There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

fubarx ,

As long as they stay away from public ‘channels.’

There lie dragons.

01189998819991197253 ,
@01189998819991197253@infosec.pub avatar

My only gripe with signal, is the use of phone numbers as usernames. Not everyone with whom I want to communicate via signal has a phone number. I understand why they went this route, but wish there was an alternative way.

ikidd ,
@ikidd@lemmy.world avatar

It creeps me the fuck out. I do not get why a service that bills itself as secure needs to know something that can be traced back to my credit card and name. I won’t use Telegram or Signal because of this.

01189998819991197253 ,
@01189998819991197253@infosec.pub avatar

It’s about your posture. Most people who use signal use it to have privacy from governments. They’re not hiding that they use signal, they’re hiding what they write on signal. In this case, using your phone number isn’t a big deal.

Some people, have a tighter posture, which could translate to your position. In that case, something like Briar could fit the bill.

Lastly, security and privacy are not the same thing. Google products are secure, but they are not private. Self hosted sftp, for example, is private, but may not be secure. Signal is definitely secure, at least enough for general and governmental use. So, it seems, is telegram. Signal is more private than telegram in many ways, but it is not the gold standard for privacy (because of its use of phone numbers as usernames), but it is “good enough” for the masses. The balance between good for everyone and zero-knowledge private for everyone is delicate, potentially impossible. Honestly, I don’t know if signal was able to strike that balance perfectly, but they did a much better job than many other services, certainly than those others that are accepted by the masses.

ikidd ,
@ikidd@lemmy.world avatar

But putting a phone number in immediately exposes protesters to association. Sure, Signal can’t give out the contents of messages, but it still has the chain of contact. So if a government gets hold of this record, legally or otherwise, now you have everyone associated to a suspect phone number/person and can start rounding them up.

It’s the complete antithesis of freedom of association when there’s a record of everyone that you’ve contacted. The contents don’t enter into that problem, and I can’t see why they feel the need to keep this as part of their system. It purposely makes it impossible to use this for something like peaceful protest. So, no, it doesn’t give you privacy from governments, because governments that don’t respect freedom of association will use that information to punish dissidents.

I can’t imagine any reason to use phone numbers except to purposefully keep this chain of association for governments to use. Even Facebook doesn’t require this sort of personal proof, and it’s suspicious as hell.

sugar_in_your_tea ,

You can use a username only for finding and adding friends, you only need the phone number to create an account. That’s probably because Signal started as an alternative to Messages (or whatever it was called back then), so you could send SMS if you wanted, or secure messages to friends w/ Signal. The whole point was to be a gentle transition from SMS to private messaging. However, they eventually dropped the SMS feature, but it seems they kept the phone number as username thing.

It kind of sucks, but I think that’s a reasonable limitation since the vast majority of people using this service will have a phone number. You could probably even sign up for a free trial of something (e.g. Google Fi) to sign up for Signal, set up the username, and then drop the phone number service. I don’t know if there are any problems with this, but I don’t think they do anything with your phone number after everything is set up.

01189998819991197253 ,
@01189998819991197253@infosec.pub avatar

Yeah. And I don’t fault them for this route. I just with I could sign up without a phone number. Maybe the username thing is a predecessor to allowing usernam-only registration in the future.

sugar_in_your_tea ,

Yeah, hopefully. It would also be awesome to have a web login so I could access messages and whatnot when using someone else’s computer w/o having to install something.

I don’t know what direction they’re going, but I’m honestly okay with the caveats that currently exist.

01189998819991197253 ,
@01189998819991197253@infosec.pub avatar

Having web logon would mean they would need to hold the decryption key in some form (or have a weak decryption key, your credentials), so, while convenient, I think it would degrade security and possibly privacy. Unless you mean to receive new messages, the way the desktop app works?

Laborer3652 ,

Not if they used WebAssembly to do all the decryption locally.

