Live data from Hacker News

Registration without a phone number on Signal will use zero-knowledge proofs

community.signalusers.org

101–110 of 206 posts

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#102
post #88

Earlier quoted context omitted.

Maybe WhatsApp gives them a ton of metadata like all their contacts, when they chat and with who, IPs, etc. Signal only gives out either time registered or last used last time I checked.

WhatsApp uploads decrypted chats to the cloud once a week.

No need to enable the google backup

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#104
post #99

Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.

Signal is there for power and control, not for its users, otherwise they would welcome the usage of third party clients, and generally, encourage decentralisation measures like self hosting, federation and account portability. Yep, they have nice engineering blog posts, they are also US-incorporated, extensively centralised in AWS and subject to the cloud act, which together negates, or largely diminishes claims abou…

Does the perfect messaging tool exist (100% e2ee encrypted and decentralized and open)?

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#105
post #68
post #60

Earlier quoted context omitted.

OpenAI is 501c3, should they also be required to release everything?

Non profit doesn't necessitate open sourcing their whole product. If you don't like that, don't donate. As long as they are transparent about their decisions that is the only obligation they have.

> Non profit doesn't necessitate open sourcing their whole product. If you don't like that, don't donate. As long as they are transparent about their decisions that is the only obligation they have.

Actually you're mistaken. Under the 501(c)(3) tax code rules, they are required to act in the public good. Nobody has sued them to enforce this though, but I'd at least like them to acknowledge the game they're playing by ghosting us all on this.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#106

Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.

Not only that. I also question how they pick new features to implement. For example usernames - I am not going to trust another "private" IM app username feature same as what Telegram and WhatsApp questionably chose. Compromise on this? Well, then even WhatsApp and Telegram are good enough with compromises.

Separate usernames completely from phone numbers. Period.

There's a reason Signal is still "US based". No, I am not talking about some CIA/NSA/DoD/tom/jerry funding conspiracy, just good old human obstinacy and hubris. They don't give a f about who uses it, it's about who makes and maintains it all.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#107
post #99

Earlier quoted context omitted.

Signal is there for power and control, not for its users, otherwise they would welcome the usage of third party clients, and generally, encourage decentralisation measures like self hosting, federation and account portability. Yep, they have nice engineering blog posts, they are also US-incorporated, extensively centralised in AWS and subject to the cloud act, which together negates, or largely diminishes claims abou…

Does the perfect messaging tool exist (100% e2ee encrypted and decentralized and open)?

XMPP. Run your own (federated) server, chat with anyone outside it, with e2e encryption.

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#108
post #60

Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.

OpenAI is 501c3, should they also be required to release everything?

Is it a joke to consider openai as non-profit corporation?

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#109
post #99

Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.

Signal is there for power and control, not for its users, otherwise they would welcome the usage of third party clients, and generally, encourage decentralisation measures like self hosting, federation and account portability. Yep, they have nice engineering blog posts, they are also US-incorporated, extensively centralised in AWS and subject to the cloud act, which together negates, or largely diminishes claims abou…

"Federation freezes the technology" https://signal.org/blog/the-ecosystem-is-moving/

Re: Registration without a phone number on Signal will use zero-knowledge proofs

#110

I know for a fact If you use "signal" matrix or whatever "security" app, you will get branded a terrorist in India, your life will be upended and you will face a long list of problems. https://timesofindia.indiatimes.com/india/ats-probes-use-of-... https://www.aninews.in/news/national/general-news/accused-da... https://www.deccanherald.com/india/secure-messaging-apps-lik... https://india-employmentnews.com/tech-categ…

> And yes, using a VPN will get you knocked up as well.

Well, damn.

Post reply on HN