Live data from Hacker News

Registration without a phone number on Signal will use zero-knowledge proofs

community.signalusers.org

31–40 of 206 posts

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#31

Earlier quoted context omitted.

It says something about Play Billing being used specifically to mitigate spam? I understand using play payments initially but hopefully eventually there's a way to buy an account without going through google.

Add ability to pay for a signal login. https://github.com/signalapp/Signal-Android/commit/7da3357b5...

Ah, I thought you meant using google play to do the payments to prevent spam unrelated to the cost. I know they are costing something.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#32
post #17

Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.

What about their built-in cryptocurrency? It's a perfect use for it. They could require payment post-install yet before message can be sent.

I've literally never seen anybody mention it, much less use it since it was announced.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#33

Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.

Ugh wtf so I need a Google account on Android? That's not going to happen.

For an org that pretends to care about privacy you'd imagine there'd be a way to avoid, you know, the biggest privacy invader on the planet.

Just allow monero payments or something. Alongside Google play for the sheep that want to use that.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#36

Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.

Ugh wtf so I need a Google account on Android? That's not going to happen. For an org that pretends to care about privacy you'd imagine there'd be a way to avoid, you know, the biggest privacy invader on the planet. Just allow monero payments or something. Alongside Google play for the sheep that want to use that.

Hopefully they eventually make a way to pay without it.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#37
post #9

you can't wave your hands, say "zero knowledge", and be private. this is too little information to be useful

usually, the implication of ZKP is that you buy coupons and claim them without attribution. in this coupon scenario the ZKP can just be a blind signature scheme.

however signal has an obscene fondness for TEEs (secure enclaves) so they may actually be doing something stupid here which will require trust beyond the ZKP.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#38
post #11

Earlier quoted context omitted.

I was using Silence from F-Droid for a while back in the day because of these issues, but the lack of interop and needing to make everyone move again soured me on the whole thing. I would rather just get people on XMPP or Matrix and not use some sketchy phone-first app at all. For SMS I use Fossify Messages, which I think was a fork of QKSMS. I don't use SMS as primary or sensitive comms, only as needed. Same as emai…

I really liked silence. I stopped using it when f-droid said the source code was no longer available. Fossify messages is the best replacement I've found. (I dont bother with encrypted messenging apps. I prefer to assume that anything I do on my phone is doubleplus unprivate. If I want privacy, I head over to my computer.)

GrapheneOS is more well-roundedly private than any desktop OS.

Competition is Qubes but that has usability issues and does not have good hardware security.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#39
post #17

Earlier quoted context omitted.

What about their built-in cryptocurrency? It's a perfect use for it. They could require payment post-install yet before message can be sent.

Nobody uses that and I think it was pre-mined. They should have implemented Monero but the UX isn't there. Maybe a Monero light wallet server run by Signal. They probably avoided Monero to not attract the additional scrutiny. They don't even accept donations in Monero.

I always thought they didn't want monero because they were pushing their own crypto thingy. Which indeed nobody uses.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#40

Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.

Ugh wtf so I need a Google account on Android? That's not going to happen. For an org that pretends to care about privacy you'd imagine there'd be a way to avoid, you know, the biggest privacy invader on the planet. Just allow monero payments or something. Alongside Google play for the sheep that want to use that.

googles obligation to hand out all account linked info notwithstanding, one may still create google accounts without associating a phone number, by doing so on old android versions. signal does however explicitly force credit card info here, thus providing direct individual traceability ..
Post reply on HN