Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Signal app downloads spike as US protesters seek message encryption

qz.com

Post reply on HN
Print view View original

261–270 of 367 posts

Re: Signal app downloads spike as US protesters seek message encryption

#261

Post by app4soft »

josefresco wrote: post #254
AnonC wrote: post #92

The biggest drawback with Signal for protesters is that it exposes the user's phone number to everyone else in groups (just like WhatsApp does). There is no way to even hide the fact that you have an account on Signal. I can add phone numbers by enumeration into my contacts and Signal will show who among my contacts is on it. If the authorities don't use tactics like they did in Hong Kong, the protesters may be safe…

Step 1: Get a virtual phone number. Step 2: Get Signal and register using virtual phone number. Step 3: Protest!

Step 0: Use off-the-grid network.

[0] https://apt.izzysoft.de/fdroid/index/apk/tk.giesecke.disaste...

Re: Signal app downloads spike as US protesters seek message encryption

#262

Post by grandinj »

The thing about using these kinds of tools (IMO) is that it is effectively a giant flag waving at the NSA saying "hey: over here, I'm doing something worth keeping a close eye on!"

And once they get sufficiently interested, they can crack pretty much anything the market can come up with.

So if you're trying to hide stuff - old school is probably best, innocuous code-word language stuff, keep communication to a minimum, leave phone at home, etc, etc.

Re: Signal app downloads spike as US protesters seek message encryption

#263

Post by fauigerzigerk »

lorenzhs wrote: post #251
fauigerzigerk wrote: post #191

Earlier quoted context omitted.

It opens pretty quickly for me, but almost every time it wants to be re-linked to a mobile device. Signal is really annoying with all the things it wants me to do. Re-linking a mobile device. Re-entering a PIN/password for no reason other than to prove that I still know the password. And when I'm finally logged in it shows me a completely useless selection of mostly obsolete contacts.

I think you need to open it at least every other month or so, otherwise it loses the pairing. I've never had to relink a desktop instance under any other circumstances. You can turn off the PIN reminders in Settings → Privacy.

>You can turn off the PIN reminders in Settings → Privacy.

Ah, that's good to know. Thanks!

Re: Signal app downloads spike as US protesters seek message encryption

#264

Post by rem7 »

josefresco wrote: post #258
kome wrote: post #128

Signal exposes the user's phone number, better alternative is to use burner phones or Telegram.

Or use a virtual number.

Can you elaborate on virtual number? Don’t I have to pay for a virtual number that is essentially linked to my credit card... with my name on it. GV also knows who I am.

Re: Signal app downloads spike as US protesters seek message encryption

#265

Post by dastx »

AnonC wrote: post #95
matheusmoreira wrote: post #2

I hope one day apps like Signal will be the default for everyone , not just protesters in a time of crisis.

I don't think that's a great idea until Signal stops exposing the phone number of the user to everyone else (for all the bashing that Telegram gets on cryptography, it has mechanisms to hide one's phone number and even the fact that one has a Telegram account from others).

I disagree. Telegram addresses a different issue from Signal. I see signal as a tool to message people you already know and/or trust, but you do not want a third party to be able to listen in. At the point, it doesn't matter if the other party knows my number or not.

Telegram on the other hand is better for issues like this, where large numbers of people need to communicate anonymously without prying eyes.

They're addressing the same issue for different markets. That's all it is.

Re: Signal app downloads spike as US protesters seek message encryption

#266

Post by josefresco »

rem7 wrote: post #264
josefresco wrote: post #258

Earlier quoted context omitted.

Or use a virtual number.

Can you elaborate on virtual number? Don’t I have to pay for a virtual number that is essentially linked to my credit card... with my name on it. GV also knows who I am.

It depends of course on your specific situation, but Google Voice offers free virtual phone numbers. No credit card, and you can set it up without personally identifying information.

You can easily find others by searching. You can also use pre-paid credit cards if you must pay.

Re: Signal app downloads spike as US protesters seek message encryption

#267

Post by INTPenis »

balladeer wrote: post #195
fsflover wrote: post #174

Earlier quoted context omitted.

Matrix: https://matrix.org/

If UX is the concern then Matrix/Riot may not fare very well.

I've been using the RiotX beta app for android last few weeks and yes it is definitely in beta, some parts just won't work. But basic chatting, joining rooms and communicating with their "fediverse" works just fine and looks very modern.

Re: Signal app downloads spike as US protesters seek message encryption

#268

Post by INTPenis »

0x49d1 wrote: post #214
Evidlo wrote: post #137

Earlier quoted context omitted.

Or an open standard like Matrix

First time hearing about Matrix standard. But in case the clients are maintained by some individuals - why should we trust them that there are no backdoors in their compiled binaries? Seems like a nice project! But probably it will take it's small niche, probably for now it is not wide spreaded, haven't heard any noise about the standard.

The signal server has 10 maintainers out of which 5 are signal employees.

Matrix is 100% open source, has a larger community maintaining it and is federated.

If you're worried about backdoors then you should have more eyes on the code.

Re: Signal app downloads spike as US protesters seek message encryption

#269

Post by anticensor »

input_sh wrote: post #78
gonehome wrote: post #71

Earlier quoted context omitted.

Is Telegram at all trustworthy? I feel like I’ve repeatedly seen on HN that they’re not a good choice for secure messaging (though I don’t remember the specifics around it). Signal and Matrix are the two options I’ve settled on. [Edit]: Looks like the main issues with Telegram are that it doesn't use end to end encryption by default and that they rolled their own encryption protocol that's likely not secure. They als…

Telegram only end-to-end encrypts "secret messages", which I assume are rarely used.

Telegram secret chats allow self-destruct timers and remote retraction of messages.
Post reply on HN