I think that he is right about decentralization of the servers(if it'd be possible to keep the phone numbers) and the desktop app issue

But I think the phone number requirement is a good thing because people can just find each other without having having to exchange usernames and stuff.

Signals aim is privacy, not anonymity. If you want anonymity, there are better options like Simple X.

all 5 comments

sorted by: hot top controversial new old
[–] 5 points 1 day ago (3 children)

He makes valid points, I don't think anyone ever claimed signal to be the best way to message privately. What it DOES do is make private messaging easily accessible for normies.

Not that I disagree with the video though, requiring a phone number etc are not beneficial to privacy and caters to normies, maybe too much.

At least soon they'll release the feature to sign up without a number. Just took a while to get there.

  • source
  • hideshow 3 child comments
  • [–] 3 points 2 days ago
    57 comments in c/privacy@lemmy.ml view that post
    [–] 86 points 1 week ago (5 children)

    Signal is far away from perfect but unfortunately you have to make a tradeoff between security and convenience. The best messenger is useless if you are the only one willing to install it.

  • source
  • hideshow 5 child comments
  • [–] 11 points 1 week ago*

    Forreal. The ease of use is the only reason I was able to get my family and friends to migrate, instead of using SMS or FB Messenger. The pros of this accomplishment greatly outweigh the cons.

  • source
  • parent
  • [–] 2 points 1 week ago (2 children)

    it's surprising to learn this -- i had assumed that whatsapp was a bigger privacy nightmare.

  • source
  • parent
  • hideshow 2 child comments
  • [–] -1 points 6 days ago

    I think you may have misread something. Signal is the golden standard for privacy. There are other issues with anonymity, longevity, stability, security, and corporate platform dependence that are discussed in the video.

  • source
  • parent
  • [–] 35 points 1 week ago (7 children)

    And after profusely spitting on it, what do you suggest to replace it with?

    Clickbait.

    Because that's the thing with these videos: they tear Signal apart, and then... nothing. No alternative proposed. And even when these people have one, it's never something normal humans actually use in any significant number.

    Signal isn't perfect, I won't pretend otherwise. But my actual choice isn't between Signal and some hypothetical perfect messenger. It's between Signal and Messenger, WhatsApp and Telegram. On that scale, Signal wins, and it's not even close.

    And no, my family and friends are not moving to Matrix. Getting them all on Signal was already a nightmare. I'm not going to explain homeservers and Matrix IDs to my relatives. If your alternative requires a tutorial to even register, it's not a replacement, it's a hobby for tech enthusiasts.

    So yes, keep the pressure on the Signal Foundation, some of it is deserved. But until a better option actually gains mainstream traction, Signal remains the only realistic way to get regular people out of Meta's and Telegram's data

  • source
  • hideshow 7 child comments
  • [–] [S] 7 points 6 days ago* (last edited 6 days ago)

    I don't know if you wrote this in bad faith, but there are many alternative chat applications and platforms mentioned during the video that are more secure than signal.

    I agree, the title of the video is awful.

    The author mentions many times how they support Signal, but we shouldnt just accept their excuses for the lack of advancement on certain issues just because it's the most convenient option.

  • source
  • parent
  • [–] -2 points 1 day ago (2 children)

    Theres Briar, Cwtch, Matrix you clearly never watched his comparison video

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 day ago (1 child)

    You clearly didn't want to understand my comment

  • source
  • parent
  • hideshow 1 child comment
  • [–] -2 points 1 day ago* (last edited 1 day ago)

    And after profusely spitting on it, what do you suggest to replace it with?

    Clickbait.
    you claimed that he didn't provide alternatives to signal which is just incorrect, he has given lots of alternatives and even made a comparison video of them. How is this video critical of signal clickbait? The points he made in the video are valid, they didn't have to make it so that you have to install google play services and pay through google in order to sign up without a phone number but for whatever reason they did. This makes it unusable for anyone that needs anonymity, journalists, activists etc.

    And no, my family and friends are not moving to Matrix. Getting them all on Signal was already a nightmare. I’m not going to explain homeservers and Matrix IDs to my relatives.

