Earlier quoted context omitted.
Context?
Some people believe that there's the CIA is behind Signal.
The CIA certainly uses Signal, which is why privacy advocates who think the US government will go after it are idiots. Same thing for Tor.
Registration without a phone number on Signal will use zero-knowledge proofs
161–170 of 208 posts
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#162Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
Ah OK, I wondered where is the "catch".
You cannot keep all 3 of "no gatekeeping" - "anyone can message anyone" - "low spam".
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#163Earlier quoted context omitted.
"Federation freezes the technology" https://signal.org/blog/the-ecosystem-is-moving/
That's a defeatist take that's been vastly debunked, someone linked the Matrix version and here is the XMPP one: https://gultsch.de/posts/objection/ In short, yes, building a standard takes some effort, but that serves your users and to future-proof your solution. Moxie's post boils down to "1- I know better than my users and I don't need input to protocol-design, 2- I'm not willing to put in the effort to standardiz…
what does debunked here mean? like I can right now go on websites with firefox or safari and they will not be displayed properly. I do personally think federation is worthwhile, but I think it's a bit much to say Signal only cares about power and that all their reasoning for what they did are debunked or w/e.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#164Earlier quoted context omitted.
It's true someone snooping at either end of a conversation could over time correlate timing and sizes to show that two users are communicating, but that's the most they can do. Signal is not peer to peer so you're not connecting to your recipient, and signal itself has enough raw volume that simply correlating sizes and timing of a small number of messages wouldn't really be sufficient to know who is communicating wi…
> Signal is not peer to peer Isn't it? I think it has a setting, disabled by default, to proxy connections via a Signal server. If you're not doing that ... it must be P2P? Probably with the IP address of the person you're communicating with in the header of every packet?
This setting is "Always relay calls", and the only difference it makes is for already established calls. Messages and calls setup always go through Signal's servers.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#165Does the protocol preserve its privacy benefit when payment, recovery, and anti-abuse metadata are considered together?
Considering the eyebrow raising funding sources, probably not
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#166Earlier quoted context omitted.
Depending on your needs, XMPP or Matrix are probably your best bet. Both have different clients of varying usability and quality on different platforms, so you have to pick your poison. If E2EE is important, you also need to determine how encrypted you want your messages to be (as both XMPP and Matrix carry quite a bit of identifying metadata in its unencrypted headers). For most people and use cases, either will pro…
> if you're a human rights activist or journalist in an oppressive country, I'd stick to Signal So that the state actor can listen on the edge of the network and infer with whom you are taking and when? Or maximize their chances of finding a 0-day in the client considering that it's the same client that everyone else's using? Or throwing it all away anyways when it's using Apple/Play services for notifications delive…
> Or throwing it all away anyways when it's using Apple/Play services for notifications delivery?
What do you mean by "all"
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#167Earlier quoted context omitted.
Apple should make their products edible as well.
'Apple' was a metaphor to Newton. 'Open'AI was meant as a promise; one that they've since broke both to some of their founders as well to the general populace. Reminding people of that broken promise doesn't seem that wild.
Some of the earliest Apple adverts make reference to the Garden of Eden, rather than Newton.
Plus we all know the Beatles had that company name first.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#168Earlier quoted context omitted.
OpenAI is 501c3, should they also be required to release everything?
"open" is literally in the name, so yes
'"open" is literally in the name, so yes'
Just because someone calls themselves something doesn't mean it is.
"Open" is a name that George Soros uses for a lot of the things he puts his billions into e.g. the Open Democracy blog.
I'll leave you to decide whether Soros' enterprises are really open.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#169Is Signal still a trusted company in the industry? They are based in the USA.
Yes, very much so. It is basically a standard across the western world for politicians, journalists, whatsapp refugees... Of course there are many alternatives but most of them have most of their users here, on HN. MacOS, iOS, Windows, Linux, Android are all made in the US and are also virtually universally used. This idea that people avoid American products is super niche.
Yes they're used all over the world but .. super niche? Have you been living under a rock?
https://www.zdnet.com/article/europes-plan-to-ditch-us-tech-...
https://github.com/switch-to-eu/switch-to.eu
https://www.europeanswitch.com/why-european-providers/
https://www.techspot.com/news/112362-europe-may-restrict-mic...
https://www.independent.co.uk/news/world/europe/europe-zoom-...
linux us made in the US? An open source OS, with collaborators from all over the world initially started by a finnish student and still actively the main orchestrator of it, linux torvalds. Not to mention the thousand distros derived from it.
https://en.wikipedia.org/wiki/Linux
PS: take this post as an opportunity to educate yourself rather than downvoting it.
Re: Registration without a phone number on Signal will use zero-knowledge proofs
#170Earlier quoted context omitted.
For the longest time, you couldn't. It wasn't until this release I realised that had changed. If it changed before, it wasn't well communicated to me as an Android signal user. I was on beeper and then molly precisely because there was so little traction on changing this. You could install signal fine, but you couldn't QR code or secret phrase mesh it with your android handset. Oddly, iPad meshed fine with iPhone or…
I think this is pretty recent, I'd never heard of it before. I even got a new phone a month ago and didn't notice this being an option.
[deleted]