01189998819991197253 ,
@01189998819991197253@infosec.pub avatar

I can’t tell if you’re joking haha

sugar_in_your_tea ,

Why would they be joking? There’s really not a big difference between how their mobile and desktop apps work and what’s possible in the web. It can fetch the keys from my computer or my phone just like their other apps work, and store the keys and whatnot encrypted in temporary local storage, just like on the phone. WebAssembly could allow them to share the code and retain similar performance.

I honestly don’t see an issue here. If they need help, I’d be happy to lend a hand.

snek ,
@snek@lemmy.world avatar

I’ve been using it for a while and bybdar the biggest issue is how giant the backup file is and how about 3Gb of data were lost because of a signal version mismatch between an old phone I was using and the new one I switched to.

solrize ,

What is signal anyway? I’ve never paid attention to phone apps much. Why isn’t it on F-droid if it’s FOSS? Is it like irc but with encryption? I guess I should look into it.

dubyakay ,

It’s more like WhatsApp or messenger (pick your poison on which one I am referring). Fairly lightweight. No useless features. And I think there’s an F-Droid version, running as Molly.

solrize ,

Interesting, it looks like molly.im has its own f-droid repo, but there is nothing about Molly in the regular f-droid repo. Thanks though. I guess I should look into this a bit more. I’m way out of date with phone stuff.

RecluseRamble ,

Why isn’t it on F-droid if it’s FOSS?

That got me interested and apparently, they fear forks running out of date.

Concerning F-Droid, we already providing an auto-updating APK directly from our site, and we really don’t want forked versions of the app maintained by other parties connecting to our servers. Not only could the users using the forked version have a subpar experience, but the people they’re talking to (using official clients) could also have a subpar experience (for example, an official client could try to send a new kind of message that the fork, having fallen out of date, doesn’t support). I know you say you’d advocate for a build expiry, but you know how things go. Of course you have our full support if you’d like to fork Signal, name it something else, and use your own servers.

While that statement got plenty of thumbs down, I hate to admit that F-Droid is indeed out of date quite often. I currently can’t find a source for this but I once read this has something to do with their signing process.

sugar_in_your_tea , (edited )

Yes, they manually sign every package.

But they could easily have their own F-Droid repository, I have repositories for FUTO apps like Grayjay and their keyboard, Bitwarden, and Newpipe, among others. Those are run by the projects themselves, so they’re in charge of how often they update it, as well as how they sign it. So if they have issues with the “official” F-Droid repositories, they can always host their own. I honestly prefer projects that host their own repos precisely because they should, in theory, update faster.

That said, a self-updating APK is good enough for me. However, I didn’t see an install option easily listed on their website and had to search for “signal android apk” to find the page. It should be listed on the regular install page on their website, next to the link to Google Play. I found three separate pages for getting it for Android, and all three had a link to Google Play and only one had the APK.

Laborer3652 ,

Yeah this is what Bitwarden ended up doing. They didn’t want to be on F-Droid for very similar reasons; eventually they started hosting their own repo and its been gravey ever since. Highly recommend this option.

solrize ,

Hmm, ok, thanks. But I’m kind of tired of version churn: who needs to keep changing a chat program? IRC has been around since the 1980s or so and still works fine.

graphene ,
@graphene@lemm.ee avatar

Wasn’t there some controversy about Signal’s creation being supported by the US government to provide private communications for anti-us-enemy organisation or something? I’m sure I remember it correctly…

graphene ,
@graphene@lemm.ee avatar

theregister.com/…/telegram_ceo_calls_out_rival/

Alleged and mostly bullshit from the Telegram founder it seems.

sailingbythelee ,

This is a very rude question, but on this subject of being lean, I looked up your 990 and you pay yourself less than some of your engineers.

Yes, and our goal is to pay people as close to Silicon Valley’s salaries as possible, so we can recruit very senior people, knowing that we don’t have equity to offer them. We pay engineers very well. [Leans in performatively toward the phone recording the interview.] If anyone’s looking for a job, we pay very, very well.

