Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Signal 2.0 released with private messaging support

whispersystems.org

Post reply on HN
Print view View original

31–40 of 174 posts

Re: Signal 2.0 released with private messaging support

#31

Post by tptacek »

13 wrote: post #25
moe wrote: post #21

Earlier quoted context omitted.

I agree with 13. There needs to be a way to have an account that is not tied to a SIM card or any kind of phone number. I'm frankly astonished there's even a debate about that.

I'm just astonished that there's even justification for it not being an option. Bang on about easy discovery all you want, there's lots of people who don't want to give out their phone number for no good reason to some strangers.

This is nowhere nearly as simple as "you just published your phone number to TextSecure":

https://whispersystems.org/blog/contact-discovery/

It is a very real security issue, too. What Matt Blaze is talking about with "extra namespaces" is a giant piece of attack surface TextSecure is avoiding.

Re: Signal 2.0 released with private messaging support

#32

Post by fsargent »

rbcgerard wrote: post #28
petermonsson wrote: post #27

How is it working out? Is the messaging solid between Android and iOS? How is the group messaging working? Sorry, I just downloaded it, but I have no friends on the list yet. I'm impatient. I really want it to work.

same here. also, what is the blue button for?

Left button/Screen is active conversations. Right side check box blue thing is the Archive.

Swipe right on a conversation, and it goes into the right hand side. No idea why it's that way. Very odd. Why even have the option if it's going to be a first level function.

Re: Signal 2.0 released with private messaging support

#33

Post by TheLoneWolfling »

higherpurpose wrote: post #24
matt2000 wrote: post #4

One question I always have with secure systems distributed by app stores, even the open source ones, is how to you verify the source you're reading is the app you're using?

Is there no option in the store for developers to "sign" the apps in some way and for phones to detect when the app doesn't use the developer's signature? If such a feature doesn't exist in the app stores, it should.

There is no way to do this in a secure manner that doesn't lead to a closed garden, that I know of at least.

Re: Signal 2.0 released with private messaging support

#35

Post by mayneack »

petermonsson wrote: post #27

How is it working out? Is the messaging solid between Android and iOS? How is the group messaging working? Sorry, I just downloaded it, but I have no friends on the list yet. I'm impatient. I really want it to work.

I've been using textsecure for a long time now: so far I haven't had any issues messaging new iOS users including mixed groups. In my experience, there might be some mms edge cases when mixing with other messaging apps, but not too many and bug reports are monitored regularly on github.

Re: Signal 2.0 released with private messaging support

#36

Post by smacktoward »

maxerickson wrote: post #26
Karunamon wrote: post #23

Earlier quoted context omitted.

If I understand correctly, the iPhone only cares that the chain of trust for an app key is validated up to their CA. In other words, if the bad guys with guns coerce Apple to mint them a cert, they could simply replace your known good binary with a crocked one signed with the new key, and your phone will happily run it. Getting that binary onto your phone is an exercise left to the reader, but there are many means, l…

I submitted this the other day: http://www.oss.net/dynamaster/file_archive/100102/0a947a77d7... In one part, it says: The greatest material curse to the profession, despite all its advantages, is undoubtably the telephone. It is a constant source of temptation to slackness. And even if you do not use it carelessly yourself, the other fellow, very often will, so in any case, warn him. Always act on the principle that…

Or be like Paulie from Goodfellas and have underlings make your calls for you: http://www.hark.com/clips/rytptybypc-paulie-hated-phones

Re: Signal 2.0 released with private messaging support

#39

Post by stormbrew »

mullen wrote: post #30
13 wrote: post #25

Earlier quoted context omitted.

I'm just astonished that there's even justification for it not being an option. Bang on about easy discovery all you want, there's lots of people who don't want to give out their phone number for no good reason to some strangers.

Get a Google Voice number (Free. Use throw away account) and use that. There are instructions out there on how to connect a Google Voice number to Signal.

Which you can only do in the US.

Re: Signal 2.0 released with private messaging support

#40

Post by cryptomilk »

jscheel wrote: post #37

What's the difference between this and Telegram? I'm starting to feel a bit overwhelmed with what messaging app I'm supposed to use. Also, why is ios8 required?

Signal/TextSecure is Free Open Source Software. There is no company behind the development of the App. It is the Software with the best security model so far. The cryptography behind Telegram is not what you would expect of todays crypto standards. A lot of security researcher have commented on this already.
Post reply on HN