logoalt Hacker News

bastawhiztoday at 2:34 AM2 repliesview on HN

This isn't great advice if it's supposed to be an alternative to text messaging with a carrier (especially if you're using encrypted RCS).

For one, meshcore doesn't do a fantastic job of protecting metadata. Advertisements include your public key, and if I'm reading this[0] right, your GPS coordinates.

Second, the default public channel uses effectively no encryption at all.

Moreover, the network doesn't exhaustively prevent someone who intercepts a packet from identifying who sent it. It's no Signal.

[0] https://deepwiki.com/meshcore-dev/MeshCore/7.1-packet-struct...


Replies

subscribedtoday at 2:44 AM

All telemetry is off by default, you have to explicitly tune it on and then optionally permit specific contacts to poll it.

The PKI is basic because these networks are tiny and merging. And running on tiny computers ($5 boards with no display)

Public channel is public and it uses the default encryption key because it's a default channel, so by definition everyone is invited to participate. Not sure what your critique is.

And no, it's not trying to be signal. It's also currently less reliable.

But it's still safer than Sms, by a country mile.

show 1 reply
jeromegvtoday at 2:35 AM

You aren’t reading this right. Gps sharing is off by default on meshcore.

show 1 reply