7 ms·

Moxie deserves an ACM award for his contributions to crypto but he shouldn't be leading the project. Maybe posting on the Discourse forum was the right thing to

Moxie deserves an ACM award for his contributions to crypto but he shouldn't be leading the project. Maybe posting on the Discourse forum was the right thing to do here. I just see a lot of hostility between Signal employees and those wishing to make the project a little bit better.

kelnos 6y ago
That so-called hostility seems to be pretty one-sided IMO. The response from the Signal dev seemed pretty calm and reasonable, but OP seemed to take it as a personal insult for no reason. Some projects don't want to discuss issues on GitHub and prefer a forum they have control over; that's totally understandable.
- iforgotpassword 6y ago
  That's those projects I don't report issues to and rather maintain local patches for. I'm not gonna sign up to the fivetrillionth forum or bug tracker for your special snowflake software. If you don't allow bug reports via github issues, you won't get mine.
  - nix23 6y ago
    From pure interpretation of your answer, i would say you are the snowflake human here.
    - iforgotpassword 6y ago
      I guess not wanting to sign up with my email adress on servers administered by god knows who with unknown security practices just to help you makes me a special snowflake then.
      - chacha2 6y ago
        Some people go without food. Being too afraid to sign up to a forum has past the point of first world problem.
        iforgotpassword 6y ago
        Obviously; I'm living in the first world, so it shouldn't come as a surprise. It's like saying "Why don't you sell everything you have and dedicate your life to helping those that go without food?" And I'm actually one of those few people who do donate to a charity on a monthly basis. Do you do that? I'm doing that because it costs me money, not time, since I do have enough of the former, not the latter. Which brings me back to the original issue: I just don't want to bother with all the overhead of a sign up, waiting for some email confirmation that doesn't arrive because you self host mail and your mails get swallowed by Gmail, etcpp. Just no. Maybe you just don't want bug reports and patches since you also don't have enough time to handle them anyways, but if you do, just try make it frictionless. You don't need to sell your soul to github or anything, but it's still the number one OSS hosting platform of today, so just go with it. At least for the issue tracker, you can still just use it as a mirror otherwise.
        nix23 6y ago
        It's possible to create a trashmail or other addresses...yes that's possible.
        tinus_hn 6y ago
        Some people have no food, therefore other people should be obliged to do security research for free, while conforming to the whims of any project they encounter.
        nix23 6y ago
        >security research for free He makes no "security research" if he just makes reports on github...he's a troll and nothing else.
      - nix23 6y ago
        Use keepass so you can remember your passwords, dont use the same password everywhere. >with my email adress on servers administered >makes me a special snowflake then No one needs you, it's nice that you live but you are not special like...let's say a snowflake.
        Daho0n 6y ago
        Just stop.
wdb 6y ago
They have been ignoring or brushed off the importance of reported privacy related issues for years. Doesn't built trust to use Signal for me personally
- ryanlol 6y ago
  Could you be more specific about the issues they’ve been ignoring or brushing off?
  - wdb 6y ago
    For a year, they have been reporting reports of the issue wit the IME keyboards. See: https://community.signalusers.org/t/signal-should-warn-users-who-are-likely-using-insecure-ime-apps/10272 https://community.signalusers.org/t/signal-should-warn-users... If you are serious about privacy and secure messenger, you just can't brush off such issues. [1] https://twitter.com/realsexycyborg/status/1197695368105824256 https://twitter.com/realsexycyborg/status/119769536810582425... [2] https://community.signalusers.org/t/signal-should-warn-users-who-are-likely-using-insecure-ime-apps/10272/98 https://community.signalusers.org/t/signal-should-warn-users... [2] https://www.theverge.com/22249391/signal-app-abuse-messaging-employees-violence-misinformation https://www.theverge.com/22249391/signal-app-abuse-messaging...
    - nix23 6y ago
      That's not a problem of Signal but of insecure IME-Apps.
    - ryanlol 6y ago
      Of course they’re brushing this off, there’s simply nothing they can do to solve the problem of compromised platforms. Signal should focus on problems they can realistically solve.
      - Daho0n 6y ago
        Adding a warning is not unrealistic and unsolvable.

