Live data from Hacker News

Worried About the Privacy of Your Messages? Download Signal

nytimes.com

111–120 of 247 posts

Re: Worried About the Privacy of Your Messages? Download Signal

#111
Their goal is to reduce government secrecy by making it hard to keep things secret.

You supported this when it was making the other team look bad and you oppose it now. Republicans have taken the opposite view of Wikileaks, and flip-flopped the other way.

At least be honest with yourself a see that your only opinion on the matter is that you don't like the other side.

Re: Worried About the Privacy of Your Messages? Download Signal

#112
post #76
post #54

My friends and I have used GroupMe (which is owned by Skype) for a few years now and some of us wanted to migrate due to privacy. We tried out Signal, but there were some major usability problems in you intend to use it as a "group chat" replacement. My biggest issue with it is that there is no mute feature for iOS. Yes you can turn off notifications at the iOS level, but I want the ability to only have @-mentions to…

I recently switched from Android to iPhone and was pretty surprised by how much lower quality the Signal app is for iPhone than Android. Signal for Android was really amazing, and the switch made me think this could be one reason why so many people seem to speak both highly and poorly of Signal. The iPhone app just unfortunately seems to be way behind the Android app. Not sure why they have prioritized development in…

I think it's because moxie uses Android.

Re: Worried About the Privacy of Your Messages? Download Signal

#113
post #106

Earlier quoted context omitted.

https://github.com/LibreSignal/LibreSignal

Thank you! tl;dr: You can fork the Signal code if you want, but if you do, Moxie Marlinspike asks you to change the app name and run your own servers. The server source code appears to be available at https://github.com/WhisperSystems/Signal-Server , but I've heard it doesn't include the voice component. So, for example, if you think that Signal ought to support a feature like iMessage's "Invisible Ink" ( https://mic…

I didn't realize that open source licenses required the maintainers to run infrastructure for you.

Re: Worried About the Privacy of Your Messages? Download Signal

#114

Earlier quoted context omitted.

I think as long as they are GPL, you can use the infrastructure. https://github.com/WhisperSystems/Signal-Android/issues/282

You can, but moxie will throw a temper tantrum about it. https://github.com/LibreSignal/LibreSignal/issues/37#issueco...

Just read the thread, I am mostly on your side, I understand his point but it is weird you license your code GPL and then try to prevent derivative software to work.

This feels a bit like "bad intention". Alternatively you can choose less liberal license, and then make your derivative product from that (Chromium -> Chrome)

Re: Worried About the Privacy of Your Messages? Download Signal

#115
post #111

Their goal is to reduce government secrecy by making it hard to keep things secret. You supported this when it was making the other team look bad and you oppose it now. Republicans have taken the opposite view of Wikileaks, and flip-flopped the other way. At least be honest with yourself a see that your only opinion on the matter is that you don't like the other side.

1. The actual leaks that WikiLeaks have published have virtually all targetted the Obama administration, so I'm not sure how you suppose the leaks have previously been making the "other team" look bad. By most accounts, Obama and Clinton are on the same "team."

2a. I don't see how you could seriously suggest that WikiLeaks's behavior in this election is no different than what they had done previously.

2b. If you can find me an example when WikiLeaks published stolen emails from people within a presidential campaign, and then published those emails during the campaign for the avowed purpose of influencing the election, I'd be interested to hear it. I'd be even more interested if you could find evidence that I supported it.

3. True, they're clearly trying to reduce government secrecy by making is harder to keep things secret. But what does this have to do with my question, which was how does this help promote free dissent? And I think you're overlooking the fact that they are also undermining private citizens' secrecy, when they see fit to publish their emails.

Re: Worried About the Privacy of Your Messages? Download Signal

#116
post #14

All the privacy solutions on the market are varying degrees of bad (from a privacy/security/freedom perspective), by which I mean they're all flawed in their own ways. Signal requires Google Play Services on Android. That means it's put simply not a privacy messenger. Yes there's crypto, but it's also tied into Whisper Systems' infrastructure, there's no federation. I use Signal reluctantly, and only on IOS. Threema,…

Matrix.org/riot.im has working federation, end-to-end cryptography, works without Google Play and is completely open source.

The encryption is audited, but not yet enabled by default, as there are still some rough edges. But the apps have tremendously improved over the last few weeks alone and I am very happy with it.

Re: Worried About the Privacy of Your Messages? Download Signal

#117
post #14

All the privacy solutions on the market are varying degrees of bad (from a privacy/security/freedom perspective), by which I mean they're all flawed in their own ways. Signal requires Google Play Services on Android. That means it's put simply not a privacy messenger. Yes there's crypto, but it's also tied into Whisper Systems' infrastructure, there's no federation. I use Signal reluctantly, and only on IOS. Threema,…

I agree that decentralization and federation is an important step for security and privacy, reducing the dependence on a signal entity.

That said, based on OWS' writeup on the subpoena they received[1], the only user metadata they collect are the user's phone number(or a hash of it? for identification), that user's last connection date, and the dat etheir account was created.

[1] https://whispersystems.org/bigbrother/eastern-virginia-grand...

Re: Worried About the Privacy of Your Messages? Download Signal

#118
That said, Signal is not perfect. It lacks some features of other messaging apps, like the ability to send stickers.

That this is a deficiency worthy of mention reveals just how different the average person's values about what a messaging app should do are from mine.

Re: Worried About the Privacy of Your Messages? Download Signal

#119
post #113
post #106

Earlier quoted context omitted.

Thank you! tl;dr: You can fork the Signal code if you want, but if you do, Moxie Marlinspike asks you to change the app name and run your own servers. The server source code appears to be available at https://github.com/WhisperSystems/Signal-Server , but I've heard it doesn't include the voice component. So, for example, if you think that Signal ought to support a feature like iMessage's "Invisible Ink" ( https://mic…

I didn't realize that open source licenses required the maintainers to run infrastructure for you.

The big issue with maintenance is if the fork wants to continue using OWS servers and continue being able to communicate with 'normal' Signal users

Re: Worried About the Privacy of Your Messages? Download Signal

#120

There are a lot of people on this thread crapping on Signal for its various flaws and downsides. It's nice to be smarter and more informed than everyone, but for the rest of us we really need advice about what we SHOULD do if we want a baseline amount of privacy from mass surveillance. I'm honestly asking here--I don't have the knowledge that many in this community do about the exact risk of Signal requiring Google P…

The Tox project is specifically designed to meet your usability requirements. There were also forks of Signal which fixed the privacy issues, however Moxie Marlinspike (the founder of Open Whisper Systems) ordered them to cease and desist.

My understanding of the issues with the Signal forks was mainly the inclusion of the word 'Signal' in the name, resulting in brand confusion by more casual users.
Post reply on HN