I don't trust Signal (2018)

#1

Post by geophertz » Tue, Aug 11, 2020, 3:46 PM UTC

I don't trust Signal (2018)
drewdevault.com

Re: I don't trust Signal (2018)

#2

Post by bitxbitxbitcoin » Tue, Aug 11, 2020, 3:59 PM UTC

I'd love to hear/see the 2020 reasoning for not being on F-Droid.

Re: I don't trust Signal (2018)

#3

Post by Pick-A-Hill2019 » Tue, Aug 11, 2020, 4:00 PM UTC

Original from 2018, 467 comments https://news.ycombinator.com/item?id=17723973. Not commenting as snark (reposts are ok after all) more to save Dang digging out the link and also to see how many more or less duplicate sentiment comments are made and / or how perceptions have changed.

Re: I don't trust Signal (2018)

#4

Post by 4ad » Tue, Aug 11, 2020, 4:03 PM UTC

After the PIN/Intel SGX debacle, I trust Signal even less.

Re: I don't trust Signal (2018)

#5

Post by Pick-A-Hill2019 » Tue, Aug 11, 2020, 4:08 PM UTC

bitxbitxbitcoin wrote: post #2

I'd love to hear/see the 2020 reasoning for not being on F-Droid.

Not relevant but since F-Droid has been mentioned in the context of it. F-Droid is based in the UK and their accounts are over-due. 'Free' does not exist forever. https://beta.companieshouse.gov.uk/company/08420676

Re: I don't trust Signal (2018)

#6

Post by shakezula » Tue, Aug 11, 2020, 4:10 PM UTC

What's the alternative to Signal then? For iOS users?

Re: I don't trust Signal (2018)

#7

Post by sneak » Tue, Aug 11, 2020, 4:12 PM UTC

I really don’t think OWS has the authority to stop forks from using the Signal servers, any more than YC has the authority to dictate that I use Chrome to view HN.

There is, of course, the vague language of the CFAA, so I’m not sure I’d want to test this theory, but his demands that forks not use the main centralized servers are, in my opinion, unenforceable bluster.

Re: I don't trust Signal (2018)

#8

Post by AnonHP » Tue, Aug 11, 2020, 4:13 PM UTC

4ad wrote: post #4

After the PIN/Intel SGX debacle, I trust Signal even less.

Seems like I missed this a month ago. I'm now catching up from Matthew Green's blog post. [1]

[1]: https://blog.cryptographyengineering.com/2020/07/10/a-few-th...

Re: I don't trust Signal (2018)

#9

Post by sneak » Tue, Aug 11, 2020, 4:14 PM UTC

shakezula wrote: post #6

What's the alternative to Signal then? For iOS users?

There is no alternative that provides the ease of use and privacy guarantees.

I think the OWS/Moxie hate is misplaced. They’re competing with iMessage and WhatsApp and Instagram and Facebook, and Signal is a much better option than all of those.

Let’s be honest: the alternative is that Facebook gets all of our chats in cleartext.

Re: I don't trust Signal (2018)

#10

Post by [deleted] » Tue, Aug 11, 2020, 4:16 PM UTC

[deleted]