5 ms·
They've already made the APK available directly on their website for over a year now.[0][1] It works just fine (albeit a little heavy on battery usage) without
by dublinben 8y ago
They've already made the APK available directly on their website for over a year now.[0][1] It works just fine (albeit a little heavy on battery usage) without the Google Play Store or Google Play Services. What more do you really want?
[0]https://signal.org/android/apk/ https://signal.org/android/apk/
[1]https://whispersystems.discoursehosting.net/t/how-to-get-signal-apks-outside-of-the-google-play-store/808/15 https://whispersystems.discoursehosting.net/t/how-to-get-sig...
- mhkool 8y agoThe article is clear: download from the Signal site is not secure.
- vajrabum 8y agoChecksummed but not signed.
- lordlimecat 8y agoSSL provides integrity guarantees.
- zzzcpan 8y agoOnly a bit of transport level integrity. But it doesn't make your average hosting provider into a high assurance one or its servers, OSes, software stacks, etc. Quite known problem since the cryptocurrency era.
- lordlimecat 8y agoWhich is maybe why Moxie is encouraging people to rely on Google Play Store. If you are so concerned about state-level actors that play store is untenable to you, signal and android on commodity hardware are probably not the solutions you want anyways.
- UncleMeat 8y agoAnd f-droid somehow is immune to this?
- lordlimecat 8y agoBased upon what? The download is served via HTTPS, and offers a checksum also secured via HTTPS. Are we entertaining security models in which PKC is considered "not secure"? Or are we just going by the author's ignorant or disingenuous (depending on how you interpret his words) statements?
- soperj 8y ago>What more do you really want? For it to be on F-Droid. I think that much was clear.
- angry_octet 8y agoYou can get Signal from the developers, Play Store or Apple App Store. No where else is genuine, all possibly backdoored. Why dilute that message for the 0.01% of users who would use F-Droid?
- xvector 8y agoPlease actually read the article before saying that the accusations are invalid.
- tptacek 8y agoPlease don't insinuate that someone hasn't read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that." https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html