So, I googled their tax filing out of curiosity. It’s true that Meredith pays herself much less than her engineers, which is great. What I was rather shocked to see is that they pay their software developers enormous salaries. They’re listing developers making over $400,000 per year, with their VP making over $660,000 per year. Now, I’m all for the value-creators making more money than the CEO. I just had no idea that software developers make that kind of coin. I was thinking of donating to Signal, but I’m kind of weirded out by those astronomical salaries.

mosiacmango ,

That’s inline with Silicon valley salaries. Basic houses cost 2mil there, so it’s not completely outrageous.

As an example, openai pays all its engineers 300k flat+500k/yr in some stock based asset. Another example is Netflix, who are notoriously a very fickle employer, but salaries start in the 400k range and go up from there.

sailingbythelee ,

Yes, the article makes the point that Signal needs to compete for talent with the rest of Silicon Valley. I get that. And we’ve all heard about the nearly unfathomable amounts of money that tech companies throw around. When you break it down to individual salaries, though, and see that even normal people in normal jobs are making a million dollars a year between salary and stock… well, I think it really exposes the spectacular wealth inequality that we have allowed to fester. I mean, sure, shelter costs may be high in Silicon Valley, but the cost of other goods remain about the same. A $50,000 truck that an average person in Nebraska might have to save for years to afford is barely a rounding error for folks making a million a year. I’m no economist, but it does seem like there are consequences for this kind of ever-growing wealth inequality.

It is also absurd on its face for a multi-millionaire developer to place a “Donate Now” button in an app and talk about being a non-profit to tug at the heart strings of people who make one-tenth of what the developers are making. It’s feels like Scrooge asking Tiny Tim for a donation.

Anyway, I don’t blame the developers for this absurd situation, and I do appreciate Signal, and Meredith is clearly a cool person who is fighting the good fight against big tech surveillance. But every once in a while an article like this reminds me how deeply fucked up the world is. It seems we are approaching pre-French Revolution levels of economic disparity, and maybe it helps explain why so many working class people are pissed off.

Linktank ,

I mean, how does a free app with no advertising in it make that kind of money?

sugar_in_your_tea ,

Not all SW devs make that kind of money. I don’t live in Silicon Valley, and I make significantly less than that amount. I could probably get a job there making somewhere north of $300k, but my expenses would go through the roof and I’d be stuck in SV traffic all the time, no thank you. I get paid well, but less than half what Signal is paying.

Twinklebreeze ,

I love the idea of signal, and want to use it and invite friends to it. But then I remember I don’t really want to message anyone, and don’t really have friends because I have no interest in messaging people.

nobleshift ,
@nobleshift@lemmy.world avatar

BTW, Moxie has a home made documentary kinda movie out called Hold Fast. It’s about sailing and uh stuff … It’s pretty keen, you should watch it.

Hold Fast

WldFyre ,

“hashtag anarchist yacht club”

Lmfao

kbal ,
@kbal@fedia.io avatar

I wish Signal was developed more openly, more like the linux kernel for a "critical infrastructure" example. I wish it had more features, so it could take the place of something like Slack. I wish it supported interoperability like fedi.

But it's good for what it is and I sure am glad it's around. People who disrespect it don't know what they're talking about.

ninjaturtle ,
@ninjaturtle@lemmy.today avatar

Isn’t matrix more like slack that you are looking for?

paraphrand ,

When it comes to security, I don’t think it’s close at all.

asdfasdfasdf ,

Why not? I thought it had very good security. It’s E2E encrypted and the government of France uses it.

paraphrand ,

Maybe I’m misunderstood. I thought I heard about terrible security implementations relating to matrix servers.

Edit: I think I was remembering this: arstechnica.com/…/matrix-patches-vulnerabilities-…

Looks like I’m mostly wrong.

noughtnaut ,
@noughtnaut@lemmy.world avatar

You know, if you want to replace Slack, look into Mattermost. It’s foss but otherwise pretty much exactly what Slack does so well.

MigratingtoLemmy ,

Time for Molly

Laborer3652 ,

What is Molly?

MigratingtoLemmy ,

Signal fork

Summzashi ,

Nobody is going to use Signal when it lacks so many features. Feels like MSN messenger compared to it’s peers.

