Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Snap Store administrators removed signal-desktop from Ubuntu Snap

forum.snapcraft.io

Post reply on HN
Print view View original

341–350 of 443 posts

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#341

Post by krzyk »

munk-a wrote: post #300
krzyk wrote: post #265

Earlier quoted context omitted.

Why not use sms? No need to install apps. My parents use that. I use that.

It's extremely expensive outside the US and can't be sent over wifi - so if you're communicating with someone abroad it's not a very convenient option. You're also missing out on E2EE and, lastly, Apple has corrupted the utility of it as a communication method for half of the devices out there.

I'm not in US, and unlimited sms is included in monthly subscription.

And years before that sms was cheaper than data.

Also sms is cheaper when roaming in Europe (in my case it has zero cost besides the monthly subscription price).

Sure IM are etter if you need group chat or communication abroad. But that is not the case for majority of population where 1 to 1 communication is used inside a single country.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#342

Post by Karunamon »

bpicolo wrote: post #253
mort96 wrote: post #231

Earlier quoted context omitted.

No. A DCMA takedown is your lawyers contacting their lawyers and saying that you're invoking a law which forces them to immediately take something down or risk severe legal ramifications. Isn't it better to reach out without invoking a DCMA and see if the other party is willing to cooperate first?

If their explicit goal is having it taken down, and the law gives them explicit ability to do so, why would they waste the time? A DMCA isn't rude, it's just a strictly outlined process.

I think a great many people would disagree that taking legal action first is anything but rude.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#343

Post by turminal »

tssva wrote: post #287
dheera wrote: post #262

Earlier quoted context omitted.

Too difficult. Their install instructions are also too complicated and involve reading about 5 lines of comments and 4 shell commands. It should NEVER be more than 1 line of shell or 2 mouse clicks to install anything. This is 2022, not 1995. It's faster to just search for "signal" in the snap store and hit "Install".

Unfortunately, this is the world Signal lives in. For binary debian packages to be installed securely directly from a vendor requires the installation of gpg keys which is what 2 of the 3 commands are regarding. If Ubuntu had spent resources to develop a convenient way for developers to directly provide binaries to the users of their OS instead of developing a system where they are gatekeepers and distribute all pack…

You're already trusting debian/ubuntu maintainers with your entire system. Why would trusting them with one particular app make any difference?

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#344

Post by michaelmrose »

turminal wrote: post #338
tssva wrote: post #248

Earlier quoted context omitted.

The name for the Signal Desktop package is signal-desktop and Signal provides instructions on their website on how to add their deb repository.

Why doesn't signal have a package in the official debian repo? I don't want to add random deb repositories for software like that.

Presumably for the same reason they don't want someone else packaging snap for them its another party to attack in order to attack their users in a way that would destroy trust in their product given its sensitive nature.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#345

Post by kube-system »

crumpled wrote: post #304
crumpled wrote: post #243

Earlier quoted context omitted.

A trademark violation is a copyright violation, because a trademark is copyrighted at first inception, before anyone adds the '™'. A company is also compelled to take actions like this to maintain the rights to thier own trademarks. That's my understanding; IANAL.

There's no need to downvote me, as I'm only engaging in polite conversation, just explain it. And if you can support your argument with qualifications, that would be nice. It sounds like people are saying that a company can have their trademarks used by downstream distributors of AGPLv3 software, if the license doesn't explicitly prevent that, which just seems wrong. The codebase license is not a license to other com…

You can't (legally) do a DMCA takedown for a trademark violation. You can use a copyright license that requires a user of a copyrighted work to respect your trademark (or whatever, basically). Then if someone doesn't meet those terms, the copyright license is revoked, and they are in violation of copyright law. However, this is legally just a DMCA takedown for a copyright violation.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#346

Post by woodruffw »

turminal wrote: post #338
tssva wrote: post #248

Earlier quoted context omitted.

The name for the Signal Desktop package is signal-desktop and Signal provides instructions on their website on how to add their deb repository.

Why doesn't signal have a package in the official debian repo? I don't want to add random deb repositories for software like that.

It's not a "random" repository, it's their official repository. They seem to be doing everything right (or as right as possible), including providing a signing key (which you can independently verify) and using an HTTPS host.

What's your threat model here? Trusting Signal to provide the binary and host the servers, but not distribute the binary that connects to the servers?

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#348

Post by cyberphobe »

jcastro wrote: post #320
tssva wrote: post #297

Earlier quoted context omitted.

I can think of a lot of reasons why publishers of privacy and security related software would want to direct distribute their software rather than relying on 3rd parties if it is avoidable.

There's also just as many reasons to not give Signal root on my PC by installing their .deb package.

No one is forcing you to use their deb

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#349

Post by progval »

woodruffw wrote: post #346
turminal wrote: post #338

Earlier quoted context omitted.

Why doesn't signal have a package in the official debian repo? I don't want to add random deb repositories for software like that.

It's not a "random" repository, it's their official repository. They seem to be doing everything right (or as right as possible), including providing a signing key (which you can independently verify) and using an HTTPS host. What's your threat model here? Trusting Signal to provide the binary and host the servers, but not distribute the binary that connects to the servers?

Trusting Signal to provide the source and host the servers.

Re: Snap Store administrators removed signal-desktop from Ubuntu Snap

#350

Post by fazfq »

brianacton wrote: post #305
mesebrec wrote: post #65

Signal Snap Maintainer here, this is because of a DMCA takedown request from lawyers representing Signal. Canonical is currently working with them to clear things up. Canonical's communication to me was initially lacking due to issues in their process, the process has been amended and I'm back in the loop again.

Correct. We spoke to our attorneys and found the breakdown in communication. We are working to rectify and reinstate signal-desktop ASAP. Sorry for the confusion.

Why is Signal, a company that prides itself in being tech-centric, allowing lawyers to send DMCA requests without consulting anybody?
Post reply on HN