4 ms·

Please note that of the technologies tptacek listed, the only one which can operate in distributed fashion is Matrix.[0] Wire is attempting to pursue decentral

Please note that of the technologies tptacek listed, the only one which can operate in distributed fashion is Matrix.[0] Wire is attempting to pursue decentralization, but federation is not (yet) in their roadmap.[1] [0] https://github.com/matrix-org/synapse https://github.com/matrix-org/synapse [1] https://medium.com/@wireapp/wire-server-code-now-100-open-source-the-journey-continues-88e24164309c https://medium.com/@wireapp/wire-server-code-now-100-open-so...

marknadal 9y ago
I don't know why but Signal has always scared me - I think it was when I noticed it sharing my contacts with their server to "find my friends" when I never consented. Matrix is looking good, but again not P2P only federated. This is why we are trying to do fully P2P end-to-end encryption like with https://hackernoon.com/so-you-want-to-build-a-p2p-twitter-with-e2e-encryption-f90505b2ff8 https://hackernoon.com/so-you-want-to-build-a-p2p-twitter-wi... .
- eximius 9y ago
  They don't. https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/
- uph 9y ago
  We’ve designed the Signal service to minimize the data we retain about Signal users, so the only information we can produce in response to a request like this is the date and time a user registered with Signal and the last date of a user’s connectivity to the Signal service. Notably, things we don’t have stored include anything about a user’s contacts (such as the contacts themselves, a hash of the contacts, any other derivative contact information), anything about a user’s groups (such as how many groups a user is in, which groups a user is in, the membership lists of a user’s groups), or any records of who a user has been communicating with. All message contents are end to end encrypted, so we don’t have that information either. https://signal.org/bigbrother/ https://signal.org/bigbrother/
  - emddudley 9y ago
    Ok, that's good. But Signal automatically created conversations with people in my address book who I never want to communicate with via Signal. I didn't authorize it, the app did it automatically. I think that is what the grandparent was referring to.
    - uph 9y ago
      https://support.signal.org/hc/en-us/articles/115005045728-Does-Signal-send-my-number-to-my-contacts- https://support.signal.org/hc/en-us/articles/115005045728-Do...
    - deleted 9y ago
      [deleted]
- nacs 9y ago
  > my contacts with their server to "find my friends" when I never consented. I installed Signal a few days ago for the first time and there was definitely a prompt, with an easy way to skip it, before it did the find my friends thing. The wording also seemed to indicate that only the hashes of the numbers would be uploaded but not sure if thats actually true.
  - vidyesh 9y ago
    How does Signal know my contact is using Signal? Signal periodically sends truncated cryptographically hashed phone numbers for contact discovery. Names are never transmitted, and the information is not stored on the servers. The server responds with the contacts that are Signal users and then immediately discards this information. Your phone now knows which of your contacts is a Signal user and notifies you if your contact just started using Signal. https://support.signal.org/hc/en-us/articles/115005045728-Does-Signal-send-my-number-to-my-contacts- https://support.signal.org/hc/en-us/articles/115005045728-Do...
deleted 9y ago
[deleted]

marknadal 9y ago

I don't know why but Signal has always scared me - I think it was when I noticed it sharing my contacts with their server to "find my friends" when I never consented. Matrix is looking good, but again not P2P only federated. This is why we are trying to do fully P2P end-to-end encryption like with https://hackernoon.com/so-you-want-to-build-a-p2p-twitter-with-e2e-encryption-f90505b2ff8 https://hackernoon.com/so-you-want-to-build-a-p2p-twitter-wi... .

eximius 9y ago
They don't. https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/
uph 9y ago
We’ve designed the Signal service to minimize the data we retain about Signal users, so the only information we can produce in response to a request like this is the date and time a user registered with Signal and the last date of a user’s connectivity to the Signal service. Notably, things we don’t have stored include anything about a user’s contacts (such as the contacts themselves, a hash of the contacts, any other derivative contact information), anything about a user’s groups (such as how many groups a user is in, which groups a user is in, the membership lists of a user’s groups), or any records of who a user has been communicating with. All message contents are end to end encrypted, so we don’t have that information either. https://signal.org/bigbrother/ https://signal.org/bigbrother/
- emddudley 9y ago
  Ok, that's good. But Signal automatically created conversations with people in my address book who I never want to communicate with via Signal. I didn't authorize it, the app did it automatically. I think that is what the grandparent was referring to.
  - uph 9y ago
    https://support.signal.org/hc/en-us/articles/115005045728-Does-Signal-send-my-number-to-my-contacts- https://support.signal.org/hc/en-us/articles/115005045728-Do...
  - deleted 9y ago
    [deleted]
nacs 9y ago
> my contacts with their server to "find my friends" when I never consented. I installed Signal a few days ago for the first time and there was definitely a prompt, with an easy way to skip it, before it did the find my friends thing. The wording also seemed to indicate that only the hashes of the numbers would be uploaded but not sure if thats actually true.
- vidyesh 9y ago
  How does Signal know my contact is using Signal? Signal periodically sends truncated cryptographically hashed phone numbers for contact discovery. Names are never transmitted, and the information is not stored on the servers. The server responds with the contacts that are Signal users and then immediately discards this information. Your phone now knows which of your contacts is a Signal user and notifies you if your contact just started using Signal. https://support.signal.org/hc/en-us/articles/115005045728-Does-Signal-send-my-number-to-my-contacts- https://support.signal.org/hc/en-us/articles/115005045728-Do...

deleted 9y ago

[deleted]