Element (Matrix) Messenger: Difference between revisions

From Irregularpedia
Jump to navigation Jump to search
Initial
 
formatting and categories
Tag: wikieditor
Line 9: Line 9:
Element stands out due to its robust features tailored for group communications:
Element stands out due to its robust features tailored for group communications:


'' 🕵️ '''Anonymity''': Sign up with just a username; no phone number required.
# **🕵️ Anonymity**: Sign up with just a username; no phone number required.
'' 🌐 '''Accessibility''': Accessible on NIPR via the web. Self-hosting may be required for enhanced privacy.
# **🌐 Accessibility**: Accessible on NIPR via the web. Self-hosting may be required for enhanced privacy.
'' 📣 '''Custom Notifications''': Set up alerts for specific keywords to stay focused on relevant discussions.
# **📣 Custom Notifications**: Set up alerts for specific keywords to stay focused on relevant discussions.
'' 💬 '''Organized Chats''': Utilize threads to keep conversations streamlined and organized.
# **💬 Organized Chats**: Utilize threads to keep conversations streamlined and organized.


<div class="figure">
<div class="figure">
[[compare-element.jpg|Compare Element]]
[[compare-element.jpg|Compare Element]]
</div>


</div>
Explore the capabilities of Element on [Matrix Chat](https://matrix.irregularchat.com). While Matrix and Element are often used interchangeably, numerous clients are available across different platforms.
Explore the capabilities of Element on [https://matrix.irregularchat.com Matrix Chat]. While Matrix and Element are often used interchangeably, numerous clients are available across different platforms.


<span id="essential-resources"></span>
<span id="essential-resources"></span>
== Essential Resources ==
== Essential Resources ==


'' [https://static.element.io/pdfs/element-user-guide.pdf Official Element User Guide]
# [Official Element User Guide](https://static.element.io/pdfs/element-user-guide.pdf)
'' [https://en.wikipedia.org/wiki/Matrix_(protocol) Matrix on Wikipedia]
# [Matrix on Wikipedia](https://en.wikipedia.org/wiki/Matrix_(protocol))
'' [https://matrix.org/docs/chat_basics/matrix-for-im/ Learn More About Matrix]
# [Learn More About Matrix](https://matrix.org/docs/chat_basics/matrix-for-im/)
'' [https://nebuchadnezzar-megolm.github.io/static/paper.pdf Deep Dive Into Matrix Protocol]
# [Deep Dive Into Matrix Protocol](https://nebuchadnezzar-megolm.github.io/static/paper.pdf)


📥 '''[https://element.io/download Download Element Messenger]''' available for Desktop, Android, iOS, and Web.
📥 **[Download Element Messenger](https://element.io/download)** available for Desktop, Android, iOS, and Web.


<span id="using-matrix-with-the-irregular-chat-login"></span>
<span id="using-matrix-with-the-irregular-chat-login"></span>
== Using Matrix with the Irregular Chat Login 🔑 ==
== Using Matrix with the Irregular Chat Login 🔑 ==


[https://element.irregularchat.com <img src="./media/login-button.png" alt="Login Button" style="width: 20%; height: auto;">]
[![Login Button](./media/login-button.png)](https://element.irregularchat.com)


[https://static.element.io/pdfs/element-user-guide.pdf Official Element User Guide]
[Official Element User Guide](https://static.element.io/pdfs/element-user-guide.pdf)


<span id="navigating-element-messenger"></span>
<span id="navigating-element-messenger"></span>
== Navigating Element Messenger ==
== Navigating Element Messenger ==


When selecting a Matrix link, choose “Continue using Element” for a smooth experience.
When selecting a Matrix link, choose **“Continue using Element”** for a smooth experience.


<span id="get-started"></span>
<span id="get-started"></span>
Line 49: Line 48:
==== Logging In ====
==== Logging In ====


'' Ensure you are logged out from any other matrix accounts, or use a separate client like Fluffy Chat.
**Ensure you are logged out from any other Matrix accounts, or use a separate client like Fluffy Chat.**
 
# **Download and Install Element**: Available on [Desktop and Mobile](https://element.io/download).
# **Configure and Login**:
  # Navigate to [Matrix Chat](https://matrix.irregularchat.com) or directly open the Element App.
  # Select **“I already have an account”** or **“Login”**.
  # Set the Homeserver to `<code>matrix.irregularchat.com</code>` without adding “HTTPS://”.
  # Follow prompts to update the homeserver. Login buttons will appear afterward.
# **Account Setup**:
  # Choose **“IrregularChat SSO”** or the Puzzle Piece Login 🧩.
  # You may ignore any upgrade notices.


