4 ms·

They probably do not have a leg to stand on legally but what should I do if they ban me? Sue them?

by jeltz 6y ago

sneak 6y ago
How or why would they ban you for publishing software? If they ban end-user accounts that use your client software to connect to their API, that's obviously a bug in your software as it diverges from the behavior of the official client. This is why anyone making an alternative client should be doing so with a fork of upstream that is regularly updated. You'd need to keep it in sync pretty closely. Most official Signal clients autoupdate (a huge security vulnerability in and of itself[1], as SolarWinds demonstrated very nicely for everyone), but not all of them (you can't override the user's systemwide app autoupdate setting on iOS), so they have to maintain BC with out of date versions for at least a few weeks/months. [1]: https://github.com/signalapp/Signal-Desktop/issues/4578 https://github.com/signalapp/Signal-Desktop/issues/4578
- andrepd 6y ago
  That thread is a bit ridiculous, the guy was already told that he can block updates.signal.org if he really wants to inspect the commits first, but he insists there no workaround.
  - sneak 6y ago
    My mitigation strategy for this issue has already been posted in that thread; I didn't file it because of my own computer.
- jeltz 6y ago
  I was referring to banning of users who use third party clients and I do not think it would be particularly hard to do if they really wanted to. You can for example use request patterns or the fact that the unofficial clients do not autoupdate. I doubt that they would go that far, but it would be trivial if they really wanted to.
  - sneak 6y ago
    Banning the set of users that are so passionate about your service that they jumped through hoops to work around your dogshit software is probably not the best decision a product company can make.
    - slenk 6y ago
      Yea but Moxie is trying to make money out of said dogshit software with his crypto editions
      - sneak 6y ago
        FWIW Moxie has claimed to own zero mobilecoin, and Signal/OWS is a nonprofit. You're accusing him of lying.
        orhmeh09 6y ago
        Nothing GP said has to contradict either of these. I think you’re accusing them of accusing him of lying. Was Marlinspike paid for his services to mobilecoin, possibly even as CTO? Be more careful with your accusations. https://www.coindesk.com/signal-founder-may-have-been-more-than-tech-adviser-mobilecoin https://www.coindesk.com/signal-founder-may-have-been-more-t...

They probably do not have a leg to stand on legally but what should I do if they ban me? Sue them?

by jeltz 6y ago

They probably do not have a leg to stand on legally but what should I do if they ban me? Sue them?

How or why would they ban you for publishing software? If they ban end-user accounts that use your client software to connect to their API, that's obviously a bug in your software as it diverges from the behavior of the official client. This is why anyone making an alternative client should be doing so with a fork of upstream that is regularly updated. You'd need to keep it in sync pretty closely. Most official Signal clients autoupdate (a huge security vulnerability in and of itself[1], as SolarWinds demonstrated very nicely for everyone), but not all of them (you can't override the user's systemwide app autoupdate setting on iOS), so they have to maintain BC with out of date versions for at least a few weeks/months. [1]: https://github.com/signalapp/Signal-Desktop/issues/4578 https://github.com/signalapp/Signal-Desktop/issues/4578

andrepd 6y ago
That thread is a bit ridiculous, the guy was already told that he can block updates.signal.org if he really wants to inspect the commits first, but he insists there no workaround.
- sneak 6y ago
  My mitigation strategy for this issue has already been posted in that thread; I didn't file it because of my own computer.
jeltz 6y ago
I was referring to banning of users who use third party clients and I do not think it would be particularly hard to do if they really wanted to. You can for example use request patterns or the fact that the unofficial clients do not autoupdate. I doubt that they would go that far, but it would be trivial if they really wanted to.
- sneak 6y ago
  Banning the set of users that are so passionate about your service that they jumped through hoops to work around your dogshit software is probably not the best decision a product company can make.
  - slenk 6y ago
    Yea but Moxie is trying to make money out of said dogshit software with his crypto editions
    - sneak 6y ago
      FWIW Moxie has claimed to own zero mobilecoin, and Signal/OWS is a nonprofit. You're accusing him of lying.
      - orhmeh09 6y ago
        Nothing GP said has to contradict either of these. I think you’re accusing them of accusing him of lying. Was Marlinspike paid for his services to mobilecoin, possibly even as CTO? Be more careful with your accusations. https://www.coindesk.com/signal-founder-may-have-been-more-than-tech-adviser-mobilecoin https://www.coindesk.com/signal-founder-may-have-been-more-t...