Link to article from main Lemmy❤️ developer about Signal privacy. Mostly fair points. I kinda distrust so centralized services but basically we have no other options (Matrix is buggy in many aspects). What can you say about this article?
My question to those who think Signal is a honeypot is when will they trigger it? Signal gets subpoenaed fairly often amd it always returns next to nothing. If signal is a CIA project, they probably would have used it by now.
yup. Now i don’t think it is honeypot. Simple reason: it is pointless. Government already has WhatsApp. Why bother to create another messenger with very small userbase to spy on 0.05% people on earth in such a difficult way: encryption, different anti-spy practices?) It is not rationale.
Many great answers in here but can someone address this point?
Signal could very well be another Crypto AG-style honeypot: the Swiss company which provided secure communications services to ~120 governments throughout the 20th century, and was secretly ran by the CIA and West German Intelligence.
I think if we assume that we run on our devices code that is public we are safe (without additional built in things, backdoors). This code is checked many times so it is good. If you use Android you can use some forks of official Signal client (Molly, Signal-FOSS) and be safe 🙂
Though it is REALLY hard to get the data of what was sent, or who it was sent to, as they’d have to get inside your pc, log in, unlock signal and hope you don’t have disappearing messages.
Except you installed Signal on your PC, if not encrypted, its pretty easy to get all messages that are synced from the day you setup the sync with your phone.
Except you use a Luks encrypted device or somethinf similar. Bitlocker failed way too many times in history to be actually secure.
I'm just waiting for the EU's Digital Markets Act (DMA), that requires interoperability between protocols (messenger, whatsapp, that apple thing, signal, matrix, etc., to kick in. Once that happens, I'll take a closer look at matrix.
Matrix is also being rewritten in Go and one day, they'll hopefully support decentralised identities (aka your identity isn't tied to a server). When both are implemented, I think they'll be superior to many things out there.
As to the article: yawn. Proof is lacking everywhere and the "it requires a telephone number" argument just keeps cropping up. Without a telephone number, what is the best way to discover your friends and family on a new network? If someone can respond with a viable alternative that doesn't involve sending a message to everybody over some insecure medium, I'm all ears.
Matrix evolution is REALLY cool. Can’t wait for new mobile clients because old have problems with notifications on iOS devices (relatives are using them).
The EU commission who are actually targets of nation states recommend to switch to signal. Also it was tested in court and the data wasn’t there to give.
If you are a target they will go for the weakest link either hack the device or they will go for the other participants device to get the conversation there. They don’t need to break the encryption.
What’s the argument against allowing anyone to host their own signal server? I mean, the code is open sourced, why not allow people to set up their own servers too?
The argument from Signal seems to be that they don't want to expend resources supporting it or potentially federating with them. They do seem to have past experience doing this with CyanogenMod, and it sounds like it went poorly.
This same thing has been reposted here so much. So I am going to copy-paste my original response once again.
Governments routinely fund the development of secure and open communication systems because they themselves benefit from having such communication tools which can be trusted. By the logic presented in this "essay", one shouldn't be using the internet at all. What you need to check is whether Signal's technical claims about its encryption is true or not. There is nothing in this article that raises any question on Signal's encryption. We already know how much data Signal has on its users through their responses to various legal subpoenas over the years (spoiler: its pretty much nothing).
I disagree with a lot of things in this message, a server will always know who communicates with whom and when, because it needs to deliver these messages.
We know that Pegasus can infect any device without anyone really noticing and fully taking over. No message service could ever get around that meaning that as long as you use a phone you could always be the target of surveilance.
That means there is an inheritated problem with privacy on phones because no matter what a app will never be safe.
End to end encryption just ensures that there wont be a party constantly monitoring all data and enable mass surveilance.
In theory they infected everyone with Pegasus send the traffic somewhere whwre they could analyze that traffic.
This is posted relatively often, and every time it is posted I feel compelled to note that said dev has not articulated any real reason to consider Signal insecure beyond an implicit conspiracy theory with no real meat to it.
"Signal's use luckily never caught on by the general public of China (or the Hong Kong Administrative region), whose government prefers autonomy, rather than letting US tech control its communication platforms, as most of the rest of the world naively allows."
When you're holding up China as an example for the world to follow for privacy, I have a hard time taking ANYTHING else you're claiming seriously.
Yeah that china comparison majorly derails this argument. When I read it earlier I just glossed over that but now it stands out like a sore thumb.
I don’t know what to think about signal anymore. I suppose as laymen we are pretty much non-players as far as the interest of government groups go, but still I suppose I need to learn a lot more about privacy best practices and threat assessment because some of the article was just difficult.
TLDR, the thought is that the USA is spying on users of Signal because some early funding came from the US government. But the evidence suggests not; indeed, governments worldwide are targeting Signal et al because they don't LIKE that they can't just demand access from providers.
“Signal’s use luckily never caught on by the general public of China (or the Hong Kong Administrative region), whose government prefers autonomy, rather than letting US tech control its communication platforms, as most of the rest of the world naively allows.”