= '''Download and Install Element''': Available on [https://element.io/download Desktop and Mobile]. =
==== Security Setup ====
= '''Configure and Login''': =
#'' Navigate to https://matrix.irregularchat.com or directly open the Element App.
#'' Select “I already have an account” or “Login”.
#'' Set the Homeserver to <code>matrix.irregularchat.com</code> without adding “HTTPS://”.
#'' Follow prompts to update the homeserver. Login buttons will appear afterward.
= '''Account Setup''': =
#'' Choose “IrregularChat SSO” or the Puzzle Piece Login 🧩.
#'' You may ignore any upgrade notices. #### Security Setup


<ul>
# **Secure Your Account**:
<li>'''Secure Your Account''':
  1. **Security Phrase**: Create a security phrase and store it in a password manager. [Cross signing guide With Pictures](https://ems-docs.element.io/books/element-cloud-documentation/page/set-up-cross-signing).
<ol style="list-style-type: decimal;">
  2. **Cross-Device Signing**: Enable if using multiple devices to maintain security across all. Navigate to **Settings** **Security & Privacy** **Cryptography**.
<li>'''Security Phrase''': Create a security phrase and store your security phrase and key in a password manager. [https://ems-docs.element.io/books/element-cloud-documentation/page/set-up-cross-signing Cross signing guide With Pictures]</li>
  3. If you didn’t set a recovery key the first time, reset your cross-device signing with this [guide](https://ems-docs.element.io/books/element-cloud-documentation/page/reset-cross-signing).
<li>'''Cross-Device Signing''': Enable if using multiple devices to maintain security across all. <code>Cross-Signing</code> in <code>Settings</code> <code>Security &amp; Privacy</code> <code>Cryptography</code>.</li></ol>
  4. Avoid setting restrictions on sending encrypted messages to unverified sessions. Do NOT enable **Never send encrypted messages to unverified sessions from this session**.


<ul>
==== Joining Spaces ====
<li>If you didn’t set a recovery key the first time, reset your cross-device signing with this [https://ems-docs.element.io/books/element-cloud-documentation/page/reset-cross-signing guide]</li></ul>


<ol start="3" style="list-style-type: decimal;">
# **Join the Conversation**: Enter the Irregular Chat [Public Entrance Space](http://url.irregular.chat/matrix-public).
<li>Avoid setting restrictions on sending encrypted messages to unverified sessions. Do NOT enable <code>Never send encrypted messages to unverified sessions from this session</code></li></ol>
# **Direct message one of the admins to be added to additional chats**:
</li></ul>
  # [@sac](https://matrix.to/#/@sac:irregularchat.com)
  # [@asymmetricfox](https://matrix.to/#/@asymmetricfox:irregularchat.com)
  # [@dog142g](https://matrix.to/#/@dog142g:irregularchat.com)
  # [@jumson](https://matrix.to/#/@jumson:irregularchat.com)
# **Accept Invites**: You should receive invites to the [Main Space](https://matrix.to/#/!OcvzfbMBIgiwxTDcwY:irregularchat.com?via=irregularchat.com) (Without the invite, these links will not work).


<span id="joining-spaces"></span>
**On the bottom of your screen**, select the icon resembling 4 boxes.<br />
==== Joining Spaces ====
Go to the **“All Chats”** tab to see your invitations.<br />
Select the **“>”** within spaces to see additional spaces and rooms.
 
# **Enter Spaces**:
  **On the bottom of your screen**, select the notepad icon.<br />
  Select **browse spaces**.
 
==== Customize Your Experience ====
 
# **Personalize Your Nickname**: Use `<code>/myroomnick NewUsernameHere</code>` in each room to set a unique nickname.
# **Customize Notifications**: Go to **Settings** → **Notifications** → **Custom** to set custom notification keywords.
# **Spaces and Rooms**: When added to the Irregular Chat Space, look for the four (4) boxes to reveal the spaces and rooms within the Irregular Chat Space.
# **Bots and Easter Eggs**: Bots will assist with welcome messages and when you post social or news links.
 
