Live data from Hacker News

Signal app downloads spike as US protesters seek message encryption

qz.com

81–90 of 367 posts

Re: Signal app downloads spike as US protesters seek message encryption

#81
post #72

Earlier quoted context omitted.

You get voice, video, chat, stickers, files. What more do you want?

my encrypted chats saved across multiple devices

You get that on Signal. I’ve got it on my phone, laptop, and tablet and I see the chats on all of them.

Do you mean message history when setting up a new device? They are working on that, but it’s not so easy to do without storing all your chats with a server side encryption key. Apparently something coming soon though.

Re: Signal app downloads spike as US protesters seek message encryption

#82

I hope one day apps like Signal will be the default for everyone , not just protesters in a time of crisis.

It's my default and over a few years I've pretty much converted everyone in my life except my mom

Sadly, my (65 year old) mum is the only one I managed to convince to use to Signal. All my (mid-30s) friends won't budge from WhatsApp.

Re: Signal app downloads spike as US protesters seek message encryption

#83

Earlier quoted context omitted.

You get voice, video, chat, stickers, files. What more do you want?

For Signal desktop on Linux to not require that I validate my mobile device randomly to read my encrypted messages. If it used GPG then this wouldn't be a problem.

What does this dialog look like? I don’t recall having seen that in my Signal desktop on Linux or Mac.

Re: Signal app downloads spike as US protesters seek message encryption

#84

Earlier quoted context omitted.

You get voice, video, chat, stickers, files. What more do you want?

Bot API

They’re working on support for email based accounts rather than just phone numbers. This will likely open up that possibility.

I’m looking forward to it as well as my only Telegram use case is using it as a notification service for my servers. All my chats are transitioned to Signal.

Re: Signal app downloads spike as US protesters seek message encryption

#85
post #10

Earlier quoted context omitted.

How do you know that the binary you run actually corresponds to the source code you read? EDIT: and would you then also review every commit to make sure nothing bad gets introduced? No, at some point you have to place trust in the vendor, the developers, independent audits, etc.

Determinism. https://tests.reproducible-builds.org/debian/reproducible.ht... We're making great strides into software being completely deterministic. The Bitcoin project for many years has had completely deterministic binaries and a ceremony process for GPG signing the output with many individual parties.

There is https://signal.org/blog/reproducible-android/ but it is not complete.

Re: Signal app downloads spike as US protesters seek message encryption

#86

Earlier quoted context omitted.

will only happen if phone manufactures ship them by default rather than the unsecure by default ones they ship atm. Sounds crazy when I say it outloud...

WhatsApp isn't installed by default AFAIK, but it is one of the first apps installed by millions, if not billions, on their phones. In Korea, Taiwan and Japan, LINE became the de facto IM. In China, WeChat. But ain't sure if these are usually/always preinstalled in those markets. Cheers.

In Korea I think the de facto IM is Kakao, LINE is only third (after FB messager) [0][1].

[0]: https://www.statista.com/statistics/898254/south-korea-most-...

[1]: https://www.quora.com/Which-is-the-most-popular-messaging-ap...

Re: Signal app downloads spike as US protesters seek message encryption

#87

Earlier quoted context omitted.

Signal does a pretty good job at minimizing the metadata it has access to. For example, the app can tell you who of your contacts has Signal installed but the Signal service itself never gets to see your contacts ( https://signal.org/blog/private-contact-discovery/ ).

The problem is that in many countries, one's phone number is already killer metadata: it is linked to your identity, because you cannot purchase a SIM card without showing ID (a copy of which is made and sent to the authorities). Consequently, a repressive state can determine which of its citizens has installed Signal, and merely using an app known for privacy might already be grounds for persecution. Apparently Sign…

Presumably those that need to will use that feature. The value is still there as the only way for someone to find out if you have Signal remains the same: brute force. If people who need to keep their Signal use private are using an identifier not tied to their identity, brute forcing will not be useful.

The uncertainty as to how many would use it is likely why it’s been back burnered for so long, but it shouldn’t impact effectiveness. I realize that you may not have been implying it would though.

Re: Signal app downloads spike as US protesters seek message encryption

#88
post #56

Earlier quoted context omitted.

They give an explanation literally every single time this subject is brought up, but of course on the Internet there's someone who against all possible odds manages to completely ignore years and years of the reasoning being linked to or given by a person at Signal in every single possible thread on Signal possible anywhere on the Internet, but what can you do?

I've asked many times and searched many times and never found a convincing answer. What's the reason?

One is for their private contact discovery system[1] and two because they were trying to promote Signal as a default messenger with iMessage like automatic encryption upgrading. A goal to enable people to adopt it even if all their friends weren’t converted yet.

[1] https://www.signal.org/blog/private-contact-discovery/

Of course, this feature is Android only as iOS doesn’t allow default alternatives.

Re: Signal app downloads spike as US protesters seek message encryption

#89
While I assume Signal is very good at keeping your neighbors and the like out of your business, I feel like the NSA must have some ways of getting in to signal if they want. Like if they have backdoors to get in to iPhones I assume they can replace the binary and get at your info.

Idk after learning about the Snowden revelations I assume every computer is compromised. I mean didn’t x86 have unpatched vulnerabilities for like two decades? It’s really hard for me to imagine that apps like Signal running on iphone or android can offer enough security to keep out the NSA. But I’d be very curious what folks think about that. I’ve told my drug dealer friends “signal is fine for selling weed but if you commit a murder they will probably find a way to get your messages.”

Re: Signal app downloads spike as US protesters seek message encryption

#90
post #56

Earlier quoted context omitted.

They give an explanation literally every single time this subject is brought up, but of course on the Internet there's someone who against all possible odds manages to completely ignore years and years of the reasoning being linked to or given by a person at Signal in every single possible thread on Signal possible anywhere on the Internet, but what can you do?

I've asked many times and searched many times and never found a convincing answer. What's the reason?

https://news.ycombinator.com/item?id=22328856
Post reply on HN