41–50 of 173 posts
These days you need basically all the message apps anyway unless your circle of friends is super homogenous
Earlier quoted context omitted.
There was a recent issue where Chinese citizens pointed out that IMEs with telemetry enabled could capture what you type into Signal and it didn't warn you or try to mitigate this; the Signal guy ignored them, then dodged them for weeks and told everyone they were harassing him, then a white guy pointed out the same thing and his suggestions were immediately taken up.
And what was the suggestion? The flow of information is (You typing → IME converts key presses into text → Signal receives text) so Signal can't do anything to prevent a malicious IME from sending the text elsewhere. The best they could do is raise users' awareness that Signal won't protect them if there's spyware with privileged access on their device, and that their IME might be such spyware.
IIRC there was also some Android API that could be used in the app to help, but I don't remember what it actually did atm.
Is it really surprising that he would have all of the most popular messaging apps? Facebook’s playbook of copying popular features from apps gaining traction is by no means a secret. I’m not totally convinced by the narrative that Mark doesn’t trust his own tools so he prefers Signal.
Isn’t a bit of a privacy flaw that signal exposes who uses the app by phone number?
Earlier quoted context omitted.
It doesn't seem like you are aware that WhatsApp hired Moxie Marlinspike, the creator of the Signal encryption protocol, to re-implement it for WhatsApp. AFAIK it is still used in WhatsApp today. I will take this moment also to mention that "re-implement" isn't exactly right in that they modified the protocol slightly to allow for someone in control of the administration server to change a user's private key without…
> I will take this moment also to mention that "re-implement" isn't exactly right in that they modified the protocol slightly to allow for someone in control of the administration server to change a user's private key without their knowing, so that the admin can decrypt the E2E communications using the known key. Do you have a source for that claim?
Earlier quoted context omitted.
I’m not totally convinced by the narrative that Mark doesn’t trust his own tools so he prefers Signal. He has tape over the camera of his own computer in Facebook HQ
Everybody should have a shutter over the camera, just to protect from blunders and misclicks. No matter how you trust your software, some malware may want to activate it, especially at a high-value target like Zuckerberg (or Bezos, or Nadella, etc). Alas, microphones are not as easy to deactivate.
Isn’t a bit of a privacy flaw that signal exposes who uses the app by phone number?
yes. That is the point.Earlier quoted context omitted.
https://app.wire.com already has that feature and it is based on signal protocol.
Wire uses MLS [1], it has nothing to do with the Signal protocol. [1]: https://messaginglayersecurity.rocks/