15 ms·

It looks like they had been working on adding MobileCoin support server side https://signal.org/blog/help-us-test-payments-in-signal/ https://signal.org/blog/he

• RL_Quine 6y ago
  Yep the date matches perfectly, they hid the signal-server repository explicitly to keep their MobileCoin integration secret for a year. This is bad even for them.
  • kryogen1c 6y ago
    > they hid how did they hide anything? do you know this code has been in production?
    • dogecoinbase 6y ago
      If this code was _not_ in production, they had known vulnerabilites: https://github.com/signalapp/Signal-Server/commit/3432529f9c018d75774ce89f3207b18051c26fe7#comments https://github.com/signalapp/Signal-Server/commit/3432529f9c... There is no interpretation of these events that's a good look, especially for a platform focused on privacy.
      • kryogen1c 6y ago
        we're talking about the code released today.
        • dogecoinbase 6y ago
          All of the code was released today. Up until earlier today, the most recent public commit on the repo was https://github.com/signalapp/Signal-Server/commit/3432529f9c018d75774ce89f3207b18051c26fe7 https://github.com/signalapp/Signal-Server/commit/3432529f9c... , the commit immediately prior to the previously unseen https://github.com/signalapp/Signal-Server/commit/95f0ce181631fef8b1fdb507b7ecf5b71291ff38 https://github.com/signalapp/Signal-Server/commit/95f0ce1816... "Support for advertising payment addresses on profile"
          • kryogen1c 6y ago
            Yes, they released a new feature so theres new code. The only way that violates open-source is if this code has been in production, which no one has any proof of. Apparently everyone thinks opensource means real time access to development.
            • dogecoinbase 6y ago
              Please re-read my comment four posts upthread. It's possible that this code wasn't in production; if so, there were known vulnerabilities left open for months.
• akvadrako 6y ago
  Actually that feels like a reasonable reason for keeping the source temporarily secret. I've been worried about it but now I see they had a good reason I have hope the behavior changes.
  • bilal4hmed 6y ago
    It leaves a bad taste honestly. They've done it once, offered no explanation inspite of people asking all the time. What they have done has eroded trust, whose to say what they have published is the latest ? What more could they be hiding ??
  • deleted 6y ago
    [deleted]
  • arbitrage 6y ago
    > a reasonable reason for keeping the source temporarily secret. that's the crux, isn't it though? lots of people don't. that's a pretty big implicit ask there.
• kryogen1c 6y ago
  im a little confused what the argument is here. TFA is implying a bunch of server code is being updated without telling anyone, violating their open-source stance. then they release a post, possibly in response to criticism, saying they've been working on a major feature thats ready for its beta release. so now youre arguing the feature they chose to work on feels yucky? this is textbook goalpost moving. i use signal and my impression of moxie is extremely positive. at face value, a payment system built by moxie and the signal team with cryptocurrency screams "incredible". kind of taken aback by the overwhelming negativity around here.
  • bilal4hmed 6y ago
    I would agree if the post by Signal would say "Hey, we know the server code hasnt been updated in a while, yall have been asking, so here is the updated source and this is the reason why. We have working to incorporate MobileCoin yada yada" People have been asking about the server code for a while, with zero response or even acknowledgement. No explanation why, no apology.... just boom, new crypto support in our server. Trust us its cool. They knew this would be a bad look from the get go , to they did it in secret.
    • pydry 6y ago
      They might be wanting to get the jump on the competition.
    • Klonoar 6y ago
      I mean, for what it's worth, the MobileCoin bits weren't truly secret - that "turmoil in Signal" article that made the rounds a few months ago explicitly made mention of this, and the recent MOB runup in the past few weeks had rumors of this flying around.
      • codethief 6y ago
        AFAIR there was even a discussion here on HN a few years ago that Moxie had started collaborating with MobileCoin. No news, really.