**Inside Jokes**: If you have been in the community for a while, you will know that some running jokes or phrases typically produce a response. Now, it is automated.
 
**Social Link Proxy**: Twitter, Instagram, and TikTok links will receive a proxy or server download.


= '''Join the Conversation''': Enter the Irregular Chat [http://url.irregular.chat/matrix-public Public Entrance Space] =
Additional sections are from the [Official Element User Guide](https://static.element.io/pdfs/element-user-guide.pdf).
= Direct message one of the admins to be added to additional chats: =
#'' [https://matrix.to/#/@sac:irregularchat.com @sac]
#'' [https://matrix.to/#/@asymmetricfox:irregularchat.com @asymmetricfox]
#'' [https://matrix.to/#/@dog142g:irregularchat.com @dog142g]
#'' [https://matrix.to/#/@jumson:irregularchat.com @jumson]
= Accept Invites: You should receive invites to the [https://matrix.to/#/!OcvzfbMBIgiwxTDcwY:irregularchat.com?via=irregularchat.com Main Space] (Without the invite, these links will not work) =
== On the bottom of your screen, select the icon resembling 4 boxes.<br /> ==


== Go to the “All Chats” tab to see your invitations ==
==== Secure Backup - Encryption Keys / Security Phrase ====
== Select the “&gt;” within spaces to see additional spaces and rooms. ==
= Enter Spaces: =
== On the bottom of your screen, select the notepad icon ==
== Select browse spaces #### Customize Your Experience ==
= '''Personalize Your Nickname''': Use <code>/myroomnick NewUsernameHere</code> in each room to set a unique nickname. =
= '''Customize Notifications''': Go to <code>Settings &gt; Notifications &gt; Custom</code> to set custom notification keywords. =
= '''Spaces and Rooms''': When added to the Irregular Chat Space, look for the four (4) boxes to reveal the spaces and rooms within the Irregular Chat Space. =
= '''Bots and Easter Eggs:''' Bots will be helping you with welcome messages but will also help when you post social or news links. =
== Inside Jokes: If you have been in the community for a while, you will know that some running jokes or phrases typically produce a response. Now, it is automated. ==
== Social Link Proxy: Twitter, Instagram, and TikTok links will receive a proxy or server download. ==


Additional sections are from the [https://static.element.io/pdfs/element-user-guide.pdf Official Element User Guide] #### Secure Backup - Encryption Keys / Security Phrase [https://ems-docs.element.io/books/element-cloud-documentation/page/set-up-cross-signing Source With Pictures] [[Secure-backup-guide.png|Secure Backup]]
[Secure Backup](https://ems-docs.element.io/books/element-cloud-documentation/page/set-up-cross-signing) [[Secure-backup-guide.png|Secure Backup]]


<span id="device-verification"></span>
<span id="device-verification"></span>
==== Device Verification ====
==== Device Verification ====


[[Device-Verification-Guide.png|Device Verification]] #### Threads [[thread-guide.png|Thread Guide]]) #### Spaces and Rooms Spaces are
[[Device-Verification-Guide.png|Device Verification]]
 
==== Threads ====
 
[[thread-guide.png|Thread Guide]]
 
==== Spaces and Rooms ====


<div class="figure">
<div class="figure">
[[spaces-guide.png|Space Guide]]
[[spaces-guide.png|Space Guide]]
</div>


</div>
<span id="notifications"></span>
<span id="notifications"></span>
==== Notifications ====
==== Notifications ====


<div class="figure">
<div class="figure">
[[notification-guide.png|Notification Guide]]
[[notification-guide.png|Notification Guide]]
</div>


</div>
<span id="additional-tips"></span>
<span id="additional-tips"></span>
=== Additional Tips 🚨 ===
=== Additional Tips 🚨 ===


Prioritize Your Privacy: Enjoy confidential conversations with default end-to-end encryption, cross-signed device verification, and decentralization, allowing you the autonomy to choose your data’s residence. Create an account without divulging your phone number for added privacy and security.
**Prioritize Your Privacy**: Enjoy confidential conversations with default end-to-end encryption, cross-signed device verification, and decentralization, allowing you the autonomy to choose your data’s residence. Create an account without divulging your phone number for added privacy and security.


