431–440 of 750 posts
For some Signal related education, listen to the Security Now! podcast from 2016 - Steve Gibson dives into the protocol underlying Signal, "Open Whisper Systems".
Earlier quoted context omitted.
> USA-based metadata processing Do you mean that they have servers in the US? US based company? They don't leak metadata, that's the difference between Signal and Telegram/WhatsApp. If the encryption is good it shouldn't matter what country the company or servers is in. That's kinda the point of encryption...
You connect to AWS when you connect to Signal. That means the USA is the government with the most influence on Amazon to have taps placed or connection logs handed over. They can do sealed sender stuff all they like, but when 10.0.1.1 sends a 17-byte message and the server then sends a 17-byte message to 10.0.2.1, and a minute later 10.0.2.1 submits something to the server of 48 bytes and then 48 bytes are forwarded…
> They can do sealed sender stuff all they like, but when 10.0.1.1 sends a 17-byte message and the server then sends a 17-byte message to 10.0.2.1, and a minute later 10.0.2.1 submits something to the server of 48 bytes and then 48 bytes are forwarded to 10.0.1.1... traffic analysis based on a tap of a Signal server isn't rocket science.
True, though with a bazillion connections going in and out of Signal's AWS instances every minute and additional domain fronting by AWS, the NSA would probably have to be inside the AWS datacenter to carry out their traffic analysis and even then it doesn't seem like a triviality to me.
Compare this to someone hosting their own Matrix node (which you're mentioning further down): In this case, it is clear that every message sent to that node has something to do with the node's owner. More generally, reconstructing a social network in a p2p network (without onion routing or anything like that) is much easier than doing this in a centralized network where all messages get routed through a central location. There's a reason why the guys from GNUnet have so far spent two decades on getting p2p right. (Though, of course, anonymity is just one of their concerns and not their only one.)
Earlier quoted context omitted.
> I just donated to Signal after seeing the error banner in the app. I've tried to donate, but none of my 3 cards worked, I got "card rejected error" without any info why and none of banking apps notified me about new transactions.
Same issue here, and I don't use PayPal after they asked me to provide info to Equifax to continue using it. They aren't on liberapay as far as I can see.
I use the Privacy app and generated a merchant specific credit card for Signal. This is the best way I have found to do online transactions. You don't even need to use your actual name or address when making a payment to a merchant since Privacy acts as a proxy for you. https://privacy.com
Earlier quoted context omitted.
The loan is not a loan, its a gift. There was some tax reason it was done this way
Do you understand what the tax play is?
For all of you saying we should switch to Matrix, please outline the user sign up flow in your comment. Be detailed. Your audience is your 50 something aunt who calls her iPad her Facebook.
For all of you saying we should switch to Matrix, please outline the user sign up flow in your comment. Be detailed. Your audience is your 50 something aunt who calls her iPad her Facebook.
Can we please stop it with the sexist/ageist "old lady as a standin for incompetent" tech bro stereotype here? Not really befitting of this place.
Earlier quoted context omitted.
Very good point. People will happily pay 50 pounds a month for an IPhone and thinking nothing of it. But then really struggle to pay a penny for an app that runs in that iPhone. There’s some funny psychology going on.
There is very little to no awareness of what it takes to create software. We, the developers who have released our work for free, have allowed this to happen. It feels like mobbing, heck, we keep reading about other devs mobbing others by opening GitHub issues and demanding new features or bugfixes for software they did not pay for. I really hope that we can do something about raising awareness.
"We have been adding new servers and extra capacity at a record pace every single day this week nonstop, but today exceeded even our most optimistic projections. Millions upon millions of new users are sending a message that privacy matters. We appreciate your patience." https://twitter.com/signalapp/status/1350165610936766464
I just donated to Signal after seeing the error banner in the app. I realised I was more than happy to pay WhatsApp's yearly charge back in the pre-Facebook days (think it was 70p or so?). Figured I could give Signal a few quid every now and then, maybe keep a server up for a few seconds :) Donation link should anyone be interested: https://signal.org/donate/
Signal is being used by at least 10 well-paid medical professionals (group chat) that I know of, and one of them proclaimed today that Signal is owned by Elon Musk (probably because he tweeted about it). I did not care to educate them. And this is in a first world country with a rather wealthy population. Why am I saying this? Users don't give a damn, they expect free things, and they expect things which work. They h…
It's always someone else's job to change the world, eh?
Earlier quoted context omitted.
They've actually said publicly that they're working on making it possible to use Signal without a phone number, via usernames. Here's a recent hint at that: https://twitter.com/signalapp/status/1347248608660185089
Yes, and I acknowledged that in my own post. But it took years to get to the point where they are even talking about upcoming support for this, let alone actually providing it. In the interim, this aspect of great importance to people living in authoritarian regimes was ignored.
They haven't seriously considered that for long. I don't think it's even been a year when they announced this switch for the first time.
Please don't spread this kind of false information. Signal gets enough of that already.