Live data from Hacker News

Signal is having technical difficulties

status.signal.org

591–600 of 750 posts

Re: Signal is having technical difficulties

#591
post #575

Earlier quoted context omitted.

WhatsApp's encryption scheme was designed by Open Whisper Systems, which is now Signal, and even uses the Signal protocol library: http://www.cdn.whatsapp.net/security/WhatsApp-Security-White... Of course you got all the metadata going to FB, but it's still a good messenger feature-wise for now, so I'll keep it as a backup in case my favorite privacy-conscious messenger is down again for 10 hours.

What good is e2e encryption that is essentially becomes mere in transit encryption, since WhatsApp will filter your messages BEFORE they are sent to see if it needs to take any action? (Which action is of course phoning home, outside the precious Signal Protocol)

How is it in-transit encryption? How does Facebook decrypt it? Do you have any facts other than "it's Facebook, so it must be bad"?

There is no evidence that messages ever leak outside of WhatsApp via means other than potential unencrypted backups that you may or may not be using at a cloud provider not connected to Facebook or your IME.

If you're targeted by NSO or whatever nation state that would be interested enough in you to compromise you, you got other things to worry about.

Re: Signal is having technical difficulties

#592
post #575

Earlier quoted context omitted.

WhatsApp's encryption scheme was designed by Open Whisper Systems, which is now Signal, and even uses the Signal protocol library: http://www.cdn.whatsapp.net/security/WhatsApp-Security-White... Of course you got all the metadata going to FB, but it's still a good messenger feature-wise for now, so I'll keep it as a backup in case my favorite privacy-conscious messenger is down again for 10 hours.

What good is e2e encryption that is essentially becomes mere in transit encryption, since WhatsApp will filter your messages BEFORE they are sent to see if it needs to take any action? (Which action is of course phoning home, outside the precious Signal Protocol)

I mean that argument applies equally to Signal since you have to use their client and the services are architected in the same way.

WhatsApp does filter messages on the client side but it’s stuff like submitting image hashes to the CP database. If Signal reaches the scale of WhatsApp they will be forced into doing this as well. And nothing in Signal’s architecture prevents this kind of data exfiltration the same as WhatsApp.

Re: Signal is having technical difficulties

#593

Earlier quoted context omitted.

Telegram is insecure and also being swamped with right wingers. Doesn’t seem promising.

i have so much fun in public websites seeing americans fight over right and left. its good entertainment. keep it up. anyways. It will be really difficult to convince my friends to remain on signal. At least they are technically sound. Thinking an excuse to come up with though. i donated money today too.

Indeed. Especially considering that US left would be sort of mid-right, or at best centre-right in most parts of the world.

Re: Signal is having technical difficulties

#594

Earlier quoted context omitted.

https://pp-990.s3.amazonaws.com/12_2019_prefixes_82-86/82450... : form 990 of Signal Foundation. Source: https://projects.propublica.org/nonprofits/organizations/824... Brian Acton is listed as Principal Officer/President You can’t donate to your own company and then claim it for a tax deduction.

Well, you CAN donate to your own company and claim it for a tax deduction, I do it all the time. That being said, this basic point seems like it might explain the whole thing. I can believe that he cannot be the sole (or nearly sole) donor and have the company be a 501(c)(3) rather than a private foundation or similar.

Awesome. Thanks for the info.

Re: Signal is having technical difficulties

#595
post #348

Earlier quoted context omitted.

It's easy. You "gift" the badge to a user via the Signal homepage when making a connection. There's no required connection between the gift-giver and the receiver. Is the person who gifted the badge the same as the receiver? Could very well be, but there's no way to prove that. All you need to store server-side is "this user has the badge until date X".

> Could very well be, but there's no way to prove that. Sure, but espionage and surveillance are rarely about proving anything, they're about making good educated guesses. Besides, the receiver will very likely be among your friends and acquaintances, so the NSA would only have to look at your social circle to find them.

it is amusing that you think you have fair chance if NSA/government really wants to get you. Buy hey if that makes you sleep at night be my guest.

