3 ms·

I wanted to disagree with the headline. Then I read the article and do see their point. I’ve been a big proponent of Signal for years and donated for the first

by tailspin2019 6y ago

I wanted to disagree with the headline. Then I read the article and do see their point. I’ve been a big proponent of Signal for years and donated for the first time during their outage. But I do think this is a conversation worth having. I’d also like to understand more about this: > In fact, the Signal server code [0] hasn’t even been updated since April 2020. You’re telling me it’s undergone no changes? [0]: https://github.com/signalapp/Signal-Server https://github.com/signalapp/Signal-Server

solstice 6y ago
If all the interesting stuff happens on the client and the server "just" forwards encrypted messages, why would the server need frequent updates?
- bilal4hmed 6y ago
  if you go to the main git page https://github.com/signalapp https://github.com/signalapp you can see that changes were made to the server 8 hours ago. So something is happening on the server, the public cant see it. I definitely would like to see whats happening given. I trust them, but we definitely need to see whats on the server code.
  - tailspin2019 6y ago
    I think those changes could just be Pull Requests? Not necessarily code merged to master/main. Unless you’re spotting something that I’m not?
    - bilal4hmed 6y ago
      the last PR was 9 hours ago https://github.com/signalapp/Signal-Server/pulls https://github.com/signalapp/Signal-Server/pulls while the main page says update was 8. Thats what threw me off
  - cevn 6y ago
    I believe the 8 hours ago activity is from someone opening a PR, not some weird trick to update git repositories without being seen.
mecanicox 6y ago
I disagree too, I known the people behind signal and signal protocol by far 10 years, I been see their work for a long time in different fields, when I read "We can do better than Signal" It's a natural thought human to find better in all things, but I don't really see more in the article

solstice 6y ago

If all the interesting stuff happens on the client and the server "just" forwards encrypted messages, why would the server need frequent updates?

bilal4hmed 6y ago
if you go to the main git page https://github.com/signalapp https://github.com/signalapp you can see that changes were made to the server 8 hours ago. So something is happening on the server, the public cant see it. I definitely would like to see whats happening given. I trust them, but we definitely need to see whats on the server code.
- tailspin2019 6y ago
  I think those changes could just be Pull Requests? Not necessarily code merged to master/main. Unless you’re spotting something that I’m not?
  - bilal4hmed 6y ago
    the last PR was 9 hours ago https://github.com/signalapp/Signal-Server/pulls https://github.com/signalapp/Signal-Server/pulls while the main page says update was 8. Thats what threw me off
- cevn 6y ago
  I believe the 8 hours ago activity is from someone opening a PR, not some weird trick to update git repositories without being seen.

mecanicox 6y ago

I disagree too, I known the people behind signal and signal protocol by far 10 years, I been see their work for a long time in different fields, when I read "We can do better than Signal" It's a natural thought human to find better in all things, but I don't really see more in the article