On the Matrix organizations' business partnerships with imperial military alliances and with the police

I see a lot of posts about how shitty the Matrix Communication Protocol (henceforth Matrix) implementations are, but I hardly see any posts talking about how the Matrix Foundation (henceforth MF) and New Vector Ltd. (henceforth NVL) (trade name Element)—the two sister organizations that, in essence, form the Matrix world—are busy building business partnerships with imperial military alliances of nations that are enabling and perpetrating genocide at present, and with police forces actively suppressing and crushing the resistance of anti-capitalist movements, of campaigners for climate change action, of anti-genocide protestors. They have (or are trying to have) commercial relationships with the North Atlantic Treaty Organization (NATO), with the German armed forces, and with various police forces in Europe. They are also wooing the US Department of Defense. This blog post talks about the letter to the US DoD by US senators Ron Wyden and Eric Schmitt urging for the rapid adoption of Matrix. This blog post says that Element is "incredibly fortunate to be working with trailblazers like ... the US Department of Defense ...".

This fealty to the imperial setup also shows in the language adopted by the blog posts of both the MF and NVL. This February 2025 blog post by the MF says that "the International Rules-Based Order is at risk like never before" and cites in support a BBC preview of the Munich Security Conference expressing anxiety about the "old" world order crumbling. Anyone paying attention knows that "the International Rules-Based Order" is an euphemism for neo-liberalism imposed on the global south by their former colonizers to negate the effects of decolonization. If a nation state tries to delink itself from the vortex of global finance, the USA and its allies impose sanctions upon it. If it still doesn't fall in line, the Western transatlantic alliance invades the country and bombs it to smithereens. As its illegal interventions in the former Yugoslavia and Libya and many other places demonstrate, NATO is the organ of choice for such wars. (Also, we all know that the USA and its allies in NATO and several of the non-NATO countries in Europe have been materially and ideologically supporting Israel in its genocide of the Palestinian people.) And exactly this organization is the partner of choice for the Matrix folks. In another illustration of this partnership, Jeroen Franssen, the Innovation Project Manager for the NATO Allied Command Transformation, gave a talk at the Matrix Foundations's September 2024 conference.

The same blog post also talks about the Matrix Foundation's applications to join the Global Internet Forum to Counter Terrorism and tech against terrorism. Given that Palestine Action and Extinction Rebellion and other such groups are being labelled terrorists and persecuted by the police forces in several of the NATO and EU countries, the Matrix Foundation joining tech forums for countering terrorism and also partnering these police forces does not bode well for the Matrix protocol.

There are also blog posts with a war-mongering tone on the Element website. This one, for example, links to a news report about suspected sabotage of a link between Germany and Finland, but in the blog post, the word "suspected" disappears and the sabotage becomes a certainty. The escorting of an alleged Russian spy ship from Irish waters gets labelled "robust", again an adjective the cited report does not use. That NATO is concerned is cited. The blog post also approvingly mentions NATO's call on allies to shift to a "wartime mindset". This blog post also talks of NATO "pushing governments to adopt a wartime footing" and advocates for the Matrix protocol and Element itself as the right tools for all these countries in "wartime" mode.

One can go on, but I think the picture should be clear by now. We justly condemn American Big Tech companies like Microsoft, Alphabet, Meta and weapons manufacturers like Lockheed Martin, RTX, etc. for profiteering from Israel's genocide of the Palestinian people. Why should the rules be any different for the Matrix folks? I know that the Matrix organizations are small fry at present and are in no position right now to profit in the same fashion, but their actions and their words clearly demonstrate a strong urge to join these war- and genocide-profiteers. It is time all anti-colonial, anti-imperial, anti-capitalist activists familiarize themselves with the true face of the Matrix organizations, and act accordingly.

Appendix: Is the Matrix Foundation truly independent of New Vector Ltd.?

Someone might argue that it is New Vector Ltd. forming business partnerships with NATO, with the police forces, etc. The Matrix Foundation—the custodian of the Matrix protocol—is an independent entity and has nothing to do with these commercial relationships. The blog post cited above suggests otherwise, it shows that the Matrix Foundation is keen on being a player upholding and implementing the "International Rules-Based Order". But if we ignore the ideological alignment with New Vector Ltd. expressed in the blog post, can we say that the foundation is truly independent of its for-profit sibling?