Varyk , (edited )

what do you mean? i use it a lot and it works great, photos, videos, phone calls, optional temporary location sharing with friends, and encryption.

what features do you want it to have that it’s lacking?

trailee ,

Don’t forget voice calls! It has some rough edges there (my audio doesn’t always connect successfully, etc), but when it works the codec sounds better than a standard phone call and there’s no mass surveillance. I use it in place of phone calls for all the people in my network who have it, including my immediate family.

Varyk ,

that’s a great point, i use the voice calls daily.

added above.

Valmond ,

And video! Group video too!

vinyl ,

Yea we heavily use it in the army

Varyk , (edited )

very cool, i had no idea.

free, convenient, reliable encryption.

DoucheBagMcSwag ,

I’m guessing they probably want stickers or something

Edit: apparently this is available on signal so I have no fucking idea then

anarchrist ,

Yeah you can even make your own stickers for free

Live_Let_Live ,

My guess is it heavily private and does not have channels

noodlejetski ,

does not have channels

except that it does. you can make a public group with a shareable link, and change permissions so that only the admins can post.

Bob_Robertson_IX ,

Don’t forget, cross-platform!

Varyk ,

i totally forgot, another great point

noodlejetski ,

very weak bait

big_slap ,

https://lemmy.world/pictrs/image/316651a6-0610-4c07-af51-a2349a78c860.jpeg

Lost_My_Mind ,

I liked msn messanger when it was around.

Frozyre ,

That's not a bad thing. Maybe some of us don't want to be cluttered with a lot of things we don't really care for on using. God forbid we go back to simpler days of communication whereas now we've got things like Discord trying to charge people to pay actual money to have fancy little animations for your profile picture.

Is that what you think is missing? Stupid pointless things that make you feel special because you paid money for it when the true attraction should be focused on how much communicating can be efficient and caring about your privacy and security?

skeezix ,

you should probably sit down grampa it’s getting late.

trailee ,

Signal is the best thing going on in tech these days. I’m very glad it’s being led by Meredith Whittaker.

Did you know you can get a cool badge on your profile pic if you’re a recurring donor? $5 a month is far less than the value I get from it, but that’s all it takes for a cool badge (and knowing that you’re doing something active against the awful state of big tech today).

Frozyre ,

Bless the era of technology where Signal and ProtonMail exist.

chemicalwonka ,
@chemicalwonka@discuss.tchncs.de avatar

Signal yes, Proton I have my doubts

Live_Let_Live ,

Like?

noodlejetski ,

like them embracing Bitcoin and “AI”

sunzu2 ,

Embracing is a strong statement... Their core product are their core products.

I_Has_A_Hat ,

deleted_by_moderator

    •
    noodlejetski ,

    I hope the rest of your day is as pleasant as you are.

    I_Has_A_Hat ,

    deleted_by_moderator

    •
    BassTurd ,

    I think yours is the first comment I’ve read that has Proton hesitancy. I’m curious what your reservations are.

    aStonedSanta ,

    I keep hearing they are CIA lmao.

    Zetta ,

    I actually don’t know what people’s hesitancy is, but I’ve seen numerous people say proton is not good, we’ll see if anybody chimes in with a reason.

    forgotaboutlaye ,

    I’ve seen doubt of it’s push to pack products into it’s offering ala Google - however I don’t see that as enough to call it not good.

    It’s also very easy (and suspicious imo) for anyone to call a service not good without any reason to back it up.

    ElegantBiscuit ,

    I see that as offering services that people clearly use and value, and that the bills have to be paid somehow. So as long as proton can deliver the privacy and security features it promises, I personally don’t see anything wrong with providing an alternative when the only other options are built on monetizing your data.

    Frozyre ,

    The one and only critique I'll give to Proton is how they have it where you can have Google e-mails forwarded to you to your Proton address.

    And it's like...why? The entire reason you're going to ProtonMail is to escape Google. Why the hell would you want Google to try and pry into your Proton usage when all you want is to distance yourself from them?

