Live data from Hacker News

Looking back at how Signal works

signal.org

11–20 of 301 posts

Re: Looking back at how Signal works

#11

The only reason I don't use Signal is because it still uses your phone number for ID. What is even the point of verifying by number?

it's their negotiation of the bare minimum invasive activity they've decided they must do to give us some threshold of network effects in an otherwise anonymous service

Re: Looking back at how Signal works

#12

The only reason I don't use Signal is because it still uses your phone number for ID. What is even the point of verifying by number?

They are working to remove the cell phone requirement. https://signal.org/blog/signal-pins/

"PINs will also help facilitate new features like addressing that isn’t based exclusively on phone numbers, since the system address book will no longer be a viable way to maintain your network of contacts."

Re: Looking back at how Signal works

#13
post #2

> how we think about concepts like privacy, security, and trust I was disappointed to see that a mobile number is needed and that this number is shown by default in groups. Mobile numbers are much more trackable then email addresses in my opinion. And I do not understand at all why others should be able to see them so easily. So I now prefer Telegram because at least it hides numbers in groups by default.

This is a fair concern, and I hope Signal Addresses it at some point, but Telegram is no replacement. From Telegram's Wikipedia page "The default messages and media use client-server encryption during transit.[19] This data is also encrypted at rest, but can be accessed by Telegram developers, who hold the encryption keys," and "the desktop clients (excluding macOS client) do not feature end-to-end encryption, nor is end-to-end encryption available for groups, supergroups, or channels." In addition, the Telegram server software is proprietary.

Re: Looking back at how Signal works

#14
post #6
post #2

> how we think about concepts like privacy, security, and trust I was disappointed to see that a mobile number is needed and that this number is shown by default in groups. Mobile numbers are much more trackable then email addresses in my opinion. And I do not understand at all why others should be able to see them so easily. So I now prefer Telegram because at least it hides numbers in groups by default.

Burner sim to setup and throw away addresses this concern. Telegram, messages in plaintext on the server? Encryption that isn't open? Yeah telegram is a bit of a non-starter if you have these kinds of concerns as far as I'm aware.

In most European countries you need to submit your ID to get any sort of working SIM card.

Re: Looking back at how Signal works

#15

The only reason I don't use Signal is because it still uses your phone number for ID. What is even the point of verifying by number?

I believe the point was that phone numbers are already used as unique IDs people know intuitively. Essentially make it quick to onboard new users

Thankfully they are moving away from this with the option to use a PIN instead pf phone #. Not sure when that rolls out, but I'm v. excited for it

Re: Looking back at how Signal works

#16
post #6
post #2

> how we think about concepts like privacy, security, and trust I was disappointed to see that a mobile number is needed and that this number is shown by default in groups. Mobile numbers are much more trackable then email addresses in my opinion. And I do not understand at all why others should be able to see them so easily. So I now prefer Telegram because at least it hides numbers in groups by default.

Burner sim to setup and throw away addresses this concern. Telegram, messages in plaintext on the server? Encryption that isn't open? Yeah telegram is a bit of a non-starter if you have these kinds of concerns as far as I'm aware.

Don't you have to keep paying for the sim, otherwise someone else might "steal" your account once your phone number gets reused?

Re: Looking back at how Signal works

#17
What happens to Signal when the EARN It Act passes? I assume that eventually the Apple App Store and Google Play Store will just stop allowing it to be downloaded if they do not add the backdoor in? Is there a workaround that will allow people to use it still? I've heard people mention locating the servers in other countries, but wouldn't the various App stores be bound by US law and still not allow them?

Re: Looking back at how Signal works

#19

What happens to Signal when the EARN It Act passes? I assume that eventually the Apple App Store and Google Play Store will just stop allowing it to be downloaded if they do not add the backdoor in? Is there a workaround that will allow people to use it still? I've heard people mention locating the servers in other countries, but wouldn't the various App stores be bound by US law and still not allow them?

When? Or if?

Re: Looking back at how Signal works

#20
Been a big fan of whisper systems since the redphone project. Great to see them maturing.

However, given the topic title it would have been nice to see some actual documentation on how signal actually works rather than just claims that it doesnt work like the others.

Post reply on HN