At present, the MF website states:
In the interest of transparency, we think it's important for people to know that most of our staffers are employees of Element, working under a contract with, and funded by, the Foundation. The exception is our Managing Director who contracts directly with the Foundation.
Yet, the people behind Matrix seem to bristle at the suggestion that the MF is entirely dependent on NVL. This recent blog post by the MF managing director is an example. However, the MF doesn't point out anywhere that a 2019 resolution entitles Matthew Hodgson and Amandine Le Pape, the founders of both organizations, and the Guardians (equivalent to Directors forming the board of a for-profit company, or to Trustees forming the board of a Trust) of the MF, to vote and to fulfill quorum, irrespective of any conflicts arising from their positions as Directors of NVL. The resolution reads:
THAT any actual or potential conflicts of interest of Matthew Hodgson and Amandine Le Pape (the "Conflicted Guardians") arising from or connected with their directorship and/or shareholding in New Vector Limited (whether direct or indirect interest or duty that conflicts or may conflict with the interests of the Foundation or their respective duties to the Foundation) be and are hereby authorised in accordance with section 180 of the Act, and accordingly, the Conflicted Guardians shall be entitled to participate at any board meeting for voting and quorum purposes in respect of the matters detailed in their respective declarations of interest annexed to this resolution.
Readers who would like to check the source should open this page and select the "View PDF" option for the June 21, 2019 entry titled "Resolution of adoption of Articles of Association".

At present, Matthew Hodgson and Amandine Le Pape continue to be listed as Guardians of the MF and as Directors of NVL.

To me, the above 2019 resolution does not inspire confidence in the independence of the MF. The situation is analogous to Matt Mullenweg's simultaneous control of Wordpress and Automattic. Ben Cook, as far back as in 2010, had pointed out how Matt Mullenweg being the boss of both Wordpress and Automattic could potentially lead to a toxic and explosive "conflict of interest" situation. As you can see from comments below his post, he was roundly cursed and criticized for his demand. However, his prophecy came true in 2024. Let's see how things shape out in case of the MF and NVL.

#Matrix #Element #NewVectorLtd #MatrixProtocol #InstantMessaging #BusinessCommunication #Signal #XMPP #Wire #MicrosoftTeams #Slack #colonialism #imperialism #capitalism #NATO #USA #Europe #EuropeanUnion #DigitalSovereignty #Israel #Palestine #Gaza #genocide
Matrix Specification

Matrix defines a set of open APIs for decentralised communication, suitable for securely publishing, persisting and subscribing to data over a global open federation of servers with no single point of control. Uses include Instant Messaging (IM), Voice over IP (VoIP) signalling, Internet of Things (IoT) communication, and bridging together existing communication silos - providing the basis of a new open real-time communication ecosystem. To propose a change to the Matrix Spec, see the explanations at Proposals for Spec Changes to Matrix.

Matrix Specification
@Feral Ferment What do you recommend otherwise?

One thing you miss here is that The Matrix Foundation is not the be all end all of Matrix. They run the matrix.org server based on the open standard of the Matrix protocol, which is by far the most feature-complete E2EE communication protocol out there. XMPP lacks many key features and isn't E2EE by default. Signal is even less feature-complete, entirely centralized, and the only thing stopping them, like Telegram or anyone else, from compromising its users is good faith, which is going to be in short supply given the recent shifts in how governments are viewing online privacy.

I don't agree with the Matrix Foundation's politics, but I don't have to. They don't own my server, nor do they own the software it's based on. If something else comes along with end to end encryption, bridging to help on-board people, structured channels, VoIP, etc. then I'd absolutely consider shifting to it. Especially if the Matrix Foundation were actively contributing to the imperial project, not just paying it the lipservice we expect from any liberal.

For now, though, this is a problem without a solution and, I would suggest, without a target. You may as well be saying not to use the fediverse or connect to ActivityPub because mastodon.social is friendly with fascists and has a history of going after anti-Israel content — much more blatantly than Matrix Foundation does — and yet, we're still here, because you don't have to be on mastodon.social to use or indeed to develop Mastodon.

