Live data from Hacker News

Signal and Giphy

whispersystems.org

21–30 of 125 posts

Re: Signal and Giphy

#21
post #13

Earlier quoted context omitted.

Why? Because lots of people like sending gifs and prefer to use messaging apps that support them. If it's totally useless to you then fine: don't use it.

It clutters the UI with unecessary stuff. Wire also provides such a misfeature. I would rather disable it, but cannot.

You have to specifically click a button to use it. That's a good compromise between jumping through hoops to enable it if opt-in.

Re: Signal and Giphy

#22
post #18

Earlier quoted context omitted.

Except that history has shown us that theoretically secure but feature deficient systems lose out to less ideologically pure systems that provide what users want, leaving the sum total amount of security provided to be less.

EDIT: Deleted the comment because the of attacks in responses, which I can’t respond to due to "Submitting too fast". @dang: If you want users to be able to actually discuss things, allow them to respond to comments attacking them. This is a retarded system.

Basically everything in your comment is wrong.

> The prebuilt Signal APK might in fact be completely malicious, you can’t verify anything.

https://whispersystems.org/blog/reproducible-android/

This is already more then for all other options.

> And as Signal only tries to copy the features WhatsApp and co already have

Thats simply not true. WhatsApp does not support gifs, for example. Signal also has some features that others don't.

> they’ll get exactly the same security with WhatsApp, Telegram or Threema, and exactly the same features.

Telegram is less secure by miles. Threema is less secure by yards. WhatApp is less secure by inches.

> "You can create your own federated server"

Signal has never claimed that you can "federate" the server. They only mentioned that this is a feature that they might work on in the future. Since they have publicly said that they are not gone do so.

Re: Signal and Giphy

#23
That fake video on top is interesting. If they can't even get that right what does it say about their Privacy and Security claims?

Re: Signal and Giphy

#24
post #23

That fake video on top is interesting. If they can't even get that right what does it say about their Privacy and Security claims?

Empirically, absolutely nothing. You can't judge the security of a software based on its marketing material.

Re: Signal and Giphy

#25
post #18

Earlier quoted context omitted.

Except that history has shown us that theoretically secure but feature deficient systems lose out to less ideologically pure systems that provide what users want, leaving the sum total amount of security provided to be less.

EDIT: Deleted the comment because the of attacks in responses, which I can’t respond to due to "Submitting too fast". @dang: If you want users to be able to actually discuss things, allow them to respond to comments attacking them. This is a retarded system.

> you can’t compile your own client from source

According to the docs in the git repo, you can do a `./gradlew build` and there you have it.

> you can’t verify anything

They have docs on reproducible builds[0].

Anyway, I'd say Signal does have more security than WhatsApp because I trust OWS more than I trust WhatsApp/Facebook.

[0] https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...

Re: Signal and Giphy

#26

This is what Canonical did with Amazon searches on Unity, they proxified them.

How is this the same? Canonical proxied every search term you've ever typed to Amazon. In Signal, you have to explicitly click on a button for anything to happen.

Re: Signal and Giphy

#27
Is there a federated and/or self-hosted alternative to Signal with similar privacy and security properties? Even if it supports fewer platforms?

I've been getting more and more interested in running my own (and perhaps my friends') infrastructure, but I haven't found anything better than IRC for chat.

Re: Signal and Giphy

#28
Good

They know that for a bigger adoption they need those usability improvements, at the same time, they make sure additional features don't compromise the security expected from their app

Re: Signal and Giphy

#29

Is there a federated and/or self-hosted alternative to Signal with similar privacy and security properties? Even if it supports fewer platforms? I've been getting more and more interested in running my own (and perhaps my friends') infrastructure, but I haven't found anything better than IRC for chat.

I run a Synapse server (http://matrix.org/) which is federated and works very well. There are many clients but the nicest at the moment is Riot. Full encryption is now available in the Riot webclient and it's coming to the app soon.

Re: Signal and Giphy

#30

Is there a federated and/or self-hosted alternative to Signal with similar privacy and security properties? Even if it supports fewer platforms? I've been getting more and more interested in running my own (and perhaps my friends') infrastructure, but I haven't found anything better than IRC for chat.

> "but I haven't found anything better than IRC for chat"

If IRC was your best bet so far, you might want to have a look at good ol' XMPP aka Jabber. If you're into Android, with Conversations [0] there's a suitable client which supports end-to-end encryption. For other OS there are many other choices with different encryption options. While OTR (Off-The-Record Messaging) might be the most popular one, it unfortunately makes multi-device-support kind of a bumpy experience.

[0] https://conversations.im/

Post reply on HN