3 ms·
Exactly. These arguments are so weak that they read more like a smear campaign than an actual technical discussion. "You have to agree to Apple's terms to use
by stavros 10mo ago
Exactly. These arguments are so weak that they read more like a smear campaign than an actual technical discussion.
"You have to agree to Apple's terms to use it"? What's Signal meant to do, jailbreak your phone before installing itself on it?
- kelipso 10mo agoMoxie Marlinspike sounds like some 90s intelligence guy’s understanding of what an appealing name to hacker groups would sound like. Put a guy like that as so-called creator of some encryption protocol for messaging and promote the app like it’s for secret conversations and you think people won’t be suspicious? It screams honeypot like nothing else.
- stavros 10mo agoSo the argument against Signal is now "the creator's nickname sounds odd"? I mean, OK? Keep using WhatsApp, Telegram or Instagram if you think those are more private than Signal.
- kelipso 10mo agoDoes anyone actually think that’s his real name?
- stavros 10mo agoI'm sure some people who don't realise it's a pseudonym do? Sounds like you're one of them.
- omnimus 10mo agoIt's totally comments of people using Telegram.
- stavros 10mo agoIt's just people having zero product sense, or an idea of what it means to target more than 0.01% of the market. The last comment said that Signal's problem is that it's mobile-first, which, how does someone even think that a messaging app should be anything other than mobile-first?
- lrvick 10mo agoHaving Google and Apple apps is fine. Having that be the only option, and the recommended option for high risk use cases is unforgivable.
- stavros 10mo agoThose aren't the only two options. You can buy a non-Google Android phone and install the APK on it.
- fsflover 10mo agoHow do I run Signal on my Librem 5?
- stavros 10mo agoYou write an OS/2 emulator for it and use the OS/2 version of Signal, of course. How else?
- JCattheATM 10mo agoUse something like gurk[0] [0] https://github.com/boxdot/gurk-rs https://github.com/boxdot/gurk-rs
- lrvick 10mo ago
- fasterik 10mo ago>Moxie Marlinspike sounds like some 90s intelligence guy’s understanding of what an appealing name to hacker groups would sound like. Put a guy like that as so-called creator of some encryption protocol for messaging and promote the app like it’s for secret conversations and you think people won’t be suspicious? It screams honeypot like nothing else. This criticism has absolutely zero substance and honestly just reads like paranoid rambling. The Signal protocol has been independently formally analyzed [1] and has no known security issues. [1] https://eprint.iacr.org/2016/1013 https://eprint.iacr.org/2016/1013
- fsflover 10mo agoIt's not about the protocol but other sides of the design. Example: https://news.ycombinator.com/item?id=38555810 https://news.ycombinator.com/item?id=38555810
- fasterik 10mo agoThe example you linked is about push notifications in general, nothing specific to the Signal app. If the concern is that your OS is compromised or spying on you, that's not something E2E encryption can protect against, whether it's Signal or any other app.
- fsflover 10mo ago> nothing specific to the Signal app The specific part is that Signal forces Google and Apple on its users, and forces the specific kind of push notifications, too.
- deleted 10mo ago[deleted]
- JCattheATM 10mo agoSignal works fine on degoogled LineageOS, so I'm not sure that's true.
- kfreds 10mo agoHe IS a hacker from the 90s. It’s an assumed name. Plenty of hackers from the 90s have pseudonyms. > so-called creator of some encryption protocol All evidence points to him being one of the protocol’s designers, along with Trevor Perrin. I’ve met both of them. The first time I met Moxie and talked about axolotl (as it was called back then) was in 2014. Moxie and Trevor strike me as having more integrity and conviction than most. There is no doubt in my mind that they are real and genuine. Interestingly enough, some of the work Trevor did related to Signal’s cryptography was later used by Jason Donenfeld in the design of WireGuard. > It screams honeypot like nothing else. As you can see there is plenty of evidence suggesting otherwise.