I waddled onto the beach and stole found a computer to use.

🍁⚕️ 💽

Note: I’m moderating a handful of communities in more of a caretaker role. If you want to take one on, send me a message and I’ll share more info :)

  • 374 Posts
  • 1.49K Comments
Joined 2 years ago
cake
Cake day: June 5th, 2023

help-circle

  • I think what they’re saying is that, to a lot of people (myself included), Signal is currently the best option despite being centralized. The decentralized options have UX issues, too small a user base, or aren’t well known enough to have gone through robust security/privacy reviews. While you can’t see what’s running on the signal servers, the app is open source and so far it looks to be encrypting the information correctly and it’s not sending anything but the minimal data to their servers.

    ‘A lot of eyeballs on the code’ is only relevant for open source apps. They were making a comparison between Signal and the many other open source mobile messaging apps.

    You might also find this chart helpful if you’re looking for other alternatives. Personally, I found Signal to be the best one to get my friends and family onto

    https://www.securemessagingapps.com/



  • Otter@lemmy.catoPrivacy@lemmy.mlSignal introduces Remote backups
    link
    fedilink
    English
    arrow-up
    39
    arrow-down
    1
    ·
    7 days ago

    Finally! This was keeping me from recommending Signal to more people

    If you do decide to opt in to secure backups, you’ll be able to securely back up all of your text messages and the last 45 days’ worth of media for free.

    If you want to back up your media history beyond 45 days, as well as your message history, we also offer a paid subscription plan for US$1.99 per month.

    That’s excellent to hear. Hopefully no one abuses the media backups, I would understand if they did it by file sizes
















  • An excerpt

    Jen asked:

    There’s a lot of secure software, that probably people in this room work on, that is developed in the open, and that is used primarily by at-risk users, including things like Tor, Signal, SecureDrop. That’s great, because it makes it easy for folks to contribute. Maybe you don’t want that, I understand that can be hard. But it also makes it easier for people to audit and gain assurance that the app is doing what you claim without having to have, you know, EFF reverse engineer it. Would you be open to making the app open source?

    His answer: “Absolutely not.”

    Why? “I don’t want anybody from the government to have their hooks in how I’m doing what I’m doing. Once you go open source, everybody has access to it. So I’m just going to keep the codebase private at this time.”

    He also claimed that the government can’t learn everything about how an app works by reverse engineering it, which isn’t true.

    I agree with Jen. His answers are very concerning.