    Its up to individuals whither or not they care if your family doesn't want to use Matrix for whatever reason (you don't have to explain how it works just install it on their phones (I'd recommend fluffychat or [nvm just realized syphon is dead] SchildiChat )) and even if they don't want to you can bridge WhatsApp, and most other apps, to matrix.

  • source
  • parent
  • [–] 13 points 1 week ago (5 children)

    The best messaging app is the most private and secure app I can actually get people to install. I can't get anyone to install SimpleX or Matrix.

  • source
  • hideshow 5 child comments
  • [–] 5 points 6 days ago (4 children)

    SimpleX has been a lot easier.

    Got my boio, roomie, and a coupla frens there.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 5 points 6 days ago (3 children)

    Unfortunately, Simplex seems to be developed by a fascist: https://drewdevault.com/weird-guys/

  • source
  • parent
  • hideshow 3 child comments
  • I don't trust VC fuckers, but the underlying protocol is good work.

    I would love to see a noncommercial reimplementation and network, especially one which doesn't have crypto integration.

    Or at the very least for signal to stop requiring a phone number and allow you to register from a desktop.

  • source
  • parent
  • [–] 9 points 1 week ago (1 child)

    "let domestic abusers find out their victims are trying to contact a lawyer’s office over Signal"

    It lets anyone know you have a Signal account true, although you can (and have been able to for a while?) disable being found by phone number so...

  • source
  • hideshow 1 child comment
  • [–] 5 points 1 week ago (8 children)

    This is letting perfection be the enemy of progress. Lots of complaints, but what realistic alternative is there?

  • source
  • hideshow 8 child comments
  • [–] 1 point 6 days ago (4 children)

    Matrix is far more superior to Signal, both in usability and privacy!

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 6 days ago (2 children)

    Thanks, need to look into this.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 6 days ago

    Signal is open source but it's hosted centrally. So you're trusting their server.

    Matrix is a protocol it's not hosted anywhere. But the primary developer and host instance now called Element and its server implementation synapse. Tho I've come to distrust Matrix, the metadata leaking is one thing but then combine that with the fact that .org is basically the default server and you almost have to federate with it. Matrix's origin is Israel's intelligence community, initially started by Amdocs, a spyware graphite-like company known for creating backdoors, and then they gave it to a UK group that formed a company, then crowd funded it while they pretended like Amdocs wasn't caught in multiple global spyware scandals already. The project's design is awful from a 'privacy' perspective, with the design specifically allowing third-parties to silently 'intercept' users' data--all whilst still being 'E2EE'. It's a feature. That's the amusing thing about its absolutely shit design, but regardless of design choices, encryption has always been a lagging component of the program. I will say that Matrix does not have a good security track record for E2EE and all of the clients use their software to do it. Plus, the apps all sucked last I used them, Element was the best and it was still buggy as all hell, and the Linux app is just an electron wrapper, and it was too hard to use for most of my "normal" friends (I agree, they should get good, but they do not get good, what should I do hold 'em at gunpoint and install Fedora, my options are limited). And the rooms had such a bad CP spam problem they stopped them from being publically searchable, you (now still?) have to know the room's addr to join. Even still, with that CP problem, it becomes hard to reccomend family/friends to make an account.

    The cynic might observe that the whole thing was proposed with foresight as to create a compromised leader ready to be adopted by organizations that felt they needed a higher degree of security. Matrix is a good solution, or so government bureaucrats are told.

    Let Tel Aviv inside.

    If that's a dealbreaker, you should probably use something security-oriented like Signal. (requiring phone numbers is also not my favorite, and the single point of failure is not the best either)

    If you want privacy SimpleX seems like better option than Matrix.

  • source
  • parent
  • [–] 0 points 6 days ago (2 children)

    Damn you(r implications) are right. There's no alternative messengers around 😔 /s

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 6 days ago* (last edited 6 days ago) (3 children)

    Finally after years and years I managed to get more and more people migrating to Signal, away from WhatsApp. Only because more and more people are on signal.

    It may not be perfect, but it's so much better than WhatsApp and Telegram.

    No one is going to install a super secure app of no one else uses it. Most people don't care. They just want to be in touch with everyone.

    This is the same argument for that Twitter is still the main platform for politicians in my country, even though it's a fascist pedo hate speech board now (the new 4chan). Politicians: "Yeah I want to move away from Twitter, but all the journalists are on there". Journalists: "Yeah I want to move away from Twitter, but I will miss all the politician's messages."

