Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
haffenloher
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
9 ms
·
31.
▲
by
haffenloher
10y ago
> the Chrome desktop "app" doesn't seem to import my phone contacts for some reason Have you tried re-importing them manually via the "Import now" button in the Desktop app's settings? Maybe that helps.
32.
▲
by
haffenloher
10y ago
Audio quality has been good enough for me, but there's definitely room for improvement as they're still using Speex (if I'm not mistaken).
33.
▲
by
haffenloher
10y ago
> Exactly why I like XMPP, it allows me to protect my metadata from leakage I read this frequently, but I'm still not sure how this is supposed to work - would you care to explain?
34.
▲
by
haffenloher
10y ago
> You closed that issue as a wontfix Not sure what you're talking about, because the issues in question, #127 and #1000, are open. > you basically told them to go away on Github Quite the opposite [1]: " I would consider a c
35.
▲
by
haffenloher
10y ago
> I suggest that, instead of routing all messages through GCM, what if Signal could send a "wake up" message via GCM, and then let the app pull the encrypted messages directly out of Signal's servers? Yep, that's exac
36.
▲
by
haffenloher
10y ago
> OpenWhisperSystems banned them from using the service Nobody has been banned from anything. People have been politely asked not to distribute 3rd-party builds of Signal using their name and their servers, and that's it.
37.
▲
by
haffenloher
10y ago
> 3. Showing hostility to those trying to introduce such an alternative to the project Quite the contrary, they're actively asking people to contribute code for an alternative push mechanism [1][2]: " I would consider a clean,
38.
▲
by
haffenloher
10y ago
I think tptacek was talking about actual takeovers of Telegram accounts. AFAIK there have been documented cases of this in Iran and Russia. See e.g. https://www.fredericjacobs.com/blog/2016/01/14/sms-logi
39.
▲
by
haffenloher
10y ago
I promise that nobody is going to force you to use the GIF search. For a demo on how this feature works, check out the short video embedded into the blog post. [1] I second the parent poster's question: "why is this dangerous?&quo
40.
▲
by
haffenloher
10y ago
They're not even using it as a queue, they're queueing and delivering the messages themselves. GCM messages are empty and are only used to wake up your device.
41.
▲
by
haffenloher
10y ago
From the post: " The Google Cloud Messaging service basically handles message handling from/to the user’s devices to the Signal servers. The GCM service then handles all the aspects of queueing all messages and delivery from/
42.
▲
by
haffenloher
10y ago
Signal Desktop does not use GCM. You can use the extension with Chromium or any Chromium-based browser.
43.
▲
by
haffenloher
10y ago
> Are you in the right thread? The discussion here is about what information Google can get from GCM messages The parent poster of the post you initially replied to asserted that Signal was "giving NSA the only thing what they want:
44.
▲
by
haffenloher
10y ago
> If he had said "the benefits of finding friends are greater than the privacy implications" or something like that there would at least been a case for a discussion This has already been discussed at length many times. Perhaps
45.
▲
by
haffenloher
10y ago
The question wasn't what metadata Signal gets, but what metadata Google gets on Signal messages. Yes, Signal servers know who communicates with whom.
46.
▲
by
haffenloher
10y ago
No, that's not how it works. The GCM message is empty, it just wakes up your device which then fetches the actual message from the Signal servers.
47.
▲
by
haffenloher
11y ago
> For the verification, you now depend on a complex binary blob provided by the authors, that is distributed through a different channel (Docker images instead of Google Play). Nothing stops you from building the Docker image yourself us
48.
▲
by
haffenloher
11y ago
Yep, at least that's how the official version of the chrome app works at the moment, it offers no standalone option.
49.
▲
by
haffenloher
11y ago
> am I the only one surprised Why not ask your favorite search engine? Definitely faster than creating a HN account ;) First Google search result: http://support.whispersystems.org/hc/en-us/articles/2125358
50.
▲
by
haffenloher
11y ago
Yes, there is.
51.
▲
by
haffenloher
11y ago
That name would imply your phone had to be online for the desktop app to work - that's not the case.
52.
▲
by
haffenloher
11y ago
Nope, I think you misunderstood something. Your phone does not need to be online for the desktop app to work.
53.
▲
by
haffenloher
11y ago
You can! No problem with that.
54.
▲
by
haffenloher
11y ago
Using that websocket stuff instead of Play Services or GmsCore will make receiving Signal calls impossible.
55.
▲
by
haffenloher
11y ago
These are the client (GPLv3) and server (AGPLv3) repositories: https://github.com/WhisperSystems/TextSecure https://github.com/WhisperSystems/TextSecure-Server
56.
▲
by
haffenloher
11y ago
I wrote a little guide on how to set it up: http://o9i.de/2015/10/23/howto-gmscore.html Has been working reasonably well for ~10 days now. Note that I'm on Android 4.2, so I might have missed something w