Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Signal for Android: RedPhone and TextSecure in one app

whispersystems.org

Post reply on HN
Print view View original

51–60 of 158 posts

Re: Signal for Android: RedPhone and TextSecure in one app

#51

Post by acqq »

Natanael_L wrote: post #45
acqq wrote: post #28

Earlier quoted context omitted.

Can I download the the Signal client from any store and then point it to my own server instead of Whisper's? Did anybody try to run his own server? Can such setup really work?

You can run your own server, but there's no federation. The reason for that I imagine is that they want a privacy preserving automatic lookup method (a single server can confirm phone numbers and allow privacy preserving contact list comparisons for its own clients), and aren't convinced of using a model where the public key is the identifier instead of your phone number.

Have you actually tried it, or do you know somebody who have tried? Is the client really fully independent on Whisper servers? Can it work without the mobile connection, just with WiFi?

Does the voice communication work?

I'm asking all this because it seems that the server code was earlier in "you can look but it's not enough to run it" state?

Re: Signal for Android: RedPhone and TextSecure in one app

#52

Post by Johnny_Brahms »

creshal wrote: post #22

https://www.reddit.com/r/netsec/comments/3rc9br/psa_signal_f... There seem to be concerns about the security of it.

They have been encouraging people to read the two words on the screen on the start of every conversation forever, so I'm not really worried. Hopefully it will get back in, though.

Re: Signal for Android: RedPhone and TextSecure in one app

#53

Post by Spakman »

Natanael_L wrote: post #45
acqq wrote: post #28

Earlier quoted context omitted.

Can I download the the Signal client from any store and then point it to my own server instead of Whisper's? Did anybody try to run his own server? Can such setup really work?

You can run your own server, but there's no federation. The reason for that I imagine is that they want a privacy preserving automatic lookup method (a single server can confirm phone numbers and allow privacy preserving contact list comparisons for its own clients), and aren't convinced of using a model where the public key is the identifier instead of your phone number.

I believe it was always designed to allow for federation but I haven't heard anything about that for a long time now.

Re: Signal for Android: RedPhone and TextSecure in one app

#54

Post by Spakman »

acqq wrote: post #51
Natanael_L wrote: post #45

Earlier quoted context omitted.

You can run your own server, but there's no federation. The reason for that I imagine is that they want a privacy preserving automatic lookup method (a single server can confirm phone numbers and allow privacy preserving contact list comparisons for its own clients), and aren't convinced of using a model where the public key is the identifier instead of your phone number.

Have you actually tried it, or do you know somebody who have tried? Is the client really fully independent on Whisper servers? Can it work without the mobile connection, just with WiFi? Does the voice communication work? I'm asking all this because it seems that the server code was earlier in "you can look but it's not enough to run it" state?

I have read of people on the mailing list who appear to have the server running.

There used to be some documentation about running it, but it was removed from the repo (presumably because they didn't want to dedicate resources to supporting it, but that's just a guess).

Re: Signal for Android: RedPhone and TextSecure in one app

#55

Post by Tepix »

Signal is pretty awesome, it's by far the best that we have right now:

  • state of the art crypto
  • open source
  • free as in beer
  • Available for Android and iOS
There are a few minor features that are missing but I can live with that. However, there are also a couple of important shortcomings:

  • no decentralization
  • use of the phone number
I hope they can be fixed sooner or later.

Re: Signal for Android: RedPhone and TextSecure in one app

#56

Post by mykhal »

deckiedan wrote: post #14

One of the reasons I didn't install WhatsApp is the sheer quantity of permissions it wants (on Android). Yes, I realise that this is part of Android's broken security model. But the Signal app also wants access to practically everything. Device & App History, Identity, Calendar, Contact, Location, SMS, Phone, Photos/Media/Files, Camera, Microphone, WiFi Connection info and Device ID and call info. Call me paranoid, b…

regarding to excessive amount of required permissions, and the fact that contact == phone number, for now i am preferring ChatSecure.

Re: Signal for Android: RedPhone and TextSecure in one app

#58

Post by verusfossa »

TextSecure used to be on fDroid, then this happened https://f-droid.org/posts/security-notice-textsecure/. Now it's a GPlay exclusive. I don't have GAPPS so now I can't get it. I'd assume many privacy conscious people don't have GAPPS. I understand the technical hurtles, but it's too big a pill to swallow.

Re: Signal for Android: RedPhone and TextSecure in one app

#59

Post by maxerickson »

justcommenting wrote: post #49
JulianMorrison wrote: post #16

Why not on my Nexus 7?

If you use a Nexus 7, you probably have a Google account, so you could use a Google Voice number to register.

Google Play doesn't make it available to the Nexus 7 (at least, I don't see it on mine).

Re: Signal for Android: RedPhone and TextSecure in one app

#60

Post by TheHippo »

verusfossa wrote: post #58

TextSecure used to be on fDroid, then this happened https://f-droid.org/posts/security-notice-textsecure/ . Now it's a GPlay exclusive. I don't have GAPPS so now I can't get it. I'd assume many privacy conscious people don't have GAPPS. I understand the technical hurtles, but it's too big a pill to swallow.

It's open source. So could compile on your own.
Post reply on HN