201–210 of 247 posts
Earlier quoted context omitted.
This looks like a really good replacement for Skype, which we currently use to manage communication between remote working team members.
Until it's owner decides to sell it to eBay or MS like he did with Skype.
I'm worried about the freedom of dissenting opinion in civil society from surveillance, not the privacy of my messages. Privacy is something I would easily give up for such freedom. Signal seems to me to one tool in a large profile to maintain freedom of information dissemination and information gathering activity. It seems to me that speaking to a large number of people anonymously is not possible with any of the ex…
Earlier quoted context omitted.
> I think it's time we just admitted that everything we type/tap/say into any device, regardless of how it's being wrapped up in transit, is absolutely and irrepairably insecure and we're not going to be able to fix that anytime soon. We dont have to set the bar that high. Just lower it slightly and we can achieve great success. Can we make the job of NSA and CIA harder? Not necessarily impossible, just to increase t…
I'm not sure there are many ways to make things harder when the complexity of the systems we have even in our pockets make them so very hard/impossible to even observe let alone protect. There are too many places, even on a phone, where anything at all can be hiding and we don't really have any way of ever knowing what's there without stepping through the binaries.. That's even more difficult when we've got dalvik an…
* The "everything is fucked and will never get better" group, which I'd put your message into
* The "everything is fucked but you're not being targetted by Mossad" group - at least these people do threat modelling.
* People who are actively helping journalists in dangerous areas (see my first point)
I agree with lots of things in your message but I don't think it's helpful. Would you say we should drop back to HTTP because there are lots of ways to break HTTPS?
There are people doing fantastic work even on closed platforms like Android and iOS. People are looking in detail at what's running on it - mostly thanks to the jailbreaking and rooting communities. Everything will be OK, it's just going to take a lot longer than you'd like it to.
For anyone wondering - this is an example of an ad posing as an article.
The mere act of using Signal is suspicious. But if usage is universal then that suspicion can not be acted on. The suggestion that the motivation for this article is profit for the NYT or Moxie is quite destructive.
No, that's literally how it works. Media need to sell copy (clicks these days) and companies need to get coverage. And that's perfectly OK if companies are acting ethically and journalists and editors are doing due diligence.
The person that you mention has good connections in the media and uses them to self-promote and promote the tat he sells.
I am really interested why Signal. Why not Telegram? I prefer Telegram over Signal because of much more better UI and rich functionalities i.e. bots. Signal app seems clunky and buggy. That's my 2 cents.
And I would be really interested to know why people are downvoting a perfectly reasonable question.
I'm disappointed that this article doesn't mention iMessage. From what I understand, it's end-to-end encrypted and Apple doesn't have a key.
But we can't audit it because the source code is not available, which makes it a no-go for people that actually care about their privacy.
Earlier quoted context omitted.
> Before I feel comfortable asserting a dissenting opinion in a public forum, I would much rather discuss the subject among my peers where I don't feel I will be immediately eviscerated for a poorly constructed thought. While I certainly emphasize with the anxiety of publicly expressing an unpopular opinion, I believe it is, especially in times like these, your moral duty to endure in spite of the repercussions and s…
This phrase does not mean "All good men should continually natter on". It is also your moral duty to present a cogent argument, lest we drown in a sea of mostly inane babbling and constant infighting, completely burying the points that need to be made. Speaking out matters. So does when, where, and how you speak out. And that is something best discussed privately. I'd have much more to say on how privacy and anonymit…
> This phrase does not mean "All good men should continually natter on". It is also your moral duty to present a cogent argument
What I was trying to say is there will be times where you are not as prepared as you like. It's not about presenting an airtight, cogent argument, it's about having the courage to say something like, "Officer, stop beating the shit out of this guy in a wheelchair. He's clearly isn't resisting and you're being a dick."
There are a lot of people on this thread crapping on Signal for its various flaws and downsides. It's nice to be smarter and more informed than everyone, but for the rest of us we really need advice about what we SHOULD do if we want a baseline amount of privacy from mass surveillance. I'm honestly asking here--I don't have the knowledge that many in this community do about the exact risk of Signal requiring Google P…
The Tox project is specifically designed to meet your usability requirements. There were also forks of Signal which fixed the privacy issues, however Moxie Marlinspike (the founder of Open Whisper Systems) ordered them to cease and desist.
Earlier quoted context omitted.
But, they still expect me to trust the signed binary they send through the App store right? How is that anyway non-proprietary just because there is a Git repo somewhere that may or may not be the same code running on your phone? Can I run a client from the Git repo and still use all of their infrastructure? Until I'm able to do that, it is still their "pinky promise".
> Can I run a client from the Git repo and still use all of their infrastructure? Yes. You can. They describe how in the very repo I linked. Your ardent unwillingness to spend the 30-45 seconds it would take to find this out before spouting unwarranted false criticism is quite strange. Do you have some personal issue with OWS? I really didn't mean to be defending OWS here - I'd much rather see Signal leveraging non-G…
> Yes. You can.
The thing is, lucideer, the "restrictions" on the use of the source code are engineered to raise the barrier to independent use, notably by preventing or discouraging redistribution. This means that only those who are able and willing to compile Android source can run their own binaries. Everyone else has to go with the binaries they distribute which, as the other poster has correctly argued, cannot be independently verified.
> Do you have some personal issue with OWS?
I do not know about him. But I do. Please read on.
> and provided via F-Droid (though I have read their arguments against that w.r.t. performance)
Oh, so it's "performance" this time? It's not something about "updates" like last time¹, or "features", or "metrics"?
Do you really not think, if you go through the discussions, that there's just too many excuses? Does it make sense to you? Do you not get the feeling someone's got something to hide, if you would pardon the pun? :-)
But I tell you what really got in my tits, it was this message: (https://github.com/WhisperSystems/Signal-Android/issues/53#i...)
"Please do not install software from F-Droid. It is an unverified build, exceptionally out of date, and should be considered malware."
You know what? I fucking trust F-Droid. And I for one I am very grateful to everyone who collaborate to make that happen and stand firm in their commitment to open source, and especially to Ciaran, the founder, who gives so much to the community in spite of very challenging family issues (which are publicly known). Top bloke he is.
And then you get some lying, incompetent, manipulative², and possibly delusional individual accuse them of distributing malware. That is seriously not cool.
For those of you unaware, this is the person we are talking about (I suggest you read the comments too): http://www.gandibar.net/post/2010/04/07/The-googlesharingnet...
¹ Cooperative and competent (or at least willing) open source developers can set it up so that F-Droid auto-builds every time you tag a new release. ² And I say this because I'm sure someone will correctly argue that he did not call F-Droid itself malware--that would be too crass even for this guy. He's very careful in choosing his words.
Earlier quoted context omitted.
The mere act of using Signal is suspicious. But if usage is universal then that suspicion can not be acted on. The suggestion that the motivation for this article is profit for the NYT or Moxie is quite destructive.
> The suggestion that the motivation for this article is profit for the NYT or Moxie is quite destructive. No, that's literally how it works. Media need to sell copy (clicks these days) and companies need to get coverage. And that's perfectly OK if companies are acting ethically and journalists and editors are doing due diligence. The person that you mention has good connections in the media and uses them to self-pro…