Live data from Hacker News

EU Commission to staff: Switch to Signal messaging app

politico.eu

31–40 of 289 posts

Re: EU Commission to staff: Switch to Signal messaging app

#31
post #18
post #7

As an EU citizen I think that's a great decision.

Is there no open source or European alternative? Just keep relying on some Californian dude that insist i give him my and my friends phone numbers? And harass me so i give him more info to “personalize my profile” !?

Well they could use xmpp with omemo.

Re: EU Commission to staff: Switch to Signal messaging app

#32
post #29

Earlier quoted context omitted.

I don't think so. Signal might be open source but the servers are still run in the USA and thus are subject to the US "legal system" (which in turn is subject to the mood of its president).

Signal servers only know who talked to whom, but otherwise are physically not able to see even a smattering of the contents of the communication. Correction: The signal servers don't even have that bit of metadata. See [1], they only store the last time that a user connected to the server. [1] https://en.wikipedia.org/wiki/Signal_(software)#Servers

Can one really trust they don't store more if they physicaly have the information at one point in time ? Or possibly their upstream connectivity provider could do that metadata scrapping.

Re: EU Commission to staff: Switch to Signal messaging app

#33
post #19

Earlier quoted context omitted.

France developed their own matrix protocol based network called tchap. Great idea for a nation that wants to stay independent in an increasingly american/chinese tech dependent world.

Ah yes, I'd forgotten about that - https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-...

To be fair, the vulnerability was fixed quickly. And in the end it improved the security of Matrix and the governement application. I prefer this to a closed-source application developed internally, without communication on security vulnerabilities.

Re: EU Commission to staff: Switch to Signal messaging app

#34
post #19

Earlier quoted context omitted.

France developed their own matrix protocol based network called tchap. Great idea for a nation that wants to stay independent in an increasingly american/chinese tech dependent world.

Ah yes, I'd forgotten about that - https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-...

Interesting read. Nice trick with bypassing email domain restriction.

Re: EU Commission to staff: Switch to Signal messaging app

#36
post #28

The EU budget is 148 Billion Euros. Surely, if they have a requirement for a secure communication app, they have the wherewithal to build one for their needs, that EU citizens and others could then use if they so chose? Essential knowledge is definitely public. This is not about 'Signal' it's about why governments can't/won't deliver on so many issues they themselves deem to be very materially important to them, part…

EU projects are often a bit of a mess; design by committee taken to the extreme, with each committee member being a nation.

Re: EU Commission to staff: Switch to Signal messaging app

#37
post #32
post #29

Earlier quoted context omitted.

Signal servers only know who talked to whom, but otherwise are physically not able to see even a smattering of the contents of the communication. Correction: The signal servers don't even have that bit of metadata. See [1], they only store the last time that a user connected to the server. [1] https://en.wikipedia.org/wiki/Signal_(software)#Servers

Can one really trust they don't store more if they physicaly have the information at one point in time ? Or possibly their upstream connectivity provider could do that metadata scrapping.

I will link to this each and every time this comes up:

https://signal.org/bigbrother/eastern-virginia-grand-jury/

Signal turned over everything they had on this user (which was two time stamps: user creation and last access), and fought the gag order to be able to publish the subpoena and the response. Signal would have to be pretty stupid to lie to a federal court.

Think what you want, but Signal doesn’t have any metadata to turn over.

Re: EU Commission to staff: Switch to Signal messaging app

#38
post #28

The EU budget is 148 Billion Euros. Surely, if they have a requirement for a secure communication app, they have the wherewithal to build one for their needs, that EU citizens and others could then use if they so chose? Essential knowledge is definitely public. This is not about 'Signal' it's about why governments can't/won't deliver on so many issues they themselves deem to be very materially important to them, part…

148 Billion Euros might sound large, but in terms of governmental spending it's pretty small (especially on a continental scale) and there, of course, other things competing for this money.

Re: EU Commission to staff: Switch to Signal messaging app

#39
post #30

Earlier quoted context omitted.

France developed their own matrix protocol based network called tchap. Great idea for a nation that wants to stay independent in an increasingly american/chinese tech dependent world.

When the government in Germany does IT projects, they usually burn millions of Euros even for simple projects. And then, years after the planned rollout, the project is still unfinished and no politician wants to touch it anymore. My favorites was the "special email inbox for lawyers". So, I am somewhat hesitant to let the EU develop a chat client.

The Dutch government is also often terrible at managing IT projects. It seems an industry has evolved to game the public procurement rules required by the EU. Those companies just leech money for never-ending IT projects that tend to be over budget, over time, and working poorly.

Re: EU Commission to staff: Switch to Signal messaging app

#40
post #29

Earlier quoted context omitted.

I don't think so. Signal might be open source but the servers are still run in the USA and thus are subject to the US "legal system" (which in turn is subject to the mood of its president).

Signal servers only know who talked to whom, but otherwise are physically not able to see even a smattering of the contents of the communication. Correction: The signal servers don't even have that bit of metadata. See [1], they only store the last time that a user connected to the server. [1] https://en.wikipedia.org/wiki/Signal_(software)#Servers

Even so, by EU rules, I'd expect them to be required to store the data in the EU.
Post reply on HN