• tym@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      2
      ·
      edit-2
      9 hours ago

      The irony of you posting this on lemmy, which won’t allow posting from a VPN or masked email addresses is not lost on me.

      The amount of hoops I had to jump through to make this comment and maintain some semblance of privacy is infuriating but at least it’s not reddit I guess?

      But do go on about your security standards…

      Edit: BTW, you can set signal to hide your number completely. Combined with FOSS-based encryption keys on-device makes signal the only choice for trying to maintain freedom of expression globally.

      Nothing will protect anyone from messaging with a snitch who knows how to screenshot though. Food for thought… get to know your neighbors now.

      • ikidd@lemmy.world
        cake
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 hours ago

        It doesn’t matter if you hide the number; at some point they deanonymized you when you signed up.

        Want to be a dick about “hoops”? Get a number that isn’t traceable. It can be done, but it’s tough. I doubt its possible in the countries that really need anonymity of association.

    • hackitfast@lemmy.world
      link
      fedilink
      English
      arrow-up
      29
      ·
      16 hours ago

      I don’t think that the founders are bad people. If you look at their history of work, they have done enormous amounts of work in the computer security sector. The founder, however, did run a cloud based WPA cracking service.

      Meredith Whitaker, who is the president, used to work at Google doing research for “issues related to net neutrality measurement, privacy, security, and the social consequences of artificial intelligence”.

      In 2018 she then staged walkouts at Google over concerns of sexual misconduct and citizen surveillance.

      The people on Signal’s board seem to be trustworthy people with a pretty airtight background. You have to worry more about the mobile operating system compromising you than do you about Signal.

    • aidan@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      16 hours ago

      Does it really matter who made it if you can see the source code? You don’t have to trust them.

      • ballgoat@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 hours ago

        That’s kind of a core tenet of libre/open software, innit? Independently verifiable software that you can change at your pleasure.

          • ballgoat@lemmy.zip
            link
            fedilink
            English
            arrow-up
            2
            ·
            9 hours ago

            Yes, you can use their exact build environment straight from GitHub. You can also use Molly.im which is another app that i think is a fork? Im still investigating it.

  • perestroika@lemm.ee
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    2
    ·
    edit-2
    20 hours ago

    I will use the opportunity to remind that Signal is operated by a non-profit in the jurisdiction called “the US”. This could have implications.

    A somewhat more anarchist option might be TOX. There is no single client, TOX is a protocol, you can choose from half a dozen clients. I personally use qTox.

    Upside: no phone number required. No questions asked.

    Downside: no servers to store and forward messages. You can talk if both parties are online.

  • falynns@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    23 hours ago

    Humans are too stupid to switch from convenience to slightly less convenience even if they get privacy for free. Any amount of discomfort is too much and changing an app is basically death.

    • Vanilla_PuddinFudge@infosec.pub
      link
      fedilink
      English
      arrow-up
      8
      ·
      22 hours ago

      They see no value in it. They don’t see that privacy is proactive measure that can protect you.

      On Facebook, especially in my family, accounts get lost and hacked. One fine day, it might be someone with more influence in the family who’s attacker might make off with stolen bank information or passwords.

      but “that’ll never happen”, right?

  • gamer@lemm.ee
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    15 hours ago

    Anyone know why the Signal app isn’t available on F-Droid? Isn’t it supposed to be open source?

    • notarobot@lemm.ee
      link
      fedilink
      English
      arrow-up
      6
      ·
      12 hours ago

      I think it’s by request. the fdroid team build every single app in their repos which means that they are not always fully up to date, so signal argues that whenever they need to push a security release people on froid would take forever to update.

      I think I’ve had this issue with simplex. I’ve had to wait over 2 weeks for an update. That’s why I’m using obtanium for it instead

  • Steven Tree Baxter@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    11 hours ago

    Compare with Zangi Private Messenger. Yes, every country who has jurisdiction has access. Just ask yourself, which gov do I trust more with my private chats?

  • MochiGoesMeow@lemmy.zip
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    13
    ·
    12 hours ago

    I got tired of asking my family to download yet another app. Went iPhone at this point.

    • e$tGyr#J2pqM8v@feddit.nl
      link
      fedilink
      English
      arrow-up
      6
      ·
      11 hours ago

      How many apps did you ask them to download?

      Personally, I only asked for this one, and everyone who is of importance to me chose to do it.

  • Chaotic Entropy@feddit.uk
    link
    fedilink
    English
    arrow-up
    5
    ·
    23 hours ago

    I would like nothing more, but so few of my contact group are willing to switch away… despite all of Meta’s bullshit. I resent being made to use it whilst their AI/ads encroach further and further.

  • Jaberw0cky@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    23 hours ago

    My wishlist is an app which is not linked to a phone number, is multi platform and has a web app. It should be none US and open source. That isn’t too many requirements and yet nothing seems to full fit the bill? Anyway good luck trying to get school parent’s groups to use something other than WhatsApp.

  • Humanius@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    1
    ·
    edit-2
    2 days ago

    After Trump was elected and inaugurated, Signal has finally been gaining some steam here in the Netherlands.

