3 ms·

Is there another technique for effortlessly bootstrapping a contact list? Finding someone requires some kind of lookup/search. Using PII makes a lot of sense be

Is there another technique for effortlessly bootstrapping a contact list? Finding someone requires some kind of lookup/search. Using PII makes a lot of sense because that's how people identify each other. Anything out-of-band is quite complex. If I told my mom to install some app and we'd connect to each other using some random IDs, we'd probably still be using SMS.

andai 4y ago
A Signal support claims "The Signal service does not have any knowledge of your contacts." Can someone explain how this is possible? How does my phone know when to notify me that a friend has joined signal? Edit: apparently it's "private contact discovery", I need to give this a proper read later. https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/
- palata 4y ago
  Yes, their blog posts are really good. Read about the sealed sender, too! And then realise that even with sealed sender, if you send from your home IP, then you are identifiable. So you should send from a reasonably anonymous IP (w.r.t. your threat model)
andai 4y ago
>If I told my mom to install some app and we'd connect to each other using some random IDs, we'd probably still be using SMS This is surprising to me, since it was my mother's generation that got me into Skype (where you have to manually add the other person by their username), almost twenty years ago. (Even worse, not long before that you had to manually punch the other person's "ID" into the device every time you wanted to talk to them!)
brandonr49 4y ago
I will never get over the fact that the Nintendo Switch operated on random character strings to find friends rather than usernames or something more straightforward for normal users. But the fact that they managed it does mean it's not so large a barrier.
- lloeki 4y ago
  I guess it works because people think of it as if they were phone numbers, plus it removes the barrier of having to choose a username. See also the now defunct ICQ which was fairly popular even outside of tech circles.

andai 4y ago

A Signal support claims "The Signal service does not have any knowledge of your contacts." Can someone explain how this is possible? How does my phone know when to notify me that a friend has joined signal? Edit: apparently it's "private contact discovery", I need to give this a proper read later. https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/

palata 4y ago
Yes, their blog posts are really good. Read about the sealed sender, too! And then realise that even with sealed sender, if you send from your home IP, then you are identifiable. So you should send from a reasonably anonymous IP (w.r.t. your threat model)

andai 4y ago

>If I told my mom to install some app and we'd connect to each other using some random IDs, we'd probably still be using SMS This is surprising to me, since it was my mother's generation that got me into Skype (where you have to manually add the other person by their username), almost twenty years ago. (Even worse, not long before that you had to manually punch the other person's "ID" into the device every time you wanted to talk to them!)

brandonr49 4y ago

I will never get over the fact that the Nintendo Switch operated on random character strings to find friends rather than usernames or something more straightforward for normal users. But the fact that they managed it does mean it's not so large a barrier.

lloeki 4y ago
I guess it works because people think of it as if they were phone numbers, plus it removes the barrier of having to choose a username. See also the now defunct ICQ which was fairly popular even outside of tech circles.