is still the primary storage mechanism, but then we add a cloud sync mechanism on top of it that enables usage across multiple devices and permanent storage in the cloud. Curious why you need to write the app twice when in my mind you are simply adding and enabling extra functionality on top of the core product.
dist-epoch•39 minutes ago
Is this still relevant in the age of LLMs? They can write it 5 times without sweating.
exceptione•about 2 hours ago
Evanito•34 minutes ago
Briar supports sending images. Source: user
HelloUsername•about 2 hours ago
That's too bad. Anyone know of a fork or similar project? Maybe Meshtastic/MeshCore/BitChat. Berty Messenger's last update on iOS was in January 2025.
nunobrito•about 1 hour ago
Instead of a fork, there is completely new development going on here: https://github.com/geograms/aurora

BLE/LoRa/radio/internet mesh with reticulum that combines chat, social and torrents over NOSTR (decentralized protoocol).

Still beta, around August should be stable.

maqp•23 minutes ago
https://docs.cwtch.im/ has P2P Onion Service based messaging.
unethical_ban•about 2 hours ago
It's really sad that both Apple and Google make it so difficult for background processes to run with user consent. The app wasn't even available for iOS because they don't allow apps to listen for messages outside the walled garden's polling service.

Briar is a messenger app that worked on local networks, over Bluetooth, and over Tor if traveling the Internet. Fully encrypted and the purpose was decentralized, serverless messaging.

I liked the concept, and tested it out a little on my Android devices. But it looked straight out of 2009, and it had the issues described in the post. Still. Thanks for the work. I hope it can get revived or inspire others some day.

P.S. feature request! If Alice, Bob and Charlie are all contacts with each other, and Alice writes an offline message to Charlie, Alice should be able to opportunisticly hand the encrypted message to Bob on their shared network, and Bob can deliver it to Charlie.

stackskipton•about 1 hour ago
It's both sad and understandable. So many Applications would want to be running in the background for data collection reasons or just user responsiveness. While it could be a permission, after watching so many people just hand out "Sure, have my location always and forever" to any application that ask for it, the OS would get totally overwhelmed.

This P2P system would probably only work if implemented by Google/Apple themselves and they have zero desire to do so since it's a feature almost no one would want.

Evanito•27 minutes ago
> P.S. feature request! If Alice, Bob and Charlie are all contacts with each other, and Alice writes an offline message to Charlie, Alice should be able to opportunisticly hand the encrypted message to Bob on their shared network, and Bob can deliver it to Charlie.

This is intentionally only included in Forum-mode chats in Briar. Over direct message, leaking contacts is considered a breach of security. (Your definition of "leak" may differ.) In group messages, only the group admin is considered trusted, and every message must go directly to or come from them.

In every security tradeoff, Briar chose the option that maximizes security, even considering how the airwave transmission times might be fingerprintable as Briar traffic.

Not saying any of this is a good way to make a useable app for wide adoption, but it is intentional and highly opinionated.

rvz•about 2 hours ago
This is what happens when no-one pays for their tools and I expect this to happen when more software becomes AI assisted.

The truth is donations do not work for tiny open source projects in the long term and even when Briar was quietly building for many years, it is clear that it is not enough.

hermanzegerman•about 1 hour ago
I doubt that Briar saw much usage at all.
fg137•about 1 hour ago
So?

Does that negate any of the points?

hermanzegerman•about 1 hour ago
I don't think "That's what happens if Users don't pay for Software" is a good point, when talking about a messenger who had almost no regular users
timcobb•about 1 hour ago
> Last year, we decided that we wouldn’t realistically be able to solve these issues and so we reluctantly decided to shut down the project.

If these are actually the problems, then why not throw 200 dollars of GPT 5.6 at these instead of shutting it down? Were these systematic problems (Apple/Google hegemony, for example) that couldn't be beat with code?

klibertp•14 minutes ago
Try it. The AI will probably tell you that it's, of course, doable. You would have to start by making your own AOSP distribution and require an unlocked bootloader to even attempt to install it. You definitely can throw an AI agent at the problem, but a) it'll be significantly more than $200, no matter how you cut it; b) you'll end up with tens to hundreds of kloc of AI-generated code in a security-conscious context; and c) you can forget about having more than a handful of the most desperate users[1]. Both b) and c) are fatal for a project like this.

The locking down of the Android platform, IME, is a massive, decade-long process[2] with "full speed ahead" corporate backing. Even just a few years ago, you could maybe code around some of the restrictions (if supported by users going into settings and tapping some checkboxes); today it's impossible even with root. To get working "push notifications" outside of the official channel, you need to hack the support into the OS - or accept that you probably will get the notification, but it can be anytime from a few minutes to a quarter hour before your app receives it.

[1] In which case, making them use tens of thousands of AI-generated code "for security" is a clear moral hazard you probably don't want to walk into.

[2] I don't want to judge whether it's a move in the right direction or not - that's a separate matter. But it is happening.

fg137•about 1 hour ago
Fighting complex technical and non-technical issues "with code" may be the most programmer way of thinking about things.

To begin with, that 200 dollars need to come from somewhere. Are you going to personally contribute to that 200 dollars? If not, someone needs to find money from somewhere. Then, I can assure you it's going to be much more than 200 dollars before you realize it.

timcobb•about 1 hour ago
Who spent the time to make this? If those people spent countless hours doing it by hand, maybe they would be willing to spend an analogous resource? It seems reasonable to me if you've already invested so much and paid in time.

But yeah that's why I was asking if this was a non-code issue? Because they're presenting it as hey, we couldn't figure out the battery life in this post.

fg137•37 minutes ago
$200 mean very different things to different people.

I would never say it's "reasonable" to expect anyone (including maintainers) to contribute money or code to an open source project.

Must be easy for you to type these things from your comfortable armchair.

Kiro•44 minutes ago
I agree. These are classic problems where LLMs really shine. I would be very surprised if GPT-5.6 couldn't fix them.
no_wizard•25 minutes ago
Claude, Copilot or JetBrains AI could also do it
klibertp•13 minutes ago
Emacs with `M-x make-android-bg-app-responsive-dwim` too!
phoronixrly•about 1 hour ago
Because it is security-critical code. Throwing 200 dollars at anything that isn't a competent human developer is not only a waste of money, but will tarnish a very reputable project.
faefox•about 1 hour ago
Give that a try and let us all know how it goes. :)
timcobb•about 1 hour ago
I would imagine pretty good if it's actually just a code issue
klibertp•10 minutes ago
It's not. Modern Android is increasingly limiting what apps can do. It's a "code issue" in the sense that you can clone the Android sources, overhaul security and power management systems, and build your app to run on that. It'll work. It's doable. Would that be a solution for this project, though?
specproc•about 1 hour ago
It's a privacy-focused application for secure communication, last place you want slop.
timcobb•about 1 hour ago
To me I seems like it was an attempt at a privacy focused application for communication, but it's now in maintenance mode.