Live data from Hacker News

Snap Store administrators removed signal-desktop from Ubuntu Snap

forum.snapcraft.io

281–290 of 443 posts

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#281
post #117

How in the world did a walled garden ecosystem like Snap manage to embed itself so deeply into Linux culture? There needs to be a user and industry revolt against Snap for this sort of shenanigans.

Did it manage to embed itself into anything beyond Ubuntu, which is a distro that is waning in popularity?

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#282
post #229

Earlier quoted context omitted.

AGPLv3 does not somehow permit trademark violations. Signal has taken issue with third parties building binaries and calling them Signal, and I can’t really blame them. This is the same reason Signal isn’t in F-Droid

DMCA takedowns are for copyright only, not trademark. Requesting or demanding removal for trademark reasons is legitimate, but using the DMCA takedown process when there is not a copyright violation is fraudulent.

Because the AGPLv3 allows for trademark restrictions, violating the trademark revokes the copyright license.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#283
post #119

Earlier quoted context omitted.

- Still need a phone number - They refuse to post the app on f-droid (directly) - No 3rd party clients allowed on their servers. - Crypto thing they attempted - I don't trust Moxie, he rubs me the wrong way.

What do you recommend as an alternative?

[deleted]

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#284

Earlier quoted context omitted.

Problem is, I already moved my friends and family to Signal and removed Whatsapp from my phone. It was an uphill battle that I don't want to fight again. What do I do, now? As much as there's a lot of questionable stuff on Signal, that's nothing compared to whatsapp. Do you suggest a Signal alternative that is significantly better?

This. It was hard enough to migrate people from Whatsapp ( as in, for all my privacy gripes, it is hard to argue that it just works very well in most instances ). It is not like most of my social groups are me-centric, which forces me to pick battles carefully. Now that I moved people to signal, I need to do what I can to try moving signal to my ideal space ( no phone requirement being one of them, 3rd party clients…

Sounds like sunk cost. What are your chances to influence Signal leadership in any way? A better idea would be to use internet standands for messaging to avoid vendor lock-in.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#285
post #248

Earlier quoted context omitted.

The name for the Signal Desktop package is signal-desktop and Signal provides instructions on their website on how to add their deb repository.

I don't think there is any reason for publishers to force users to download their software from the internet now that the Snap Store and Flathub exists. I've had so many bad experiences with broken third party packages or worse, "installers".

I just expunged the snap system entirely from my ubuntu. It feels much snapier without it. I've never tried flatpacks, my preference is to AppImages, they seem to perform much better than other systems I've tried.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#286

Earlier quoted context omitted.

So you're saying signal requested their own program be removed from the snap store? Sorry, I'm a little confused on terms. When you say snap maintainer, are you saying you are the maintainer of the signal snap package, or that you're a maintainer of snap itself?

Wasn’t their own program. They have a binary they distribute, this was some other binary calling itself Signal without their approval.

At a naive level, this sounds like the sort of supply chain attack we've all been taught to fear. Asking seriously: has this build been replicated? is the source different from mainline? if so, what changed and who changed it?

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#287
post #262
post #248

Earlier quoted context omitted.

The name for the Signal Desktop package is signal-desktop and Signal provides instructions on their website on how to add their deb repository.

Too difficult. Their install instructions are also too complicated and involve reading about 5 lines of comments and 4 shell commands. It should NEVER be more than 1 line of shell or 2 mouse clicks to install anything. This is 2022, not 1995. It's faster to just search for "signal" in the snap store and hit "Install".

Unfortunately, this is the world Signal lives in. For binary debian packages to be installed securely directly from a vendor requires the installation of gpg keys which is what 2 of the 3 commands are regarding. If Ubuntu had spent resources to develop a convenient way for developers to directly provide binaries to the users of their OS instead of developing a system where they are gatekeepers and distribute all packages Signal would now be able to provide an easier secure method of installation. If you were providing a privacy focused product which in some uses that privacy can be the difference between life and death, would you want to turn over supply chain protection of that product to a 3rd party?

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#288
post #210

Earlier quoted context omitted.

> This doesn’t change the fact that signal is the best option for my grandma to use still. Is it? How do you measure that? It seems like WhatsApp is a better default choice for most people probably.

Except it's owned by Meta, who I really wouldn't trust even if they say it's E2EE.

Beyond that, metadata can be every bit as interesting as the actual conversation. Alice only talks to Bob on the weekend. Charlie sending a message to Dave cascades to Dave talking to Eric, Francis, and Gavin. Herald is only online from this business' IP address during opening hours.

The list goes on (and on), but the point is that Facebook gets to be the good guy and claim E2EE, while gathering all that metadata.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#289

Earlier quoted context omitted.

Binaries are just condensed source code. So when the source code is AGPL I sure as hell can distribute binaries if I like.

> I sure as hell can distribute binaries if I like As far as I understood the argument, you're free to distribute binaries, you just can't call them "Signal", since it's a trademarked name (?).

You can't modify it and still call it Signal (i.e., misrepresent the trademark). You should be able to redistribute unmodified binaries.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#290

Earlier quoted context omitted.

That's not the case. And if it were, it still wouldn't matter because the AGPLv3 source would have granted you a license to that too being a copyright license.

AGPLv3 allows one to add trademark terms that, when violated, revoke the copyright license.

This is not correct. The trademark doesn't affect the copyright but you need both in order to publish binaries with the original name and logo in a store.

You need a copyright license to use the binary. You need a trademark license to use the trademark. See the firefox -> iceweasel kerfuffle

Post reply on HN