Live data from Hacker News

Standalone Signal Desktop

signal.org

231–240 of 320 posts

Re: Standalone Signal Desktop

#231

Earlier quoted context omitted.

eul is a light (4 MB) native desktop client for all popular messengers: https://eul.im Signal support is coming later this year. Right now it supports Slack, Skype, Facebook, and Gmail.

Stop spamming your business on all chat threads.

This is a thread about an instant messaging client. Regardless of what posts they may have made elsewhere, it is definitely relevant here.

Re: Standalone Signal Desktop

#232
post #216

Earlier quoted context omitted.

No, that isn't the case. The Node.js APIs bundled with Electron expose considerably more functionality to JavaScript than the HTML5 APIs that Chromium exposes. And the Electron framework exposes even more native OS APIs that Chromium and Node.js don't provide. Look, you can call it "using a hammer for everything" pejoratively if you want, but it's popular for a reason, and that reason isn't the moral decay of society…

> The Node.js APIs bundled with Electron expose considerably more functionality to JavaScript Which happen to be written in native OS languages.

So because open(2) is implemented in C in the standard library, I should only call it via C, and never invoke the wrapper function open() in python or whatnot?

“Hybrid” does not mean what you think it does. The platform may be built on code in many languages, but to program for that platform, you only have to know one.

Re: Standalone Signal Desktop

#233
post #5

Another 205MB Electron App to the collection, at least it's 50MB smaller than Wire.

Although I understand people don’t like the bloat, the reason why Electron is so popular is because it’s easy for (web) developers to build apps in. Maybe we can drop the dissaproval and work together towards optimising it?

Re: Standalone Signal Desktop

#235
post #110

Earlier quoted context omitted.

In-browser e2e encryption is vulnerable to targeted attacks on specific individuals. The service (either intentionally or by virtue of being hacked) can serve up Javascript crypto code that either uploads plaintext, or subtly backdoors the crypto so it can be decrypted. And they can do this to just a single user, so unless you audit the Javascript every single time you load the page, you'd never know. A signed app is…

A signed app is only more secure if they load absolutely no code remotely, otherwise they open up the same channels of attack. That said, at least they have the option of closing that hole with the electron app.

Actually, an electron app is very close to the security model of a browser. The fact that they do not load code intentionally, does not solve the problem that electron is able to execute injected javascript.

Re: Standalone Signal Desktop

#236

I so wish more people discovered Matrix or https://riot.im . To me it's simpler and works better than Signal while being decentralized and federated. It has excellent clients for all platforms (and these keep measages in sync with each other) and does not require a phone number.

I don't agree that Matrix has excellent clients for all platforms - IMHO, only Riot Web/Desktop is usable, and that only in comparison to other open-source messaging software - it doesn't compete against pretty much anything that people make money off of. Riot iOS and Android both make it nearly impossible to handle a large amount of chatrooms, IME. And nothing else implements even most important features of Matrix.

The developers badly need to invest in a UX engineer, but are currently stuck scrambling for money as their corporate sponsorship ran out.

Re: Standalone Signal Desktop

#237

Earlier quoted context omitted.

Shouldn’t you instead just encrypt your disk entirely?

I should, and do, but a lot of non-techies don't, and this design decision might end up with their Signal messages compromised. I mean isn't one of Signal's target audience people like journalists and activists?

Yes, but the point is, if those people don't use ecryption, then they have a problem anyway - and if they do, but their system is compromised, than the attacker gets anything anyway. In either case, I think Signal's job is to secure the messages going out and coming in and not protecting the disk.

Re: Standalone Signal Desktop

#238
post #222

Earlier quoted context omitted.

Call me old, but how can a messaging app like this use 130MB RAM? I am exasperated that Skype on my machine is using 109MB with only one conversation window open. We seemed to get by with MSN Messenger with far less RAM, and the features were pretty much identical. It boggles the mind how memory-intensive some of the modern apps are. It's insane.

It's because Electron has taken over desktop app development. While it does significantly lower the knowledge barrier to building desktop applications, it does come with a heavy memory overhead.

Honest question: What's an easy-to-use, popular cross-platform framework with bindings to a sane language? Something like QT/GTK to Python? I hate Electron, but what's the alternative? I used wxWindows back in the day, with Boa Constrictor, and I loved that workflow.

Re: Standalone Signal Desktop

#239

A lot of people have given negative feedback(because of electron?). I for one, am happy for this. I am in the middle of migrating slowly to Mozilla Firefox from Google Chrome, and one of the hardest things, is to have some of the apps as standalone. I couldn't use my MacBook for anything else if I wanted to chat using signal (..and have chrome running in the background). Maybe that's just me, but it's good news!

It's not "standalone" though... It's moving from being a Chrome extension to simply bundling an entire instance of Chromium that only it gets to use. So, you're migrating from Firefox to multiple instances of Chrome...

I don't understand why it can't be served as a web app, like WhatsApp Web is :(

Re: Standalone Signal Desktop

#240
post #222

Earlier quoted context omitted.

It's because Electron has taken over desktop app development. While it does significantly lower the knowledge barrier to building desktop applications, it does come with a heavy memory overhead.

Honest question: What's an easy-to-use, popular cross-platform framework with bindings to a sane language? Something like QT/GTK to Python? I hate Electron, but what's the alternative? I used wxWindows back in the day, with Boa Constrictor, and I loved that workflow.

So I don't know about the definition for popular or sane languages but FWIW Lazarus is a free framework for producing truly portable, native applications for Windows/Mac/Linux/Android/iOs from the same code project. Think FOSS child of Delphi from back in the day.
Post reply on HN