If we throw away every piece of software that has even a connection to a fascist, we're going to end up back with abacuses. So until I see that hosting a Matrix server and supporting the open standard is actually contributing to that fascism — as opposed to just using the same software that was originally spearheaded by is no longer owned by said fascist — I would rather spend my energy elsewhere. Or otherwise, again, you may as well be bashing Tor for being originally created and still used by the US military, or Signal for being used by and not denouncing the Pentagon.
@Comrade Ferret

To be clear: I have refrained from recommending alternatives because, to me, there isn't an obvious one. Also, the post was already far too long, and I didn't want to get into this mess of the landscape of alternatives.

I also know that the Matrix code is FOSS. So yes, others can fork it. And yes, someone can set up their server and be independent of their infrastructure, as you are doing.

I personally would hesitate from using the code written by people who are so strongly aligned with the NATO armed forces and with the various police forces in the imperial countries. But I have no strong opinion on whether others should also refrain from doing the same.

Last but not the least: I do think that the core design of the Matrix protocol is unsuitable for communications between individuals and small groups (especially activist groups). Fundamentally, Matrix is not a messaging protocol, it is a decentralized conversation history replication protocol between all the participating servers. A matrix "room" is a "Directed Acyclic Graph" (DAG) made up of events (messages, user membership states, bans, etc.) This design creates a minefield of issues that are hard to anticipate. I don't have the mental bandwidth to elaborate, but you can find here a partial list of the potential problems. Some of these issues make it far too easy to DDOS a server or to get all its conversation history. (In this kind of design, E2EE does not provide much protection.) Think server of an activist group vis-a-vis law enforcement, and work out the implications.

(I also think that many times, the Matrix team has shown themselves to be plain incompetent. I find it hard to trust their competence as much as I find it hard to align with their demonstrated principles.)
why not matrix?

at this point it seems like most of the tech community is familiar with matrix, the "open network for decentralized communication". lots of projects and communities have migrated from a host of other platforms, including irc, discord and slack with the promise that their new spaces will be free forever. i first discovered matrix in 2021 and have dedicated a lot of time trying to understand exactly how it works, as well as trawling through github issues to try and understand whether we should consider matrix…

Telegraph
@Feral Ferment I've yet to hear of an actual leak from an encrypted Matrix room. I've read the article you've linked before, and while I'm not an expert, it seems to me to be an issue with any privately run, federated platform. You could do all of this stuff and more to any Hubzilla server (and indeed, I've seen people complain about their edits and deletes not being communicated properly to other servers).

I'd still rather have this than a centralized authority whom I simply have to trust is doing what they say they're doing with my information. The recent scandal with Tea is bringing that trust into the limelight recently.

Edit: I wonder if you're thinking of point 9 that begins with "the end-to-end encryption is also annoyingly fragile", and misunderstanding what it's saying. It's not saying that the encryption is being broken — as in, messages become unencrypted — but the opposite: Infamously, messages will fail to decrypt. This is very well-known and probably the biggest beef people continually have with the UX of Matrix.

I also really want to emphasize here: This came from you going after me for running my own Matrix instance, so stating that none of this applies to people who aren't using matrix.org as their server is a bit disingenuous. This wasn't a debate that needed to happen at all.
@Comrade Ferret

While talking of e2ee, I had in mind the "Homeserver Control of Room Membership" section from this paper.

As for the overall topic, I simply have no alternative to suggest. I don't think an argument about the relative pros and cons of Matrix, XMPP, Signal, Briar, Quiet, etc. will lead anywhere.

ps: I do hope Quiet evolves into an alternative to Matrix, but I don't think it's there yet.
@Feral Ferment #^https://nebuchadnezzar-megolm.github.io/ (2022)

At the time of public disclosure, the Matrix specification and Element will not be vulnerable to

the attack against out-of-band verification,
the semi-trusted impersonation attack,
the trusted impersonation attack and
the impersonation to confidentiality attack.

A second set of countermeasures is currently in the design phase, which aim to provide complete fixes for every vulnerability we identified.