Re: Signal is having technical difficulties

#596

I fully expect to be downvoted to oblivion for this opinion but it needs to be said. Signal has been down for nine hours. the vast majority of people who turned to this platform today as an alternative to Whatsapp or Facebook probably quit looking into it after the first two minutes of that outage. for a platform that bills itself after installation as a suitable drop in replacement for your SMS service (and encourag…

Yup they're already under 99.9% reliability for the year. Never mind WhatsApp this makes them a questionable replacement for SMS. Not only "was" it a disaster for signal the disaster isn't over. Reliability is more important than privacy for messaging most of the time. Some major balls are being dropped here.

> Reliability is more important than privacy for messaging most of the time. Some major balls are being dropped here.

Obviously, The Signal team should have done a better job of coordinating the mass user migration with the WhatsApp team at Facebook. Such a failure. /s

I don't get why some people see the need to bitch about Signal at every opportunity. The criticisms are usually unfair (like this one), missing the point, or a self-centered whine that Signal didn't decide to focus on catering to the whiner.

Re: Signal is having technical difficulties

#597

I fully expect to be downvoted to oblivion for this opinion but it needs to be said. Signal has been down for nine hours. the vast majority of people who turned to this platform today as an alternative to Whatsapp or Facebook probably quit looking into it after the first two minutes of that outage. for a platform that bills itself after installation as a suitable drop in replacement for your SMS service (and encourag…

Facebook, whatsapp, google have all messaging service that are centralized.

> Microservices trade gaming cloud providers for precious pay-by-the-second service for an endless byzantine dumpster fire of almost impossible to diagnose failure conditions.

Distributed systems design is hard, Signal team might not be equipped to deal with the sudden surge of users and this definitely is not a good look. But federated/decentralized servers doesn't make this problem any easier, you still have to diagnose and fix your issue across a fleet of multiple servers. You can offload the problem to users, but then you will not have the adaption to begin with to create this problem.

Re: Signal is having technical difficulties

#598

I fully expect to be downvoted to oblivion for this opinion but it needs to be said. Signal has been down for nine hours. the vast majority of people who turned to this platform today as an alternative to Whatsapp or Facebook probably quit looking into it after the first two minutes of that outage. for a platform that bills itself after installation as a suitable drop in replacement for your SMS service (and encourag…

> A more callous review would suggest that Signal remains centralized because Moxies waiting for an IPO, or an offer from FAANG to buy him out.

If so, they couldn't have picked a worse corporate structure, because their current one forbids this.

Re: Signal is having technical difficulties

#599
post #72

Earlier quoted context omitted.

One of those annoying Telegram users here. I too wish Signal engineers good luck! (Even if I personally mostly use Telegram and hope for Matrix to "win", Signal is a fantastic piece of software as far as I can see, both as an extremely secure (I think) messaging client in its own right and also as an inspiration for other messaging platforms.)

Telegram is not a secure chat application though. It's more similar to Facebook Messenger. You're better off using WhatsApp over it if you care about security. Or obviously Signal. When it comes to Matrix, it's a little trickier. Riot, the most common Matrix client does E2E encryption on DMs and invite only rooms. What I'm not sure is what happens if you send a private message to someone who is using Matrix client th…

Yes. Telegram is not secure. You are better of using messenger or airsend (https://www.airsend.io/). Here is a detailed post on Telegram security (https://heimdalsecurity.com/blog/is-telegram-secure/). E2E encryption is not default it applies to only secure chats.

Re: Signal is having technical difficulties

#600
post #448

Earlier quoted context omitted.

Now this is unexpected, and amazing. This is one of the most frictionless donation buttons ever. I love it. Patreon, Paypal, SEPA transfer, all those are a hassle, comparatively. This donation thing used by Signal works exactly as it should be. Enter numbers, hit enter, done. No "please cookie us", no 20 times transfer to other domains, no account creation, and they also don't require stuff like MasterCard 3D secure…

Looks like the donations are powered by Donorbox.org.

And the actual card details are collected by Stripe - looks like an iframe inside an iframe.
Post reply on HN