4 ms·

> Signal is bad as explained previously, it requires Google on your phone to even work. only for notification delivery. The message payload is not part of the

• lucb1e 10y ago
  He never said it was. Google services aren't isolated like normal apps either, as far as I know they can access other app's data (when installing cyanogenmod, I had to install google apps in some weird way from the bootloader because it has to change protected things on the phone). His point of requiring google's stuff to be installed is valid, even if he wrote it thinking payload gets sent over it.
  • qznc 10y ago
    Even if you don't install Gapps, large parts of Android/CyanogenMod are from Google as well. How does installing Gapps make the security worse?
    • lucb1e 10y ago
      Because it's likely someone would have noticed if every AOSP phone called third party servers (or something like that). Plenty of people made Android derivatives, modded it, or just compiled it to toy with. Of course there's no guarantee without a full audit (and even with an audit, they might miss something), but I trust AOSP a lot more than a closed source app suite.
    • antocv 10y ago
      Good question. Stock Android does not, by inspecting network traffic, contact Google servers. Google play services and other GApps, do, and they can be exploited in this traffic, or told by Google to activate other backdoors. Signal with GApps, Google can know which phones, and which users, are using Signal, thats a security vulnerability. Google can infer from their Google-messaging thing, that notifications are sent, and have a high probability of knowing if it is to Signal. Who talks when is leaked to Google.
      • svkkfnisgkcn3ta 10y ago
        >Stock Android does not, by inspecting network traffic, contact Google servers. It does to check for internet access upon connecting to wifi. https://github.com/copperhead/bugtracker/issues/194 https://github.com/copperhead/bugtracker/issues/194