    People seriously are this stupid, and in politics at the same time.

    Imagine having to convince boomer parents and colleagues / boss to move to an app most of their friends, colleagues, business associates, family etc. are not using. Then imagine having to tell them they should actually move to an app no one they know uses, except me. They will tell you "fuck that shit, I have nothing to hide anyway, I'll just use WhatsApp instead."

  • source
  • hideshow 3 child comments
  • [–] [S] 2 points 6 days ago (2 children)

    same for Twitter for politicians [...] “Yeah I want to move away from Twitter, but all the journalists are on there”. Journalists: “Yeah I want to move away from Twitter, but I will miss all the politician’s messages.”

    I think this should be solved by legislation. There are already many European government instances, and think its the way. it's a risk that institutional communications depend on some billionaire's whim. A legislation that forces politicians (at least the ones in office) to use the corresponding governmental fediverse instances could solve these problems.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 1 week ago (6 children)

    I don't like the phone number requirement either, but is there a better alternative?

  • source
  • hideshow 6 child comments
  • [–] 3 points 6 days ago (4 children)

    Usernames, like nearly every other messenger...

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 6 days ago

    let domestic abusers find out their victims are trying to contact a lawyer’s office over Signal.

    Uhhhh no, it sure doesn't do that...

  • source
  • [–] 4 points 6 days ago* (last edited 6 days ago)

    I've been using Signal since before it was called Signal. I'm a big fan, and I still use it and recommend it. No, it isn't perfect, but for my needs, it's still the best all-around. I am always interested in alternatives, but they mostly haven't stacked up. Top contender for me right now is DeltaChat. I'm also playing around with Sideband/reticulum, which is a super interesting project, but nowhere near ready for primetime.

    Edit: forgot to mention Veilid chat :)

  • source
  • [–] 4 points 6 days ago (10 children)

    One thing to note, Signal has never purported to be "private". It is "secure". There's a huge difference. Everyone has to find a balance between privacy and usability. Not having phone ID means no way to reduce the chance a user is bot as well as if you don't register a personal name or phone number or anything else traceable, it makes it difficult for users to find eachother. And as for tracking the source and destination of messages, again if those are random destination routing IDs for a particular conversation, it makes it difficult to route to multiple devices. And if you don't include source identifiers then there's no way to block a spammer or other hostile user or provide delivery receipts to the sender. If you eliminate the storage of messages on the centralized server entirely and have it just be for routing, then if a device is offline at the moment a message is composed, it can't be sent. These are just some examples of privacy vs usability. I won't go into real-time video and audio as they are even more complex.

    What signal is, is a system that does not store the keys for the messages themselves, thus as long as all user's devices are secure, the messages are secure. This it does very well.

    If you want a private messaging system, there are many options out there, but Signal needs to be usable for the masses of technically illiterate as well as secure. These are more for things like journalist who need privacy for whistleblowers. In that case the lack of usability is a reasonable tradeoff.

    Of course I'm oversimplifying some things, but the basic idea is that Signal is not a private messaging app, it is a secure messaging app.

  • source
  • hideshow 10 child comments
  • [–] 2 points 6 days ago (9 children)

    Signal has never purported to be “private”

    Uhhhh yes it has? That's like the main thing it's purported to be? You can control + F "privacy" 4 separate times on the homepage. I think you're conflating this with anonymity .

  • source
  • parent
  • hideshow 9 child comments
  • [–] 1 point 6 days ago (8 children)

    It's more private than something like Facebook Messenger or most other popular chat apps, that's not it's primary purpose and again, it does not purport to 100% privacy as it does to 100% security of messages. Anonymity is one way to achieve privacy, but it isn't the only way. Unfortunately, it's the only way if you want to obey laws in most countries, basically privacy by making it impossible for the company to give any information to police, courts, etc.

    The OP though is primarily complaining about privacy and not security and that's what I'm trying to differentiate. It's never ever said it gives a 100% private experience but does purport to making messages content as secure as possible.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 0 points 6 days ago* (7 children)

    that’s not it’s primary purpose and again, it does not purport to 100% privacy

    Again, it does and it is. It's plastered all over every webpage and document they have. You are confused.

