Worried About the Privacy of Your Messages? Download Signal

Post by cyberpunk » Thu, Dec 08, 2016, 4:35 PM UTC

veeti wrote: post #16

reacharavindh wrote: post #12

Earlier quoted context omitted.

But, they still expect me to trust the signed binary they send through the App store right? How is that anyway non-proprietary just because there is a Git repo somewhere that may or may not be the same code running on your phone? Can I run a client from the Git repo and still use all of their infrastructure? Until I'm able to do that, it is still their "pinky promise".

https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...

Post by nickik » Thu, Dec 08, 2016, 4:38 PM UTC

cyberpunk wrote: post #17

reacharavindh wrote: post #12

Earlier quoted context omitted.

But, they still expect me to trust the signed binary they send through the App store right? How is that anyway non-proprietary just because there is a Git repo somewhere that may or may not be the same code running on your phone? Can I run a client from the Git repo and still use all of their infrastructure? Until I'm able to do that, it is still their "pinky promise".

Survey says: NOPE. Realistically, the code in that repo probably isn't even everything that would run on your device even provided you built it yourself. Bets on some 'fetch js from somewhere' code in there which could completely unfuck the whole thing which acts as a help screen or something that would be very hard to find... There is literally no way this sort of thing can ever be trusted. Christ, we barely trust P…

Post by unicornporn » Thu, Dec 08, 2016, 4:40 PM UTC

bluesign wrote: post #13

reacharavindh wrote: post #9

Earlier quoted context omitted.

Do you know how Wire makes money to sustain what they are doing? Don't want to invest my time into something that will eventually sell out and do that opposite of what they stand for today.

Last time i checked they have no revenue possibility. So I decided to skip, I am curious on this too

Post by cyberpunk » Thu, Dec 08, 2016, 4:42 PM UTC

dublinben wrote: post #24

cyberpunk wrote: post #21

Earlier quoted context omitted.

And so? You're still trusting them and the various libs they're using to protect you... Did you read the code? Did you understand it? Me neither. How can a bit of software like this obtain any kind of reputation whereas we barely trust openssl anymore is fucking beyond my understanding.........

This criticism applies equally to every piece of software you haven't written yourself. You have to trust someone at some point. OWS has demonstrated that they are more trustworthy than their competitors.

Post by reacharavindh » Thu, Dec 08, 2016, 4:46 PM UTC

veeti wrote: post #16

reacharavindh wrote: post #12

Earlier quoted context omitted.

But, they still expect me to trust the signed binary they send through the App store right? How is that anyway non-proprietary just because there is a Git repo somewhere that may or may not be the same code running on your phone? Can I run a client from the Git repo and still use all of their infrastructure? Until I'm able to do that, it is still their "pinky promise".

https://github.com/WhisperSystems/Signal-Android/wiki/Reprod...