Mandatory post of my Why not Signal? I wrote a few months ago.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
Signal didnt update the source code for the server a whole year, so I would already consider it closed source. Now they are just making it official (but probably still talking about how open they are).
you forgot XMPP as an alternative. For example the snikket project is developing a XMPP ecosystem with clients for every platform.
Snikket was quite easy to set up and the community is very helpful
Purely conspiracy theory here, but this comes just after the reveal that the FBI tried to get user info. Maybe the FBI weren't happy with the lack of records Signal were keeping and this is a compromise. We have seen this sort of thing before. Gov wants info, an extra closed layer is created. If it's not this, the timing is unfortunate.
Anyway, the blog post is very vague. In all those paragraphs they don't even mention how this new implementation works. Just that the way it works now isn't enough. Maybe the interfaces they mention becoming public will help understand it better, but of course the code is closed and unreleased so we'll never really know.
Holy crap I didn't even think about this! It's totally possible and has happened before as you said!
They're probably going to go the way of Reddit. Slowly making their code proprietary until all of it is, taking all community contributions with it.
XMPP, and Matrix are going well. Session I think is an alternative to Signal, but the problem you'll find is how many contacts do you actually have on Session... Matrix is probably the best option as it also can bridge to so many other services.
i use xmpp for myself. it's absolute god
We got problems around matrix (metadata) and signal (as you seen in the post) but i do not hear much about xmpp is bad :P
My concern about XMPP is how much the server knows about you/contacts. Or you have to install E2EE plugins. Or you have to set it up for Tor. It's annoying. HOWEVER, it does have the advantage of security separation, instead of having it all wrapped up into a single point of failure.
look i feel you and indeed XMPP admins can know a lot and even reset your password if they want and but the thing is some xmpp servers are big and i'm sure they will not ruin their reputation that easily.
Also the huge plus with XMPP is that setting up a raspberry pi at home is pretty easy so there shouldn't be a need for big servers. In the future the one IT person in every Family/Friendgroup could set up snikket and have friends and family use it.
I doubt we will find a chat solution that's more secure than that.
I just realised something: if every message is e2ee by default as they claim, how the hell do they plan on spam filtering them from the server side?
It wouldn't be so bad if I wasn't required to hand them a phone number and my metadata.
Therefore I'm choosing anonymous platforms.
Other alternatives: https://lbry.tv/@AlphaNerd:8/forks-of-signal-messenger-%28in-case-it:d
Also, in my experience, jami does not work that well.
Can one get a 10 line summary, or simply a list of these forks instead of a 10+ minute video?
It can be very tempting to immediately jump on the "ban signal" bandwagon, but I think it would be wise to take a step back and understand where they're coming from.
In reading the blog post their focus is on user privacy as their top priority. I don't believe signal would make this decision without privacy in mind. What's the alternative?
If spammers run rampant, Signal has a bigger privacy nightmare on their hands. Maybe by a miracle you got Grandpa to join you on signal. But a spammer then reached out to him with "hot young singles in your area" and Grandpa just had to click. Now suddenly Grandpa's retirement savings are gone.
So I'm not saying it's not worrisome. I'm saying let's remain open-minded. After all, it's nearly impossible to have 100% open source software in any stack. You're either using an AMD or Intel CPU. They're both closed source, but they allow you to interact with a privacy community.
I agree, this is not necessarily good but signal is still great!
Who could have seen this coming? Absolutely no one ;)
/s(arcasm)
/b(ackToReddit)
Is there a Delta Chat group for Lemmy users?
There is no official one AFAIK, but you're welcome to make your own!
For Briar on Linux, there's Anbox, but at the moment you have to use separate accounts.
I'm here to say this is a welcome addition. I've received 2 spam messages in the last few months, which is an increase from 0 in the last few years I've used Signal. I'm glad they're getting ahead of this cat and mouse game and hope people don't get all paranoid. The client is still open source. Your payloads are all still E2EE.
When I received spam I always clicked to block and report button if it's possible. I don't think there is need to go into closed source for this.
Fair argument tho.
There are ways to figh spam without going closed source, although the lient is open source and E2EE its still necessary to have everything open