When you’re holding up China as an example for the world to follow for privacy
I interpret that quote to say that China doesn’t trust US tech like the rest of the world does. It’s not saying that China has more privacy and the rest of the world should follow, it’s saying that the rest of the world also shouldn’t be so naively trustworthy of US tech either.
I don’t agree with the Lemmy dev and won’t read his stuff, but I also stopped using Signal years ago. First they won’t allow third party appa or self hosted servers, then they got into Crypto and were building a wallet and currency, which is their right, then they announced a proprietary closed source part of their application that can’t be auditted in the name of fighting spam. Yes there’s a blog post out there about it that they themselves posted and no I can’t look it up atm. I’m personally tired of sacrificing privacy for the name of security so I left.
I moved to Matrix and Element. I have my entire family on it, all nontech folks except me, and none of them have any issues. We use it for text and video constantly and have for years. It’s gotten very intuitive.
To each their own, but Signal isn’t the bastion of free open source privacy anymore imo.
In January 2021, after WhatsApp, the most popular messaging app in the world, became acquired by Facebook, and announced its sharing of data with its new parent, Signal became the top downloaded app in > 70 countries.
Errr…
WhatsApp was acquired by meta back in 2014.
2021 was when WhatsApp released updated terms of service that allowed them to connect to Facebook servers and share the data they needed/wanted to.
This article seems like the average low effort hit piece against signal that keeps on popping up.
I still think signal is the easiest messaging app out there for the average user to gain a little more privacy in their digital lives.
I think a lot of these points have been made better elsewhere.
The extended discussion of hypothetical US interference just because of a tenuous chain of connection to the CIA is just typical US-badism. The US frequently funds tools which they think further geopolitical goals and this doesn’t inherently mean its untrustworthy, just that their methodology of control is more resilient to uncensored speech; the best example of this is TOR, decentralized, anonymous, and created by Naval Research and DARPA. The author can’t concede this point as it’d bring up they’re unsubtly simping for a different colonial power, one who does require such censorship.
Signal’s centralized nature has always been a major criticism (and it’s reasonable), however as a trade off it’s easy to on-board the tech illiterate. It’s nontrivial to set up a Matrix server and I’ve seen the difficulty of migrating activist groups there. It’s good as a long term goal, but one also has to recognize that a person struggling with housing has different concerns and will prefer to use whatever their friends and family do.
Snowden doesn't make any public statements any more without express permission from the Russian government. You can't trust anything he's said in the past few years, especially not since the war began.
Snowden doesn’t make any public statements any more without express permission from the Russian government.
Can you provide sources for this?
It might make sense for him to self-censor to avoid angering one of the few places that are allowing him to stay but even that’s not a given: if he felt something needed to be said badly enough, he’s shown to be the type of person who would rather something be said and take the repercussions on the nose than to leave something unsaid.
The source is that Russia murders its own oligarchs the second they fall out of Putin's favor, and anyone who holds up a blank sign in protest of the regime gets shipped off to the front lines. No way that man would survive a second if he ever went against the party line. Which means he hasn't done so.
It might make sense for him to self-censor to avoid angering one of the few places that are allowing him to stay but even that’s not a given: if he felt something needed to be said badly enough, he’s shown to be the type of person who would rather something be said and take the repercussions on the nose than to leave something unsaid.
And yet he's happily kept his mouth shut about Russia actively committing genocide.
If I were him, I'd get on the next plane to the US and happily spend the rest of my life in Leavenworth rather than allow myself to become a propaganda tool for a bunch of genocidal fascists. The fact that he hasn't done that speaks volumes about his character. None of it's good.
The source is that Russia murders its own oligarchs the second they fall out of Putin’s favor, and ships anyone who holds up a blank sign in protest of the regime gets shipped off to the front lines. No way that man would survive a second if he ever went against the party line. Which means he hasn’t done so.
A simple no would have been sufficient. I’m not interested in baseless speculation. I had hoped you had actual evidence, which would intrigue me greatly. As it is, I have someone’s imagination put to paper.
If I were him, I’d get on the next plane to the US and happily spend the rest of my life in Leavenworth rather than allow myself to become a propaganda tool for a bunch of genocidal fascists.
He’s not saying anything. He’s not being a propaganda tool. You can make a rather weasily attempt to say his not denouncing something is in essence supporting it and thus being a propaganda tool, but that’s a stretch and rather disingenuous.
All of these comments are completely off the rails. He informed us about one of the largest violations of privacy in the history of mankind. For that, he had to go on the run. He ended up in Russia, but not by choice.
If he wants to retire there and just keep his mouth shut, he should have our fucking blessing. The one thing he did was bigger than anything we could ever hope to accomplish lol.
He recommended nostr recently. But based on the recent events in France, they couldn’t decrypt messages from Signal and was used as a mean for “eco-terrorist” to communicate, anf jailed them for that.
Add comment