    01189998819991197253 ,
    @01189998819991197253@infosec.pub avatar

    That’s not everyone’s privacy posture. Some people use Proton to hide, some people use it to secure, some for both. If your goal is to secure, google’s antiprivacy isn’t against that.

    I’m with you, though.

    dubyakay ,

    You set up the forwarding in google, not proton. You mark the forwarded emails in your proton mailbox. You forward the emails to your proton account until you changed all the sources that you care about from your google to your proton mailbox. Then you turn off forwarding.

    Google never gets any more data from you except your protonmail address.

    sugar_in_your_tea ,

    It’s really nice for the transition period. I personally forward my email to Tuta, which lets me slowly convert my services to my new address. I have my most important ones switched over now, but I had to switch dozens over (I would do 3-5 at a time, which was a pain).

    I’ll probably leave my gmail forwarding to my Tuta account, just because there’s no way I’m going to go though every single service I have ever used and switch it over, and inevitably some contact will continue using my old email.

    As far as Google goes, all it knows is that it’s getting less and less emails, and that what remains is being forwarded to <email>@tuta.com. But that’s not my main email address though, it’s just the one I set the account up with. I actually use <name>@<custom domain>, and I have a bunch of aliases configured for each type of account (e.g. <name>-banking@<custom domain> for my bank accounts, <name>-bills@<custom domain> for utilities and whatnot, etc). But that’s still not my actual, personal email, which is <name>@<different custom domain>, and I only give that one to my family and friends.

    So in short:

    • gmail -> tuta.com email - all Google knows about
    • random online accounts -> custom domain 1
    • family/friends -> custom domain 2

    If I can convince my SO to switch, I’ll give them an account at custom domain 2 and tell them to only use it for personal contacts, and to have everything else go through their old gmail or a Tuta alias. If I ever decide to switch to Proton, I’d have to transition all of those custom domain 1 emails to some proton aliases (unless I pay for the higher tier), which would be a pain, especially since the main reason I use these custom domains is to make it easier to switch services (e.g. just point my DNS records to the new host).

    linearchaos ,
    @linearchaos@lemmy.world avatar

    Not OP

    There’s not a lot of negative press about them.

    They complied with Swiss government requests to out the IP of a French activist.

    It looks like they’re really doing the best they can.

    MiltownClowns ,

    Correct. They comply with court orders, its a business. People still need to be secure in how they use it, which that guy wasnt. So if you’re attempting to evade the government, use a vpn. All your data is encrypted, where you access it from and your billing information cannot be.

    linearchaos ,
    @linearchaos@lemmy.world avatar

    Do keep in mind proton also runs a VPN he may have been running their VPN and they complied.

    mildlyusedbrain ,

    If he was using their VPN, they wouldn’t have been able to turn that over according to their own site: protonvpn.com/features/no-logs-policy#:~:text=No-….

    sunzu2 ,

    They do have technical capability to do so. I just thing that is stopping then is "our trust"

    Frozyre ,

    True but the guy was the one at fault and Proton had to comply. The French Activist was using ProtonMail e-mail for bad usages which is what it boiled down to. You left out the part where they complied with Swiss government yes but they didn't with the French authorities.

    Yet it still comes down to people's own responsibility. But people love to throw that out the window and expect everything to protect them when they get up in shit.

    ElectroLisa ,
    @ElectroLisa@lemmy.blahaj.zone avatar

    Not OP, I’ve heard criticism of their recent Duo subscription and their bitcoin wallet.

    I use Proton services and my biggest gripe is their mediocre Linux VPN app. No binaries to download/Flatpak, advertised port-forwarding isn’t fully implemented and requires playing around in a terminal, and UI feels less polished than it’s Windows counterpart.

    There’s a community made Flatpak of ProtonVPN though, in case it helps anyone

    sugar_in_your_tea ,

    Honestly, I just use wg-quick to connect to VPNs, and I tested out ProtonVPN and it worked fine with it. I even set up my router to connect to ProtonVPN, so I could have a wifi network that’s always connected to their VPN.

