5 ms·

That's totally false. Here's the client you can download, compile, and side-load yourself: https://github.com/signalapp/Signal-Android https://github.com/signal

That's totally false. Here's the client you can download, compile, and side-load yourself: https://github.com/signalapp/Signal-Android https://github.com/signalapp/Signal-Android And here's the server implementation you can also run yourself: https://github.com/signalapp/Signal-Server https://github.com/signalapp/Signal-Server Telegram has also been exploited multiple times, while signal has held up against a US federal subpoena. https://www.theverge.com/2016/10/4/13161026/signal-subpoena-court-order-encryption-police-open-whisper https://www.theverge.com/2016/10/4/13161026/signal-subpoena-...

riedel 6y ago
There is also fdroid repos such as [1] that contain signal. Fdroid policy requires approval from the author to be included, which is a bit weird take at FLOSS. [1] https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo?fingerprint=C44D58B4547DE5096138CB0B34A1CC99DAB3B4274412ED753FCCBFC11DC1B7B6 https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo?fing...
berkes 6y ago
I did not say, nor wanted to imply that Signal is not FLOSS. Just that Signal is not on F-Droid. Which has a bit of a history and some drama. It was there, log ago. Still textsecure back then. Sure, you can build it yourself. And from there, with some hoops to jump, install it on your phone over adb (it's what I did). But that is far from fdroid or some other app store. E.g. there are no updates, which is a crucial feature in a security-critical app.
wil93 6y ago
> Telegram has also been exploited multiple times Source?
- j-james 6y ago
  Here's one: https://www.zdnet.com/article/telegram-voicemail-hack-used-against-brazils-president-ministers/ https://www.zdnet.com/article/telegram-voicemail-hack-used-a...
  - tpoacher 6y ago
    This had nothing to do with code vulnerabilities let alone open-source in general. It was a social engineering hack relying on default voicemail passwords.

riedel 6y ago

There is also fdroid repos such as [1] that contain signal. Fdroid policy requires approval from the author to be included, which is a bit weird take at FLOSS. [1] https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo?fingerprint=C44D58B4547DE5096138CB0B34A1CC99DAB3B4274412ED753FCCBFC11DC1B7B6 https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo?fing...

berkes 6y ago

I did not say, nor wanted to imply that Signal is not FLOSS. Just that Signal is not on F-Droid. Which has a bit of a history and some drama. It was there, log ago. Still textsecure back then. Sure, you can build it yourself. And from there, with some hoops to jump, install it on your phone over adb (it's what I did). But that is far from fdroid or some other app store. E.g. there are no updates, which is a crucial feature in a security-critical app.

wil93 6y ago

> Telegram has also been exploited multiple times Source?

j-james 6y ago
Here's one: https://www.zdnet.com/article/telegram-voicemail-hack-used-against-brazils-president-ministers/ https://www.zdnet.com/article/telegram-voicemail-hack-used-a...
- tpoacher 6y ago
  This had nothing to do with code vulnerabilities let alone open-source in general. It was a social engineering hack relying on default voicemail passwords.