    It’s still an American company, so it’s not ideal. But it’s still significantly better better than letting a tech giant like Facebook have control over the most commonly used chat app.

    WhatsApp needs to go and Signal is the most likely way in which we can achieve that. We can worry about the American elephant in the room later.

      • Humanius@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        14 hours ago

        But being based in the United States it is still subject to American laws, and that comes with the risk of potential American spying and embargoes. Software from any American entity (be it coorporation or non-profit) comes with that risk.

    • ZMoney@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      20 hours ago

      America is not a monolith. Signal’s developers are very much aware of the risks of operating there and probably already have several escape plans given recent developments. I also think five-eyes probably has access but getting it might be computationally expensive.

    • viking@piefed.ca
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      2 days ago

      There is threema, a Swiss messenger that gained some popularity earlier since they had end to end encryption before whatsapp.

      Unfortunately the source code is not open (even though they do get annual audits with public reports), and the client costs 3 EUR or something (once).

      • Humanius@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 days ago

        Yeah, but Threema has basically no momentum behind it at all at this point.
        I’m putting my social capital behind the option that currently stands the most chance of beating out Whatsapp

          • Humanius@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            2 days ago

            Then by all means keep that momentum going.
            I’m just looking at this from a Dutch perspective, where Signal is seeing by far the most growth.

            • rhabarba@feddit.org
              link
              fedilink
              English
              arrow-up
              0
              arrow-down
              1
              ·
              2 days ago

              You can help making it stronger. That’s what I did in Germany: if people want to contact me, I usually give them my Threema ID first, everything else comes later.

              • Humanius@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                2 days ago

                But my goal is not to move to Threema, my goal is to move away from Whatsapp.
                Signal fits the bill while expending far less social capital convincing people to use it.

        • ornery_chemist@mander.xyz
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          18 hours ago

          FYI, while Threema front-end clients (apps) are open-source (and offer reproducible builds, which is surprisingly uncommon in open-source land), the server component, though supposedly audited, remains closed-source.

          EDIT: for comparison, the Signal server code is mostly open source, but things like the spam filter are closed.

          • sqgl@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            15 hours ago

            Thanks.

            And I didn’t know Signal had spam filters. It makes sense to not make that open source.

            In my circle of 20 there has only been one instance of spam over several years. 3 of us got the same message.

      • philpo@feddit.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        And Switzerlands records in terms of privacy sadly is far worse than most people think - even with the last attack being repelled.

        Matrix (preferably on a non-matrix.org instance) currently is the preferable non US and privacy friendly way.

        • rhabarba@feddit.org
          link
          fedilink
          English
          arrow-up
          0
          ·
          2 days ago

          I don’t know - this hype about Matrix reminds me of XMPP which was similarly popular a decade ago. Today, nobody even remembers it anymore.

    • Kualdir@piefed.social
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      Sadly many still don’t want to switch. My most active chats are in signal now but the large majority of chats are still on whatsapp

  • hansolo@lemmy.today
    link
    fedilink
    English
    arrow-up
    11
    ·
    edit-2
    2 days ago

    It’s ethical because it runs on donations and has a non-profit business model.

    Meta likely spends at least $1 billion a year running WhatsApp.

    Please donate to Signal if you use it.

  • Arcane2077@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 days ago

    I like Signal. I even got all my close friends and family on it, specifically to message me because I won’t use whatsapp. The PIN reminders are annoying it enough to be legitimately holding it back from mass appeal imho

        • Typotyper@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 days ago

          I think it was meant as a security feature in case someone picked up your unlocked phone. It perhaps someone cracked your front screen passcode. I know if you forget your password and have to reset it you lose all previous conversations. It’s very secure this way. Bit of a pain… but secure.

          • Arcane2077@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 days ago

            That’s not even what it is lol.

            And as the other commenter alluded to, defaults matter. You’re not replacing the thing everyone is already using by pitching “here’s an alternative that is better in ways which don’t affect your usage at all, and also you have to dig into the settings to turn off the optional daily popups”

            • Bravo@eviltoast.org
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 day ago

              Yeah someone who cares enough about security to switch to Signal in the first place will be willing to go into the settings to get everything just the way they like it, but everybody else will only keep the app if it doesn’t bug them.

            • sqgl@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              0
              arrow-down
              1
              ·
              1 day ago

              They are monthly not daily popups. They are daily at the start kust to make sure you memorize your PIN, then they peter off.

              However if you ignore a monthly one then it doesn’t disturb you until the next monthly reminder. What is the point of a PIN if it can be ignored?

  • mintiefresh@lemmy.ca
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 days ago

    Wish more of my contact list would switch over to Signal. It’s nearly the same. I don’t see why it’s so hard for some people to just start using Signal instead of WhatsApp.

    Oh well.

    • Kekzkrieger@feddit.org
      link
      fedilink
      English
      arrow-up
      4
      ·
      2 days ago

      Because people are beyond stupid. “i dont want to download another app” - while having an app for almost every other store and bullshit game and whatever

    • Scolding7300@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      “But why, everyone is on WhatsApp”, and also a lot of businesses. “Privacy? I’ve got nothing to hide, what are they gonna do eith my info?”