Earlier quoted context omitted.
It says something about Play Billing being used specifically to mitigate spam? I understand using play payments initially but hopefully eventually there's a way to buy an account without going through google.
Add ability to pay for a signal login. https://github.com/signalapp/Signal-Android/commit/7da3357b5...
Registration without a phone number on Signal will use zero-knowledge proofs
31–40 of 206 posts
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#32Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
What about their built-in cryptocurrency? It's a perfect use for it. They could require payment post-install yet before message can be sent.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#33Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
For an org that pretends to care about privacy you'd imagine there'd be a way to avoid, you know, the biggest privacy invader on the planet.
Just allow monero payments or something. Alongside Google play for the sheep that want to use that.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#34Re: Registration without a phone number on Signal will use zero-knowledge proofs
#35Lots of discussion at that link, but what's the bottom line? Can you register without a phone number yet?
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#36Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
Ugh wtf so I need a Google account on Android? That's not going to happen. For an org that pretends to care about privacy you'd imagine there'd be a way to avoid, you know, the biggest privacy invader on the planet. Just allow monero payments or something. Alongside Google play for the sheep that want to use that.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#37you can't wave your hands, say "zero knowledge", and be private. this is too little information to be useful
however signal has an obscene fondness for TEEs (secure enclaves) so they may actually be doing something stupid here which will require trust beyond the ZKP.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#38Earlier quoted context omitted.
I was using Silence from F-Droid for a while back in the day because of these issues, but the lack of interop and needing to make everyone move again soured me on the whole thing. I would rather just get people on XMPP or Matrix and not use some sketchy phone-first app at all. For SMS I use Fossify Messages, which I think was a fork of QKSMS. I don't use SMS as primary or sensitive comms, only as needed. Same as emai…
I really liked silence. I stopped using it when f-droid said the source code was no longer available. Fossify messages is the best replacement I've found. (I dont bother with encrypted messenging apps. I prefer to assume that anything I do on my phone is doubleplus unprivate. If I want privacy, I head over to my computer.)
Competition is Qubes but that has usability issues and does not have good hardware security.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#39Earlier quoted context omitted.
What about their built-in cryptocurrency? It's a perfect use for it. They could require payment post-install yet before message can be sent.
Nobody uses that and I think it was pre-mined. They should have implemented Monero but the UX isn't there. Maybe a Monero light wallet server run by Signal. They probably avoided Monero to not attract the additional scrutiny. They don't even accept donations in Monero.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#40Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
Ugh wtf so I need a Google account on Android? That's not going to happen. For an org that pretends to care about privacy you'd imagine there'd be a way to avoid, you know, the biggest privacy invader on the planet. Just allow monero payments or something. Alongside Google play for the sheep that want to use that.