    But I’d really rather not have the same company host my VPN, email, and other stuff, I’d prefer to separate them a bit so no one company has a lot of my data. And something like a VPN really doesn’t benefit from bundling anyway, unless it’s bundled with a browser or something a la Mozilla VPN.

    MigratingtoLemmy ,

    Swiss laws aren’t as tight as a lot of people think.

    I’d like for them to lean more heavily into open source

    sugar_in_your_tea ,

    It’s probably tight enough for your needs. Unless you live in Switzerland or are breaking Swiss law, they’d need a really good reason to send your data anywhere.

    That said, I use Tuta. They have a similar source model (open client, closed server) and are based in Germany, but since they’re an underdog, they have a bit more value and lower costs. I pay €3 and get 3 custom domains and 15 aliases, whereas w/ Proton I pay $4 and get just 1 custom domain and 10 aliases; I can also add people to my plan for €3, instead of upgrading to a Duo for $15 or family for $24. If Proton matched Tuta’s features, I’d probably pay slightly more for the better UX, but I use those features so I’m very hesitant to give that up. I don’t intend to use their VPN or other products, so I’m very much not interested in their higher tiers.

    I do wish their server code was open source and self-hostable. I’d love to use my own storage, but still use their spam filtering and whatnot.

    sunzu2 ,

    How much signal and she spend onnthis shameless self promotion.

    JFC, if anything she is taking signal the wrong way and going the way of mozilla IMHO

    Signal is a good product but there is a lot areas where it can do better... Have gotten any new features over last 5 years? Besides aliases?

    What are they working on?

    Seen interesting discussions about how signal is farming our meta data to the feds, I was clowned a few years back on this hot take. I am very regarded though. Can anyone pitch on this tinfoil?

    Main looking to understand if that is even technically feasible?

    Im_old ,

    (almost) anything is possible with a CIA black fund budget. I’ve moved to Simplex chat and not looked back.

    sunzu2 ,

    I feel that but people can't just move since we need somebody to talk on these super duper 69 layer quantum resistant protocols.

    Looks simolex is gunning for the crown nowadays tho but there other viable contenders baking.

    Once new leader arrives, going to need to tell my group we migrating again 🤕

    Zoot ,
    @Zoot@reddthat.com avatar

    Why? Just stay on Signal. For the time being it is one of the leaders in private communication.

    Though, if you truly need secure private conversations, you would want to move around a lot anyway.

    sunzu2 ,

    For now it is the gold standard but I don't trust the leadership and their PR approach.

    I won't move until I can justify moving my friends over and right now there is no alternative

    helenslunch , (edited )
    @helenslunch@feddit.nl avatar

    Wow, this is truly a hot take.

    How much signal and she spend onnthis shameless self promotion.

    Why would she/they do that? Did you realize they’re a nonprofit?

    if anything she is taking signal the wrong way and going the way of mozilla IMHO

    Oh no, not that awful non-profit Mozilla…?

    Signal is a good product but there is a lot areas where it can do better…

    The same could be said for literally every product.

    Have gotten any new features over last 5 years? Besides aliases?

    Aliases is kind of a big deal. They also added stories which, despite what the internet might have you believe, was one of the most popular feature requests on the Signal message boards for many years. They created the first and only private and secure social media platform in existence.

    Keep in mind everything they do is 10x harder because it has to meet stringent safety and security requirements.

    Check out the handle @SignalUpdateInfo to see a detailed breakdown of added features.

    Seen interesting discussions about how signal is farming our meta data to the feds.

    That’s a bold claim that I assume has some sort of evidence?

    sunzu2 ,

    Does signal meta data allow for signal to time stamp witu who you communicate using their app and servers?

    Side note, PR like that costs about 15k fyi

    helenslunch ,
    @helenslunch@feddit.nl avatar

    Does signal meta data allow for signal to time stamp witu who you communicate using their app and servers?

    No. They use your phone number as your identifier (unfortunately, probably for spam evasion) and the only piece of metadata they keep is the last time that # connected to the server.

    We know this because Signal has disclosed subpoenas publicly.

    Side note

    No its not.

