this post was submitted on 03 Nov 2021
90 points (96.9% liked)

Privacy

31918 readers
822 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

"Centralised messenger Signal has just announced that they are making part of their server software closed source. They claim it is to fight spam, but by using closed source they make it impossible for outsiders to verify the truth. This is worrying.

We really, really need a fully open, decentralised alternative to Signal.

There are several alternatives being developed, please support them:

➡️ @matrix

➡️ @delta

➡️ @briar

➡️ @Jami "

top 50 comments
sorted by: hot top controversial new old
[–] dessalines@lemmy.ml 33 points 3 years ago (18 children)

Mandatory post of my Why not Signal? I wrote a few months ago.

[–] baobab@le.honeypot.im 9 points 3 years ago* (last edited 3 years ago)

Thanks for sharing, it was a good read.

load more comments (17 replies)
[–] nutomic@lemmy.ml 23 points 3 years ago (9 children)

Signal didnt update the source code for the server a whole year, so I would already consider it closed source. Now they are just making it official (but probably still talking about how open they are).

load more comments (9 replies)
[–] sexy_peach@feddit.de 19 points 3 years ago (1 children)

you forgot XMPP as an alternative. For example the snikket project is developing a XMPP ecosystem with clients for every platform.

[–] jazzfes@lemmy.ml 9 points 3 years ago

Snikket was quite easy to set up and the community is very helpful

[–] newhoa@lemmy.ml 18 points 3 years ago* (last edited 3 years ago) (1 children)

Purely conspiracy theory here, but this comes just after the reveal that the FBI tried to get user info. Maybe the FBI weren't happy with the lack of records Signal were keeping and this is a compromise. We have seen this sort of thing before. Gov wants info, an extra closed layer is created. If it's not this, the timing is unfortunate.

Anyway, the blog post is very vague. In all those paragraphs they don't even mention how this new implementation works. Just that the way it works now isn't enough. Maybe the interfaces they mention becoming public will help understand it better, but of course the code is closed and unreleased so we'll never really know.

[–] AgreeableLandscape@lemmy.ml 3 points 3 years ago* (last edited 3 years ago)

Holy crap I didn't even think about this! It's totally possible and has happened before as you said!

[–] AgreeableLandscape@lemmy.ml 13 points 3 years ago (4 children)

They're probably going to go the way of Reddit. Slowly making their code proprietary until all of it is, taking all community contributions with it.

load more comments (4 replies)
[–] danie10@lemmy.ml 11 points 3 years ago

XMPP, and Matrix are going well. Session I think is an alternative to Signal, but the problem you'll find is how many contacts do you actually have on Session... Matrix is probably the best option as it also can bridge to so many other services.

[–] bilb@lemmy.ml 9 points 3 years ago (1 children)

Weird, I have never once gotten any unsolicited messages on Signal.

load more comments (1 replies)
[–] esmail_el_bob@lemmy.ml 8 points 3 years ago (1 children)

i use xmpp for myself. it's absolute god

We got problems around matrix (metadata) and signal (as you seen in the post) but i do not hear much about xmpp is bad :P

[–] Lynda@lemmy.ml 4 points 3 years ago (1 children)

My concern about XMPP is how much the server knows about you/contacts. Or you have to install E2EE plugins. Or you have to set it up for Tor. It's annoying. HOWEVER, it does have the advantage of security separation, instead of having it all wrapped up into a single point of failure.

[–] esmail_el_bob@lemmy.ml 3 points 3 years ago (1 children)

look i feel you and indeed XMPP admins can know a lot and even reset your password if they want and but the thing is some xmpp servers are big and i'm sure they will not ruin their reputation that easily.

[–] sexy_peach@feddit.de 1 points 3 years ago

Also the huge plus with XMPP is that setting up a raspberry pi at home is pretty easy so there shouldn't be a need for big servers. In the future the one IT person in every Family/Friendgroup could set up snikket and have friends and family use it.

I doubt we will find a chat solution that's more secure than that.

[–] AgreeableLandscape@lemmy.ml 8 points 3 years ago

I just realised something: if every message is e2ee by default as they claim, how the hell do they plan on spam filtering them from the server side?

[–] Lynda@lemmy.ml 5 points 3 years ago (1 children)

It wouldn't be so bad if I wasn't required to hand them a phone number and my metadata.

Therefore I'm choosing anonymous platforms.

[–] powerbling@lemmy.ml 4 points 3 years ago (1 children)

Other alternatives: https://lbry.tv/@AlphaNerd:8/forks-of-signal-messenger-%28in-case-it:d

Also, in my experience, jami does not work that well.

[–] mukt@lemmy.ml 8 points 3 years ago

Can one get a 10 line summary, or simply a list of these forks instead of a 10+ minute video?

[–] DamnGoodTech@lemmy.ml 4 points 3 years ago (1 children)

It can be very tempting to immediately jump on the "ban signal" bandwagon, but I think it would be wise to take a step back and understand where they're coming from.

In reading the blog post their focus is on user privacy as their top priority. I don't believe signal would make this decision without privacy in mind. What's the alternative?

If spammers run rampant, Signal has a bigger privacy nightmare on their hands. Maybe by a miracle you got Grandpa to join you on signal. But a spammer then reached out to him with "hot young singles in your area" and Grandpa just had to click. Now suddenly Grandpa's retirement savings are gone.

So I'm not saying it's not worrisome. I'm saying let's remain open-minded. After all, it's nearly impossible to have 100% open source software in any stack. You're either using an AMD or Intel CPU. They're both closed source, but they allow you to interact with a privacy community.

[–] sexy_peach@feddit.de 2 points 3 years ago

I agree, this is not necessarily good but signal is still great!

[–] LLVMcompile@lemmy.ml 4 points 3 years ago (1 children)

Who could have seen this coming? Absolutely no one ;)

/s(arcasm)

[–] hello_lebbit@lemmy.ml 3 points 3 years ago

/b(ackToReddit)

[–] Echedenyan@lemmy.ml 3 points 3 years ago (1 children)

Is there a Delta Chat group for Lemmy users?

[–] AgreeableLandscape@lemmy.ml 5 points 3 years ago

There is no official one AFAIK, but you're welcome to make your own!

[–] ziproot@lemmy.ml 1 points 3 years ago

For Briar on Linux, there's Anbox, but at the moment you have to use separate accounts.

[–] KLISHDFSDF@lemmy.ml 1 points 3 years ago (3 children)

I'm here to say this is a welcome addition. I've received 2 spam messages in the last few months, which is an increase from 0 in the last few years I've used Signal. I'm glad they're getting ahead of this cat and mouse game and hope people don't get all paranoid. The client is still open source. Your payloads are all still E2EE.

[–] blkpws@lemmy.ml 16 points 3 years ago (1 children)

When I received spam I always clicked to block and report button if it's possible. I don't think there is need to go into closed source for this.

[–] gmate8@lemmy.ml 3 points 3 years ago* (last edited 3 years ago)

Fair argument tho.

[–] hello_lebbit@lemmy.ml 11 points 3 years ago (1 children)

There are ways to figh spam without going closed source, although the lient is open source and E2EE its still necessary to have everything open

load more comments (1 replies)
load more comments (1 replies)
load more comments
view more: next ›