this post was submitted on 15 Sep 2021
67 points (93.5% liked)

Privacy

31253 readers
960 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] dreeg_ocedam@lemmy.ml 8 points 3 years ago* (last edited 3 years ago) (58 children)

It also has several questionable endorsements and users, such as Jack Dorsey ( Twitter’s founder ), Elon Musk, and Mark Zuckerberg ( Facebook’s founder ).

Since when does Zuckerberg endorses Signal?

The best way to describe federation, is to think of email

The best way to do private/secure messenging is to do it similarly to the least private and secure messaging protocol in use?

Phone # Identifiers

This entire section completely ignores that Signal isn't designed to talk to random people. It's designed to talk to your friends/family/coworkers, who most likely already have your phone number. It makes it super easy to migrate. There's no way my grandma would be able to add me on briar...

It also completely ignores the work that is being put into adding username that would allow you to talk to people without having to give them your phone number.

It also completely ignores Signal's history. Initially it started as a way to encrypt SMS, so phone number were not an option anyway.

Signals database, which we must assume is compromised due to its centralized and US domiciled nature [...] Message senders and recipients

Except that they don't have the message senders thanks to sealed sender

Recently, signal has been attempting to integrate a cryptocurrency called MobileCoin, into the app itself. What a messaging platform has to do with an obscure cryptocurrency is a little vague; but there is probably some money driving this. Since Marlinspike doesn’t allow 3rd party clients, it is impossible to avoid these types of unwanted “features”.

Payment in Signal has been a major request since the migration from WhatsApp. In multiple countries WhatsApp has a payment feature that is hugely popular. At least they try to improve on such feature by using crypto to make it private, while not using proof of work which destroys the environment. And it's not like they have actually shipped it. It's only in the beta channel in a few countries...

Signal’s use luckily never caught on by the general public of China ( or the Hong Kong Administrative region ), whose government prefers autonomy, rather than letting US tech control its communication platforms

Yeah, it's obviously because of that, and Chinese apps are a heaven of privacy and zero state censorship.

[–] tomtom@lemmy.ml 3 points 3 years ago (1 children)

Federation increases censorship resistance. I do not think it necessarily decreases privacy, although having metadata strewn across multiple servers may be a risk. Still, I think the comparison with email is a bit of a strawn man argument, since it is not only the federated nature of email which makes it easy to surveil but also the fact it is unencrypted by default.

Moreover, email these days is concentrating in the hands of a small number of providers (gmail, etc).

XMPP seems a lot more distributed at this point in time.

[–] dreeg_ocedam@lemmy.ml 2 points 3 years ago

Federation makes it much harder to keep metadata private, though you could technically achieve the level of privacy found in Signal, it's not easy.

In practice, Signal is a lot better at protecting your metadata than Matrix and XMPP.

Now that matrix has a lot of different clients and implementation, of would be super hard for them to implement something like Sealed Sender, which Signal was able to deploy very easily. I find it very unlikely that matrix will end up fixing its privacy issues. While Signal will be able to evolve and fix them. They are currently working on usernames for example.

load more comments (56 replies)