Stay Updated: Keep abreast of known vulnerabilities and update your IrregularChat Matrix Server regularly for optimal security. The server and the client are updated automatically. Please keep your element app up to date.
**Stay Updated**: Keep abreast of known vulnerabilities and update your IrregularChat Matrix Server regularly for optimal security. The server and the client are updated automatically. Please keep your Element app up to date.


{| class="wikitable"
{| class="wikitable"
Line 155: Line 162:
| 1.41.0
| 1.41.0
| Unauthorized access to membership (list of members, with their display names) of a room
| Unauthorized access to membership (list of members, with their display names) of a room
| Rooms with <code>shared</code> history visibility
| Rooms with `<code>shared</code>` history visibility
|-
|-
| CVE-2021-32659
| CVE-2021-32659
Line 172: Line 179:
| Synapse before version 1.33.2
| Synapse before version 1.33.2
|}
|}


-----
-----
Line 179: Line 185:
== References 📚 ==
== References 📚 ==


'' [https://element.io/personal Element Website]
# [Element Website](https://element.io/personal)
 
[[Category: Secure Communication]]
[[Category:DFP]]
[[Category: Cybersecurity]]
[[Category:Purple Team]]
[[Category: Blue Team]]
[[Category: Community Guides]]

Revision as of 02:02, 10 September 2024

🚀 Exploring Element Messenger

Welcome to Element Messenger, a powerful Matrix client designed for seamless communication. This guide will help you navigate its features and start your journey with Element efficiently.

What Makes Element Unique? 🌟

Element stands out due to its robust features tailored for group communications:

  1. **🕵️ Anonymity**: Sign up with just a username; no phone number required.
  2. **🌐 Accessibility**: Accessible on NIPR via the web. Self-hosting may be required for enhanced privacy.
  3. **📣 Custom Notifications**: Set up alerts for specific keywords to stay focused on relevant discussions.
  4. **💬 Organized Chats**: Utilize threads to keep conversations streamlined and organized.

Explore the capabilities of Element on [Matrix Chat](https://matrix.irregularchat.com). While Matrix and Element are often used interchangeably, numerous clients are available across different platforms.

Essential Resources

  1. [Official Element User Guide](https://static.element.io/pdfs/element-user-guide.pdf)
  2. [Matrix on Wikipedia](https://en.wikipedia.org/wiki/Matrix_(protocol))
  3. [Learn More About Matrix](https://matrix.org/docs/chat_basics/matrix-for-im/)
  4. [Deep Dive Into Matrix Protocol](https://nebuchadnezzar-megolm.github.io/static/paper.pdf)

📥 **[Download Element Messenger](https://element.io/download)** available for Desktop, Android, iOS, and Web.

Using Matrix with the Irregular Chat Login 🔑

[![Login Button](./media/login-button.png)](https://element.irregularchat.com)

[Official Element User Guide](https://static.element.io/pdfs/element-user-guide.pdf)

Navigating Element Messenger

When selecting a Matrix link, choose **“Continue using Element”** for a smooth experience.

Get Started

Logging In

    • Ensure you are logged out from any other Matrix accounts, or use a separate client like Fluffy Chat.**
  1. **Download and Install Element**: Available on [Desktop and Mobile](https://element.io/download).
  2. **Configure and Login**:
 # Navigate to [Matrix Chat](https://matrix.irregularchat.com) or directly open the Element App.
 # Select **“I already have an account”** or **“Login”**.
 # Set the Homeserver to `matrix.irregularchat.com` without adding “HTTPS://”.
 # Follow prompts to update the homeserver. Login buttons will appear afterward.
  1. **Account Setup**:
 # Choose **“IrregularChat SSO”** or the Puzzle Piece Login 🧩.
 # You may ignore any upgrade notices.