    The OP though is primarily complaining about privacy and not security and that’s what I’m trying to differentiate

    Again, OP video is referring to anonymity, among other things.

  • source
  • parent
  • hideshow 7 child comments
  • [–] -1 points 6 days ago (6 children)

    Google private vs secure communications. Privacy is the company not sharing information about your communications. Legally this is nearly impossible for a corporate entity without anonymity. But they could just as easily keep the data about who you are talking to secured and thus your privacy protected. They are private commercially in that they don't sell that information like most messaging apps, but they can't refuse an order from a government entity and thus are not 100% private. Again anonymity is one method of keeping your data private, the other is to have 100% control over that data like if you self hosted the central server then Signal could be private while still not being anonymous.

    So anonymity is the only legal say to be private, but it isn't the only way to be private. They do keep your data private from data brokers, thus some privacy, but not 100%. Anonymity is much more difficult to accomplish while maintaining usability. Privacy is only difficult to accomplish while maintaining functionality because of legal obligations. So their policies are privacy oriented, but they can't guarantee that without anonymity which they can't do without loss of functionality.

    What they can do, and do well, is security. Secure messages, security of metadata in motion, etc., but metadata at rest while secure, is not private from governments, only from corporations (currently, though this could change and is why people think they want anonymity not realizing they lose functionality.) Signal is secure, and as private as it can given the legal obligations, but it could change policies and decide not to keep your data private and then anonymity is needed which is what the OP is saying they need, but Signal has never said they will provide.

  • source
  • parent
  • hideshow 6 child comments
  • [–] -1 points 6 days ago (5 children)

    Google private vs secure communications.

    No u.

    Privacy is the company not sharing information about your communications. Legally this is nearly impossible for a corporate entity without anonymity.

    It isn't, and they don't.

    they can’t refuse an order from a government entity and thus are not 100% private

    They don't have to, because they are 100% private. They don't have information to share.

  • source
  • parent
  • hideshow 5 child comments
  • [–] -1 points 6 days ago* (3 children)

    No they absolutely know who every message on the server came from and who it's bound for as well as various other metadata. Governments can request this data as, while it is stored securely, the company has access and thus must give this information upon receiving valid requests. This is not 100% privacy especially in cases of things like journalists and government corruption whistleblowers. They can't say what they said, but they can say a particular user talked to a journalist.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 6 days ago* (2 children)

    Uhhhh no? They absolutely do not? And the page I just linked you to proves it. It's full of requests from the government where they did not provide any of the information you suggested.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 6 days ago (1 child)

    If their servers have no knowledge of who sent the message then what's the point of accounts and if they don't know who the message is for, how do they deliver it to all devices logged in under a given account, but not to every other user. Yeah they don't store an unencrypted list of every contact a user has or their user profile (which is what the site you point to says), but they do store metadata on the message itself and because those accounts are linked to real world phone numbers, they know who it belongs to, or at least the government does, not that it's hard to find out. This is exactly what the OP is saying and why anonymity is the only option for true privacy, which Signal does not provide, nor does it purport to. Yeah they don't sell your data. Yeah they don't want your contact lists, but they do hold a lot of private information about your activity out of necessity to receive and deliver messages.

    If you're not even going to read the content of what you're referencing, I'm sorry but I'll have to stop my responses here. I don't have time or energy for trolling or willful or arrogant ignorance.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 6 days ago

    Yeah they don’t store an unencrypted list of every contact a user has or their user profile (which is what the site you point to says)

    That's not what it says. I already told you what it says. It says they received many subpoenas from the government, and every single time the only thing they can provide is the first and last time a number connected to their servers. If you’re not even going to read the content of what I'm referencing, I’m sorry but I’ll have to stop my responses here. I don’t have time or energy for trolling or willful or arrogant ignorance.

    nor does it purport to

    Brother, literally just look at the fucking website. Or their fucking marketing. Or basically fucking anything that they produce. You are high on crack.

    I'm going to take your refusal to provide evidence as an admission that you have none. Good day.

  • source
  • parent
  • [–] 4 points 6 days ago (1 child)

    The gripes are valid but the title is sensational.

  • source
  • hideshow 1 child comment