In particular, the attacks concerning homeserver control of room membership and user device lists will not be fixed at the time of disclosure. However, a new local per-room setting will be added alongside the disclosure in order to mitigate the homeserver’s control of user device lists. In the long-term, the Matrix developers plan to develop fixes for both of these attacks.
Nebuchadnezzar

Practically-exploitable Cryptographic Vulnerabilities in Matrix
@Comrade Ferret
In the long-term, the Matrix developers plan to develop fixes for both of these attacks.
Have they done that? If I remember correctly, they hadn't, until about mid-2024. I have not kept track, so I don't know what's the current status.
@Comrade Ferret

Somewhat tangential point: I always think of Matrix/Element as an alternative to Microsoft Teams/Slack etc., and of Signal as an alternative to WhatsApp/iMessage/Messenger. I know people routinely compare Matrix/Element to Signal, but I think they address different/distinct needs and use cases.
@Feral Ferment Yes, Signal is mainly for one on one chats and small groups. Matrix is for communities, which is its primary advised use.
@ferret @feralferment
Matrix isn't E2EE by default either, it's an optional feature, just like in XMPP. On both protocols the major clients do support Double-Ratchet-based E2EE (Olm in Matrix, OMEMO in XMPP) and enable it by default for personal communication.
Which other key feature present in Matrix do you consider missing in XMPP? Not saying XMPP is perfect, but it probably checks most boxes - and due to its effectively better decentralization, maybe even more than Matrix nowadays.
@pixelschubsi Yes it is. I use it daily, it's E2EE by default. When starting a new room, you have to turn off encryption if you want it off.

XMPP doesn't have threading, or bridging to other modern platforms. Its encryption, even when on, is incomplete and only encrypts messages. Many clients don't even support that encryption either.
pixelschubsi (@[email protected])

432 Beiträge, 1 Folge ich, 13 Follower ·

troet.cafe - Mastodon

@ferret Same as you describe for Matrix E2EE applies for the modern XMPP clients. OMEMO is widely supported, there's probably more implementations actually than Matrix, it's just that all people use the same Matrix clients.

Regarding bridging: XMPP supported that long before Matrix existed, it was called gateways back then. Those also supported almost all networks (one of them was based on libpurple, so everything that has a libpurple plugin was supported). More recently there is slidge.im

@pixelschubsi I'm aware of gateways. They don't support proprietary networks, they support things like IRC. There is no gateway for Discord, Telegram, anything that people primarily use these days, barring Signal and WhatsApp.

And no, XMPP's major clients are not E2EE by default, it needs to be enabled, and only posts are encrypted. PrivacyGuides doesn't recommend it for these reasons.
pixelschubsi (@[email protected])

432 Beiträge, 1 Folge ich, 13 Follower ·

troet.cafe - Mastodon
@ferret Spectrum supported WhatsApp, Telegram and Discord when it was still popular, see https://spectrum.im/documentation/backends/libpurple.html I believe you could configure Signal as well via any of the purple plugins that support it, but the documentation doesn't explicitly mention it.
The more modern gateway implementation slidge, supporting more features, can definitely do all of them.
Spectrum 2

Spectrum 2 : Spectrum 2 IM transports

@ferret
Conversations (Android), Monal (iOS) and Dino (Linux), which is the set of apps I recommend, have OMEMO E2EE enabled by default.
@pixelschubsi Dino's site isn't even functional. It's even on the Wikipedia entry that XMPP doesn't support E2EE by default and it needs to be enabled.

Supported frontends

Currently, following frontends are supported:

XMPP
Slack

Supported backends

IRC
XMPP
Facebook
MSN
Yahoo
pixelschubsi (@[email protected])

432 Beiträge, 1 Folge ich, 13 Follower ·

troet.cafe - Mastodon

@ferret XMPP is a modular protocol. It doesn't support E2EE by default, because some of its use-cases, especially outside the instant messaging realm, don't require encryption. Saying XMPP doesn't support E2EE by default is telling as much as saying TCP doesn't support encryption by default.

Everything I said was factually true. If Wikipedia doesn't reflect it, maybe update Wikipedia instead of telling me it doesn't.