Security Setup

  1. **Secure Your Account**:
 1. **Security Phrase**: Create a security phrase and store it in a password manager. [Cross signing guide With Pictures](https://ems-docs.element.io/books/element-cloud-documentation/page/set-up-cross-signing).
 2. **Cross-Device Signing**: Enable if using multiple devices to maintain security across all. Navigate to **Settings** → **Security & Privacy** → **Cryptography**.
 3. If you didn’t set a recovery key the first time, reset your cross-device signing with this [guide](https://ems-docs.element.io/books/element-cloud-documentation/page/reset-cross-signing).
 4. Avoid setting restrictions on sending encrypted messages to unverified sessions. Do NOT enable **Never send encrypted messages to unverified sessions from this session**.

Joining Spaces

  1. **Join the Conversation**: Enter the Irregular Chat [Public Entrance Space](http://url.irregular.chat/matrix-public).
  2. **Direct message one of the admins to be added to additional chats**:
 # [@sac](https://matrix.to/#/@sac:irregularchat.com)
 # [@asymmetricfox](https://matrix.to/#/@asymmetricfox:irregularchat.com)
 # [@dog142g](https://matrix.to/#/@dog142g:irregularchat.com)
 # [@jumson](https://matrix.to/#/@jumson:irregularchat.com)
  1. **Accept Invites**: You should receive invites to the [Main Space](https://matrix.to/#/!OcvzfbMBIgiwxTDcwY:irregularchat.com?via=irregularchat.com) (Without the invite, these links will not work).
    • On the bottom of your screen**, select the icon resembling 4 boxes.

Go to the **“All Chats”** tab to see your invitations.
Select the **“>”** within spaces to see additional spaces and rooms.

  1. **Enter Spaces**:
 **On the bottom of your screen**, select the notepad icon.
Select **browse spaces**.

Customize Your Experience

  1. **Personalize Your Nickname**: Use `/myroomnick NewUsernameHere` in each room to set a unique nickname.
  2. **Customize Notifications**: Go to **Settings** → **Notifications** → **Custom** to set custom notification keywords.
  3. **Spaces and Rooms**: When added to the Irregular Chat Space, look for the four (4) boxes to reveal the spaces and rooms within the Irregular Chat Space.
  4. **Bots and Easter Eggs**: Bots will assist with welcome messages and when you post social or news links.
    • Inside Jokes**: If you have been in the community for a while, you will know that some running jokes or phrases typically produce a response. Now, it is automated.
    • Social Link Proxy**: Twitter, Instagram, and TikTok links will receive a proxy or server download.

Additional sections are from the [Official Element User Guide](https://static.element.io/pdfs/element-user-guide.pdf).

Secure Backup - Encryption Keys / Security Phrase

[Secure Backup](https://ems-docs.element.io/books/element-cloud-documentation/page/set-up-cross-signing) Secure Backup

Device Verification

Device Verification

Threads

Thread Guide

Spaces and Rooms

Notifications

Additional Tips 🚨

    • Prioritize Your Privacy**: Enjoy confidential conversations with default end-to-end encryption, cross-signed device verification, and decentralization, allowing you the autonomy to choose your data’s residence. Create an account without divulging your phone number for added privacy and security.
    • Stay Updated**: Keep abreast of known vulnerabilities and update your IrregularChat Matrix Server regularly for optimal security. The server and the client are updated automatically. Please keep your Element app up to date.
CVE Version Patched Brief Description Part Vulnerable
CVE-2022-31052 1.61.1 Stack exhaustion in Synapse due to unbounded recursion URL previews of some web pages
CVE-2022-23597 1.9.7 Remote program execution bug with user interaction Element Desktop before 1.9.7
CVE-2021-41281 1.47.1 File download from a remote server into an arbitrary directory Synapse instances with the media repository enabled
CVE-2021-39163 1.41.0 Unauthorized access to name, avatar, topic, and number of members of a room Homeservers where the vulnerable homeserver is in the room, and untrusted users are permitted to create groups
CVE-2021-39164 1.41.0 Unauthorized access to membership (list of members, with their display names) of a room Rooms with `shared` history visibility
CVE-2021-32659 2.6.1 Unbridging current room and bridging into target room without verifying predecessor field Bridges with room upgrade handling turned on
CVE-2021-32622 3.21.0 Execution of scripts embedded in an uploaded file through local file preview File upload preview before version 3.21.0
CVE-2021-29471 1.33.2 Denial-of-service attack due to poor performance in the matching engine Synapse before version 1.33.2

References 📚

  1. [Element Website](https://element.io/personal)