6 ms·
I don’t want my messages to be stored anywhere other than on my phone. I hate when companies push this bullshit on you. I keep on getting reminders to set a pin
by tguedes 6y ago
I don’t want my messages to be stored anywhere other than on my phone. I hate when companies push this bullshit on you. I keep on getting reminders to set a pin and I can’t turn it off.
I think one of the issues with software is that because it’s infinitely extensible, people just add more and more features, they don’t know when to stop. So they keep pushing features that satisfy 10% of their users to the detriment of the 90%. Slowly the app becomes bloated and extremely confusing to use.
- emerongi 6y agoMost people want this, although I agree it should be optional.
- sneak 6y agoThe 90% want their message history synced across devices.
- tguedes 6y agoThen use What’s App, there are a million solutions that solves your problem, signal was the only serious app that doesn’t store my messages somewhere else.
- themihai 6y agoyeah, across devices not across the world. What stops your devices being synchronised over lan/wifi network?
- sneak 6y agoThe cryptographic problem of device authentication is the same whether across the room or the planet.
- Multicomp 6y agoThen establish a handshake between two devices that you want to trust each other in the same way that you add syncthing devices. If they still want to use a pen then there should be an option if it is an alphanumeric string to check a box that says this is managed by a password manager don't remind me for at least 6 months.
- elric 6y agoThe 90% don't have multiple devices. You're conflating "the 90% of the my technically adept friends" with the actual 90%.
- agentdrtran 6y agoThis is a feature critical for wide adoption. Most users will swear off any app that makes it easy for them to lose all their chats.
- tguedes 6y agoThere are a million apps which store messages on a server, those users are already on those apps. The thing that differentiated signal is the data-less functionality.
- enitihas 6y agoNo, the thing that Signal always aimed for was "Making mass surveillance impossible", and "privacy for the masses". If you remove the mass part, you remove the main goal of Signal. The experts can maybe fork Signal, or use Matrix. Then there is always PGP/GPG.
- topranks 6y agoAlso if it doesn’t appeal to “Joe Public” then it will remain niche and most people will be stuck using other things to reach friends and family.
- petre 6y agoPINs kind of hinder that, wouldn't you agree?
- aspenmayer 6y agoIs the Signal server source code and build environment out yet?
- throwaway8941 6y agoIt's been out for at least 4 years. https://github.com/signalapp/Signal-Server https://github.com/signalapp/Signal-Server
- mayneack 6y agoDoes it say that they're storing messages? The examples are all the metadata "Signal provides private groups, private contact discovery, private profiles, etc". I interpreted this as saying that my groups and contacts are synced, not the content of the messages.
- ViViDboarder 6y agoI don’t think they plan to store messages, but essentially conversations and contacts. This is in reaction to the number one most requested feature: Allow usage without a phone number.
- est31 6y agoIf Signal really puts messages onto their servers behind easy to brute force PINs with the only protection being the SGX pixie dust, and maintainers really don't see a problem with it, then the end to end promise of Signal becomes moot and I'd feel that they'd have betrayed their user's privacy. However, this is not what they are announcing. Signal does not store any message content in the cloud. It's only your address book as well as the list of blocked accounts. So that you don't completely start from scratch when you lose your phone. This makes total sense. If you assume that SGX is insecure and Signal can just brute force the PINs (definitely a legitimate view!), then address book equivalent data is already available to Signal in the form of who-talks-to-whom metadata. The only difference is that the metadata needs to be collected over a time span while address books only require short time compromises of the architecture. But this is a minor regression in security, for a large gain in usability.