Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Registration without a phone number on Signal will use zero-knowledge proofs

community.signalusers.org

Post reply on HN
Print view View original

51–60 of 201 posts

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#51

Post by wolvoleo »

2Gkashmiri wrote: post #48

I know for a fact If you use "signal" matrix or whatever "security" app, you will get branded a terrorist in India, your life will be upended and you will face a long list of problems. https://timesofindia.indiatimes.com/india/ats-probes-use-of-... https://www.aninews.in/news/national/general-news/accused-da... https://www.deccanherald.com/india/secure-messaging-apps-lik... https://india-employmentnews.com/tech-categ…

Yes that's bad but that's an Indian government problem, not a signal or other messenger app problem. And really, it sounds like there was a lot more going on with these people than just using a particular app. Discord and WhatsApp are mentioned too.

India also bans most satellite phones by the way. I have one so I looked into that as to not get caught out travelling.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#52

Post by wolvoleo »

Cider9986 wrote: post #38
nosioptar wrote: post #16

Earlier quoted context omitted.

I really liked silence. I stopped using it when f-droid said the source code was no longer available. Fossify messages is the best replacement I've found. (I dont bother with encrypted messenging apps. I prefer to assume that anything I do on my phone is doubleplus unprivate. If I want privacy, I head over to my computer.)

GrapheneOS is more well-roundedly private than any desktop OS. Competition is Qubes but that has usability issues and does not have good hardware security.

The problem for me is writing on a mobile device is a terrible user experience.

When I'm at home I don't wanna use a virtual keyboard on a 6.3" (or 7.9 unfolded). I just want to use my triple monitor PC setup with a real keyboard and a wealth of display space.

Mobile is cool for on the go but a productivity killer.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#53

Post by wolvoleo »

Synthetic7346 wrote: post #50
2Gkashmiri wrote: post #48

I know for a fact If you use "signal" matrix or whatever "security" app, you will get branded a terrorist in India, your life will be upended and you will face a long list of problems. https://timesofindia.indiatimes.com/india/ats-probes-use-of-... https://www.aninews.in/news/national/general-news/accused-da... https://www.deccanherald.com/india/secure-messaging-apps-lik... https://india-employmentnews.com/tech-categ…

[flagged]

[flagged]

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#54

Post by dakolli »

Cider9986 wrote: post #23
mmooss wrote: post #17

Earlier quoted context omitted.

What about their built-in cryptocurrency? It's a perfect use for it. They could require payment post-install yet before message can be sent.

Nobody uses that and I think it was pre-mined. They should have implemented Monero but the UX isn't there. Maybe a Monero light wallet server run by Signal. They probably avoided Monero to not attract the additional scrutiny. They don't even accept donations in Monero.

They avoid Monero because Signal and the EFF are actually the feds and this is all theater.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#55

Post by wolvoleo »

mmooss wrote: post #17
opengrass wrote: post #12

Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.

What about their built-in cryptocurrency? It's a perfect use for it. They could require payment post-install yet before message can be sent.

True, if they're not even going to allow that for payment then they might as well remove it from the app altogether. Because what's the point if they don't even believe in it themselves.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#56

Post by Cider9986 »

dakolli wrote: post #54
Cider9986 wrote: post #23

Earlier quoted context omitted.

Nobody uses that and I think it was pre-mined. They should have implemented Monero but the UX isn't there. Maybe a Monero light wallet server run by Signal. They probably avoided Monero to not attract the additional scrutiny. They don't even accept donations in Monero.

They avoid Monero because Signal and the EFF are actually the feds and this is all theater.

Claims without evidence can be dismissed without evidence.

Signal is not robust for metadata protection. Neither do they advertise anonymity. They take steps to protect metadata but it's nothing compared to SimpleX.

If it's "the feds", then how? There's reproducible builds on all platforms except iOS so we know the source code is what's running on our devices. Can you point to the code where the E2EE is compromised?

They are the largest messenger that has E2EE backups by default.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#57

Post by Cider9986 »

2Gkashmiri wrote: post #48

I know for a fact If you use "signal" matrix or whatever "security" app, you will get branded a terrorist in India, your life will be upended and you will face a long list of problems. https://timesofindia.indiatimes.com/india/ats-probes-use-of-... https://www.aninews.in/news/national/general-news/accused-da... https://www.deccanherald.com/india/secure-messaging-apps-lik... https://india-employmentnews.com/tech-categ…

And WhatsApp is E2EE with the same protocol so I don't see the big deal.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#58

Post by twothreeone »

john01dav wrote: post #8
atiq-ca wrote: post #2

Signal still uses proprietary blob and uses google/apple service for notifications. Use molly.im instead which has solved these problems.

The native Signal android app delivers notifications just fine without Google play services on my degoogled android.

Same!

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#59

Post by 2Gkashmiri »

Cider9986 wrote: post #57
2Gkashmiri wrote: post #48

I know for a fact If you use "signal" matrix or whatever "security" app, you will get branded a terrorist in India, your life will be upended and you will face a long list of problems. https://timesofindia.indiatimes.com/india/ats-probes-use-of-... https://www.aninews.in/news/national/general-news/accused-da... https://www.deccanherald.com/india/secure-messaging-apps-lik... https://india-employmentnews.com/tech-categ…

And WhatsApp is E2EE with the same protocol so I don't see the big deal.

The big deal is, having talked to security people, they are "fine" with WhatsApp because the theory is, they get data from whatsapp so they have some sort of backdoor access. They are pretty chill with WhatsApp which id unexplainable

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#60

Post by what »

purpleidea wrote: post #18

Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.

OpenAI is 501c3, should they also be required to release everything?
Post reply on HN