    PR like that costs about 15k fyi

    …and? My question remains.

    sunzu2 ,
    1. @yogthos what you got to say for this one?
    2. Verge doesn't run flulf for free. This is PR 101. But I trust you bro
    helenslunch ,
    @helenslunch@feddit.nl avatar

    Verge doesn’t run flulf for free.

    The Verge makes money the same way almost every modern media publication does; advertising to their readers.

    sunzu2 ,

    Re-read what you wrote... JFC

    This can't be serious

    scytale ,

    They also added stories which, despite what the internet might have you believe, was one of the most popular feature requests on the Signal message boards for many years

    This was weird for me personally. I consider Signal a messaging tool which in my mind is separate from an actual social media app, so it was a bit of a head scratcher for me to see stories as a very popular feature request. I don’t really care about sharing “stories” in that format to my contacts or seeing theirs, but then again that’s just me.

    helenslunch ,
    @helenslunch@feddit.nl avatar

    And I don’t care about what you think about it. If you don’t like it, disable it, and it’ll be like it was never there. Simple as that.

    Like I said before, they created the first and only private and secure social platform. Nothing else like it exists or has existed. Personally I find that super valuable.

    scytale ,

    Lol calm down, no one’s trying to fight you over Signal being the best private messaging platform. I was just sharing that it was weird to me how stories was one of the most sought out features from users.

    helenslunch ,
    @helenslunch@feddit.nl avatar

    And I just don’t understand why so many people feel compelled to share their feelings about it any time it is mentioned.

    sunzu2 ,

    It is the internet and we are on a discussion board lol

    mark3748 ,

    You made a post in an open, public forum and you’re confused why others would like to discuss the things that you posted?

    helenslunch ,
    @helenslunch@feddit.nl avatar

    I don’t understand why people feel the need to derail the discussion every time it is mentioned.

    ThrowawayPermanente ,

    In the future please be sure to get your opinions approved by the comment thread captain before sharing them publicly.

    ABCDE ,

    I was clowned a few years back on this hot take. I am very regarded though. Can anyone pitch on this tinfoil?

    ?

    underwire212 ,

    Yeah idk I’ve read it like 4 times and still struggle to find a coherent thought here.

    deranger ,

    Poster was made fun of in the past for saying Signal gave metadata to the feds. He has a learning disability (regarded = deliberately misspelled R slur). They’re looking for someone else to corroborate the metadata claim.

    That’s my interpretation at least.

    sunzu2 ,

    You sir ain't only a linguist but a regard whisper too!

    Thank you for the service!

    Lost_My_Mind ,

    “Retarded” is not a slur. It’s a medical term. “Idiot” is a slur that roughly means the same thing, though not nearly as far.

    noodlejetski ,

    “Idiot” is a slur that roughly means the same thing

    “idiot”, “moron”, “cretin” and “imbecile” were all medical terms once and described different levels of intellectual disability, but they fell out of use and are now considered offensive. language changes, and context is important.

    CosmicTurtle0 ,

    They did a blog post about how the feds had made a second attempt to get metadata from them and they could only provide two fields of information: the date the account was created and the last time it connected to the service.

    It’s in the public record as well if I’m not mistaken.

    sunzu2 ,

    The issue that if they were under FISA order or some other such shit, legally they would have to say what feds tell them, ie they would not be able to say and we give feds your logs.

    Question is whether they can technically collect the logs which is tinfoil i am following up on.

    Basic opsec thinking, if it is technically feasible, you must assume it is happening. This is game 101.

    So here we are trying to prove a negative but nobody also is able to provide anything beyond, trust signal bro.

    jollyrogue ,

    They probably have turned over logs because legal persuasion, and it sounds like they anticipated that. Moxie has been around the cypherpunk scene for a while, so they knew what they’re doing.

    Plus the paper on the double ratchet algorithm is out there. en.m.wikipedia.org/wiki/Double_Ratchet_Algorithm

    jollyrogue ,

    Signal uses Google Cloud Platform for their servers, for one.

    Then I think it’s something to do with metadata.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines
    •