alsaaas comments on Proton is vibe coding some of its apps.

[–] alsaaas@lemmy.dbzer0.com 7 points 1 year ago* (last edited 1 year ago) (7 children)

For private communication Signal is the gold standard LOL

Not everyone needs shitty xmpp extensions, Matrix that lacks PFS and is enshitiffying as we speak (I say as an avid user) or overkill like SimpleX or Briar.

permalink

fedilink

source

parent

hideshow 7 child comments

[+] sunzu2@thebrainbin.org -1 points 1 year ago (6 children)

[deleted]

permalink

fedilink

source

parent

hideshow 6 child comments

[–] alsaaas@lemmy.dbzer0.com 7 points 1 year ago* (5 children)

You seem to be misinformed. Signals architecture is explicitly designed in a way to minimise metadata as much as possible. You can look up the data they had to hand over due to lawsuits, it was absolutely minimal

permalink

fedilink

source

parent

hideshow 5 child comments

[–] EngineerGaming@retrolemmy.com 2 points 1 year ago

First - I'm not sure Sealed Sender would help against the server being changed to be actively malicious and trying to build social graphs. Second - even metadata concerns aside, a centralized system is just not resilient. Proposals like Chat Control are A LOT more easily enforceable with them than with tiny selfhosted servers.

permalink

fedilink

source

parent

[+] sunzu2@thebrainbin.org 2 points 1 year ago (3 children)

[deleted]

permalink

fedilink

source

parent

hideshow 3 child comments

[–] alsaaas@lemmy.dbzer0.com 3 points 1 year ago* (last edited 1 year ago) (2 children)

I know that Signal runs on US cloud infrastructure (like AWS IRRC)

Doesn't change a thing about it's security or what they hand to disclose to authorities

permalink

fedilink

source

parent

hideshow 2 child comments

[–] lambalicious@lemmy.sdf.org -1 points 1 year ago

I know that Signal runs on US cloud infrastructure

And only that one.

Signal dev is quite adamant on not letting people have their own servers, select a EU provider (yeah, EU is nazifying, but at least it's a large enough second-hand basket) or host the (suppossedly zero-knowledge) messages on one's own infrastructure. I'd say that's curious.