Live data from Hacker News

Signal and Giphy

whispersystems.org

31–40 of 125 posts

Re: Signal and Giphy

#31
post #24
post #23

That fake video on top is interesting. If they can't even get that right what does it say about their Privacy and Security claims?

Empirically, absolutely nothing. You can't judge the security of a software based on its marketing material.

But you can determine that nobody at signal has used or even seen an android phone.

Re: Signal and Giphy

#33

Is there a federated and/or self-hosted alternative to Signal with similar privacy and security properties? Even if it supports fewer platforms? I've been getting more and more interested in running my own (and perhaps my friends') infrastructure, but I haven't found anything better than IRC for chat.

I run a Synapse server ( http://matrix.org/ ) which is federated and works very well. There are many clients but the nicest at the moment is Riot. Full encryption is now available in the Riot webclient and it's coming to the app soon.

I'm just a Matrix (and Signal) user, I haven't yet had a look into its encryption implementation yet, but for those who are interested, I think these are the docs:

http://matrix.org/speculator/spec/drafts%2Fe2e/client_server...

Re: Signal and Giphy

#34

Still no desktop client?

The desktop app is available since almost 1 year (in closed beta at the beginning), and recently apparently it's also working with iOS

https://whispersystems.org/blog/signal-desktop/

It's also a real app[1], independent from the phone's: after the initial key exchange, you can send/receive messages even when your phone is off

[1] Compare with the Whatsapp webapp, which solves/sidesteps the E2E encryption among multiple devices conundrum by simply routing everything through the phone. The Signal app is also written with web technologies, so it might not be palatable for everyone, but it's a good compromise imho

Re: Signal and Giphy

#37
> The GIPHY service could use subtleties like TLS session resume or cache hits to try to correlate multiple requests as having come from the same client, even if they don't know the origin.

How would a cache hit mean same user tried to search? TLS session resume, I can understand but cache hit only means same resource was accessed not same user tried to access.

Re: Signal and Giphy

#39

Is there a federated and/or self-hosted alternative to Signal with similar privacy and security properties? Even if it supports fewer platforms? I've been getting more and more interested in running my own (and perhaps my friends') infrastructure, but I haven't found anything better than IRC for chat.

Run an IRC server on 127.0.0.1 on a dedicated server you control and allow access over SSH only. Connect to IRC through a command line client in a tmux session or similar.

Re: Signal and Giphy

#40
post #18

Earlier quoted context omitted.

Except that history has shown us that theoretically secure but feature deficient systems lose out to less ideologically pure systems that provide what users want, leaving the sum total amount of security provided to be less.

EDIT: Deleted the comment because the of attacks in responses, which I can’t respond to due to "Submitting too fast". @dang: If you want users to be able to actually discuss things, allow them to respond to comments attacking them. This is a retarded system.

You keep repeating untrue claims in every thread about Signal, despite having been proven wrong before. At this point, I'll just have to assume that you're not interested in having a factual discussion. See, for example, https://news.ycombinator.com/item?id=12689390 and its descendant posts.
Post reply on HN