71–80 of 230 posts
Earlier quoted context omitted.
Signal is the most secure messaging app out there.
Signal requires a phone number which is linked to identity and precise location.
So let me ask you this: What’s your threat model? Does your threat model require you to hide your location from the Five Eyes?
Earlier quoted context omitted.
Signal is the most secure messaging app out there.
It is not. Session and Matrix alone use the same protocol Signal uses without needing your phone number or google play services.
(I won’t comment on Session, I’m not familiar with the finer details there.)
Earlier quoted context omitted.
Signal is the most secure messaging app out there.
ROFL Signal uses centralized server with closed source (they hidden code for one year until they finally gave up when users nagged them, nobody knows what they did during that year), Signal requires your phone number, Signal doesn't allow third party apps officially and tried to push some shady crypto, I mean how many red flags you need to avoid such POS app?
Feel free to explain how that affects message integrity/message confidentiality in a negative way.
Earlier quoted context omitted.
IRC is not end‐to‐end encrypted.
You could use a secure encrypted IRC-like protocol like Pest[0], though. [0]: https://pestnet.io
Cached copy here: https://web.archive.org/web/20220915015328/https://pestnet.i...
Reminds me a bit of SILC: http://www.silcnet.org/
Still going to struggle with UX on a phone though...
Don't use messengers that ask for your phone number and aren't end-to-end encrypted. Use services that store as little data as possible. If data is stored, it can be given away and I would assume that it will be given away. Telegram disguises itself as encrypted chat app, when it is actually just a regular centralized plaintext messenger that has an encryption feature that nobody uses.
Which ones don't ask for a phone number?
Earlier quoted context omitted.
But they are encrypted. I think you're looking for e2ee, which it advertises only for Secret Chats.
Transport encryption does not make it private . Optional e2ee is as good as no e2ee. And they rolled their own crypto... For some reason my non-technical friends still would be very surprised to learn that Whatsapp is more private than Telegram.
Moxie also "rolled his own crypto". "Rolling your own crypto" is typically used disparagingly by those who claim moral or intellectual superiority over the competition. The Signal Protocol was rolled by someone, yes? The version of MTProto that had vulnerabilities discovered was deprecated many years ago.
Earlier quoted context omitted.
Signal is the most secure messaging app out there.
as i said, the MOBILE NUMBER IS A PII and the government needs just that bit to extract you from your home and subject you to anything they deem necessary in order to silence you. this is not a fairy tale i am larping about. "sealed sender" or whatever BS tech you throw at the wall doesnt make you secure. if your number can be found out, your goose is cooked.
We are quite many where the threat model does not depend on hiding our phone number from the government.
Earlier quoted context omitted.
I add IRC to the Mix
IRC is not end‐to‐end encrypted.
I remember IRC very fondly, but I feel it has a lot of baggage that makes it difficult to bring into the modern era.
This blog post (not mine) explains it quite well: https://jlu5.com/blog/im-tired-of-irc-heres-why
Earlier quoted context omitted.
All the hating on Signal but for me it's the best and fits my threat model. I live in the UK and by all accounts I'm pretty unremarkable - I want privacy but not overly worried about anonymity, I also wanted something that I could persuade family and friends to use. Signal works perfectly in my use case, my friends and family happily switched over to it where when I tried to help my parents set up Matrix it was super…
Signal is great until your family member's phone breaks, and you have to explain to them that their messages are gone forever. Allow us to choose to enable backups, Signal!
They are encrypted with a key you have to note down somewhere though, so if you don't prepare for it the messages are, in fact, gone forever.
Earlier quoted context omitted.
Signal is the most secure messaging app out there.
Signal requires a phone number which is linked to identity and precise location.
I live in a country with strict KYC on phone numbers - my signal account uses a phone number from a different country in the world, not associated with any person in a country I have never been to and activated in a very odd location once only before being destroyed.
If you actually care about security / privacy to the extent of hiding from state actors then it is trivial to do. If you are cosplaying as a privacy enthusiast, then different matter and we can all bang on about open-source, audits, 14 eyes, tor, monero.