kelnos 6y ago

That so-called hostility seems to be pretty one-sided IMO. The response from the Signal dev seemed pretty calm and reasonable, but OP seemed to take it as a personal insult for no reason. Some projects don't want to discuss issues on GitHub and prefer a forum they have control over; that's totally understandable.

iforgotpassword 6y ago
That's those projects I don't report issues to and rather maintain local patches for. I'm not gonna sign up to the fivetrillionth forum or bug tracker for your special snowflake software. If you don't allow bug reports via github issues, you won't get mine.
- nix23 6y ago
  From pure interpretation of your answer, i would say you are the snowflake human here.
  - iforgotpassword 6y ago
    I guess not wanting to sign up with my email adress on servers administered by god knows who with unknown security practices just to help you makes me a special snowflake then.
    - chacha2 6y ago
      Some people go without food. Being too afraid to sign up to a forum has past the point of first world problem.
      - iforgotpassword 6y ago
        Obviously; I'm living in the first world, so it shouldn't come as a surprise. It's like saying "Why don't you sell everything you have and dedicate your life to helping those that go without food?" And I'm actually one of those few people who do donate to a charity on a monthly basis. Do you do that? I'm doing that because it costs me money, not time, since I do have enough of the former, not the latter. Which brings me back to the original issue: I just don't want to bother with all the overhead of a sign up, waiting for some email confirmation that doesn't arrive because you self host mail and your mails get swallowed by Gmail, etcpp. Just no. Maybe you just don't want bug reports and patches since you also don't have enough time to handle them anyways, but if you do, just try make it frictionless. You don't need to sell your soul to github or anything, but it's still the number one OSS hosting platform of today, so just go with it. At least for the issue tracker, you can still just use it as a mirror otherwise.
        nix23 6y ago
        It's possible to create a trashmail or other addresses...yes that's possible.
      - tinus_hn 6y ago
        Some people have no food, therefore other people should be obliged to do security research for free, while conforming to the whims of any project they encounter.
        nix23 6y ago
        >security research for free He makes no "security research" if he just makes reports on github...he's a troll and nothing else.
    - nix23 6y ago
      Use keepass so you can remember your passwords, dont use the same password everywhere. >with my email adress on servers administered >makes me a special snowflake then No one needs you, it's nice that you live but you are not special like...let's say a snowflake.
      - Daho0n 6y ago
        Just stop.

wdb 6y ago

They have been ignoring or brushed off the importance of reported privacy related issues for years. Doesn't built trust to use Signal for me personally

ryanlol 6y ago
Could you be more specific about the issues they’ve been ignoring or brushing off?
- wdb 6y ago
  For a year, they have been reporting reports of the issue wit the IME keyboards. See: https://community.signalusers.org/t/signal-should-warn-users-who-are-likely-using-insecure-ime-apps/10272 https://community.signalusers.org/t/signal-should-warn-users... If you are serious about privacy and secure messenger, you just can't brush off such issues. [1] https://twitter.com/realsexycyborg/status/1197695368105824256 https://twitter.com/realsexycyborg/status/119769536810582425... [2] https://community.signalusers.org/t/signal-should-warn-users-who-are-likely-using-insecure-ime-apps/10272/98 https://community.signalusers.org/t/signal-should-warn-users... [2] https://www.theverge.com/22249391/signal-app-abuse-messaging-employees-violence-misinformation https://www.theverge.com/22249391/signal-app-abuse-messaging...
  - nix23 6y ago
    That's not a problem of Signal but of insecure IME-Apps.
  - ryanlol 6y ago
    Of course they’re brushing this off, there’s simply nothing they can do to solve the problem of compromised platforms. Signal should focus on problems they can realistically solve.
    - Daho0n 6y ago
      Adding a warning is not unrealistic and unsolvable.