Disappearing messages for Signal • Hacker News Board

Re: Disappearing messages for Signal

#111

Post by wtbob » Wed, Oct 12, 2016, 4:16 AM UTC

lenish wrote: post #90

wtbob wrote: post #84

Earlier quoted context omitted.

No, hashes generally require twice as many bits in order to avoid birthday attacks — that's why one uses SHA-256 for 128-bit security. 98 bits is still plenty, of course, but it's not 128 bits.

If we're talking about the actual hash signal uses for this value, then sure, but talking about the number of digits displayed isn't even the right thing to care about, since they're using SHA1 for the hash AFAICT: https://github.com/WhisperSystems/Signal-Android/blob/3.0.0/...

SHA1? SHA1 SHA1‽ I'd always thought that OWS had incredibly good crypto — why are they using SHA1? If it's to support relatively short hashes … I just can't even.

There's simply no excuse to choose to use SHA1 in 2016. It's not completely broken, it's probably good enough, but why not just truncate SHA2?

Re: Disappearing messages for Signal

#112

Post by avhon1 » Wed, Oct 12, 2016, 5:06 AM UTC

moosingin3space wrote: post #97

avhon1 wrote: post #16

Earlier quoted context omitted.

I don't think that's the problem that jpt4 is talking about. I believe he is talking about how sometimes a group message will be received 20 times or more, and yet the sender will still see "message not sent" for some recipients.

That is the issue I'm referring to.

How does re-sending the message help? Everybody in the group has already received the message a dozen times or more.

Re: Disappearing messages for Signal

#113

Post by jeeekthrowaway » Wed, Oct 12, 2016, 5:18 AM UTC

1024core wrote: post #100

drew-y wrote: post #67

Earlier quoted context omitted.

It'd also be nice if the iOS or Chrome client had a chat history backup feature like they have on android. This is one of my biggest complaint with messaging apps in general. I'd like to be able to preserve and archive my chat history with people close to me.

What if the person you're chatting with does not want it archived? (I'm not questioning, but wondering what a protocol would be)

You can't trust the client. It's the same fundamental flaw with DRM. If that person does not want it archived, you can make it difficult but not impossible.

Re: Disappearing messages for Signal

#114

Post by thomasville » Wed, Oct 12, 2016, 5:20 AM UTC

subliminalpanda wrote: post #14

mtgx wrote: post #6

Great. One of the most requested features is finally here. I think all that's left now is video calling (on the desktop, too).

I would like to be able to re-register a new number without having to de-activate the account thereby not losing all of my chats.

Is there a way from preventing certain contacts from knowing I'm on Signal? Like, it is embarrassing that Jason from college knows I'm on Signal. I know you guys will disagree and say it is not embarrassing, but it seems that a privacy-focused app would respect this notion. Obviously being a member of certain apps (grindr) can be seen as negative. I think I should be able to Whitelist my contacts.

Re: Disappearing messages for Signal

#115

Post by faktorialas » Wed, Oct 12, 2016, 5:23 AM UTC

subliminalpanda wrote: post #89

geomark wrote: post #79

Earlier quoted context omitted.

Is there a way to export chart history and then import it to the new account?

> Is there a way to export chart history and then import it to the new account? Another feature that I would like to see (Chat backup and restore). If it's there, I can't find it.

This comment says it's unavailable on iOS and Chrome, but there on Android: https://news.ycombinator.com/item?id=12689695

I can back up that Chrome point, unless it has been added in a recent update. On Android, it can do encrypted and plaintext backups - never tested, but I assume they include messages. What else.

Re: Disappearing messages for Signal

#116

Post by newman314 » Wed, Oct 12, 2016, 5:26 AM UTC

StavrosK wrote: post #69

MereKatMoves wrote: post #37

Earlier quoted context omitted.

I love using Signal and will continue to make modest donations, but I would really appreciate an improvement in audio call quality. I still use Silent Circle for calls because it is so tiring to talk when the bitrate is low.

> I still use Silent Circle for calls because it is so tiring to talk when the bitrate is low. To be fair, that's a high bar. Our (SC) phone guys are masters at optimizing audio quality. I would be extremely surprised if any other app (encrypted or not) had significantly better audio quality than Silent Phone.

Can you provide some details as to what SC does differently?

Re: Disappearing messages for Signal

#117

Post by newman314 » Wed, Oct 12, 2016, 5:28 AM UTC

jpt4 wrote: post #5

With all due respect, Open Whisper Systems might ought first consider fixing Signal's multiplicate message problem, especially silent (to the sender) group chat spamming.

Actually, my biggest "bug" is where the recipient uninstalls or switches to a new phone and Signal allows you to keep sending messages to what amounts to the ether before you finally realize that they aren't getting the messages.

Re: Disappearing messages for Signal

#118

Post by faktorialas » Wed, Oct 12, 2016, 5:28 AM UTC

thomasville wrote: post #114

subliminalpanda wrote: post #14

Earlier quoted context omitted.

I would like to be able to re-register a new number without having to de-activate the account thereby not losing all of my chats.

Is there a way from preventing certain contacts from knowing I'm on Signal? Like, it is embarrassing that Jason from college knows I'm on Signal. I know you guys will disagree and say it is not embarrassing, but it seems that a privacy-focused app would respect this notion. Obviously being a member of certain apps (grindr) can be seen as negative. I think I should be able to Whitelist my contacts.

I don't disagree with your general point, but I'm curious, why would having a privacy-focused app be embarassing? I'm curious what kind of attitude you have for it, or what you expect some of your contacts to think of it.

Re: Disappearing messages for Signal

#119

Post by r0muald » Wed, Oct 12, 2016, 5:29 AM UTC

lqdc13 wrote: post #81

_9vpl wrote: post #57

Earlier quoted context omitted.

With the approach that Signal has taken, it doesn't require you to register a username. The app just registers you with the server as a Signal user using your already unique ID - your phone number. While not the most secure and privacy-protecting method, it allows anyone to just install it and start using it as a secure alternative to plaintext SMS.

Regarding SMS - it's not always an alternative to SMS since it uses data. I know data is more popular than SMS in many countries, but when you hit your monthly limit, you want to disable all data. Regarding the simplicity of using a phone number and how it would be very easy for all users - Wickr provides basically the same service, is more popular, but uses usernames instead of phone numbers. The fact that something…

Furthermore, if you are registered with username+ password, I think you will want to have a password recovery method as well, so you're back to giving a phone number or an email address to the server.

Re: Disappearing messages for Signal

#120

Post by newman314 » Wed, Oct 12, 2016, 5:30 AM UTC

I'm not sure I like the UX for the disappearing messages. Having a little hourglass after every message breaks the flow up. I'd rather see the message bubbles be black instead of blue.

It's also not intuitive to tap on a recipient's name to enable disappearing messages.

Lastly, maybe messaging should default to 1 week disappearing messages...