this post was submitted on 04 Mar 2024
370 points (98.9% liked)

Privacy

39811 readers
814 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
all 44 comments
sorted by: hot top controversial new old
[–] kbal@kbin.melroy.org 43 points 1 year ago* (last edited 1 year ago) (5 children)

Well, she's not wrong that we need more influential people fighting back against this latest push in the global coordinated effort to put an end to communications privacy. It's really quite alarming how little attention it seems to get most of the time. Civil society seemed much more robust when it fought off similar attacks in the 1990s. I do hope that the "VC community" isn't our only hope.

But of course Signal can’t interoperate with another messaging platform, without them raising their privacy bar significantly

Signal is supposed to be free software. You could probably manage to interoperate at least with other operators of actual Signal-Server instances, if you wanted to.

[–] possiblylinux127@lemmy.zip 8 points 1 year ago

The problem with trying to be compatible with everything is that no one can agree on what a good protocol should be. Trying to force apps to work together is problematic as you end up creating a large attack surface.

I appreciated what they want to do but the GDPR has kind of gone over the top in my opinion.

[–] haui_lemmy@lemmy.giftedmc.com 6 points 1 year ago (1 children)

I run a matrix server that interoperates with signal, whatsapp and discord so people who need to use those platforms are able to use one app instead of three and also keep their info private.

[–] honk@feddit.de 2 points 1 year ago

free software doesn't necessarily mean federating with other services.

They have stated their reasons why they don't wanna do it. You might disagree with them or not. But the technology they built is still open. Anybody could take what they created and use it as a foundation that does federate.

[–] turkishdelight@lemmy.ml -1 points 1 year ago

I have been disappointed by signal so much that I'm not suprised by this. There is no legitimate justification to why they don't distribute on F-Driod.

[–] turkishdelight@lemmy.ml 28 points 1 year ago (7 children)

Why is Signal not on FDroid, or heavily use Google services?

[–] Dehydrated@lemmy.world 38 points 1 year ago* (last edited 1 year ago) (1 children)

Signal doesn't "heavily use Google services". They only use proprietary libraries and integrations for 2 purposes: Donations and push notifications. Signal uses the platform's native way of handling push notifications, on iOS it's APNs and on Android it's FCM. This is also the reason why it's not available on F-Droid. You can use a fork of the app like Signal-FOSS or Molly. These remove all proprietary dependencies and you can download them from their custom F-Droid repositories.

[–] geoma@lemmy.ml 13 points 1 year ago (2 children)

Molly is wonderful but I use signal-foss because it shares openstreetmap location by default 🤩

[–] Dehydrated@lemmy.world 4 points 1 year ago* (last edited 1 year ago) (1 children)

Molly claims to use OSM in their FOSS builds: https://github.com/mollyim/mollyim-android/blob/main/README.md#dependency-comparison. I can't confirm this because I never use any Signal features that require map integration.

[–] geoma@lemmy.ml 3 points 1 year ago (1 children)

Wow, this is news for me. I've been following this issue on the git but there's no news about this there at least.

https://github.com/mollyim/mollyim-android/issues/203

[–] Dehydrated@lemmy.world 2 points 1 year ago (2 children)

Have you tried out Molly? If yes, did you use the normal version or the FOSS build? Btw the Version available on Accrescent is also FOSS

[–] roguetrick@lemmy.world 2 points 1 year ago (2 children)

Have you tried out Molly?

Nah, I get hypomania from buproprin. I think ecstacy would put me straight into serotonin syndrome.

[–] Dehydrated@lemmy.world 2 points 1 year ago

I like the direction this is going

[–] zwekihoyy@lemmy.ml 2 points 1 year ago
[–] geoma@lemmy.ml 1 points 1 year ago (1 children)

I have used it (molly-foss)but haven't in a while, just waiting for it to enable OSM location sharing to switch back to it. Didn't know about accrescent. What's the deal about it compared to droidify or f-droid?

[–] Dehydrated@lemmy.world 2 points 1 year ago* (last edited 1 year ago) (1 children)

It's more secure than F-Droid. It's still in a pretty early stage of development though and currently only offers a handful of apps.

  • App signing key pinning: first-time app installs are verified so you don't have to TOFU.
  • Signed repository metadata: repository contents are protected against malicious tampering.
  • Automatic, unattended, unprivileged updates (Android 12+): updates are handled seamlessly without relying on privileged OS integration.
  • First-class support for split APKs: downloaded APKs are optimized for your device to save bandwidth.
  • No remote APK signing: developers are in full control of their app signing keys.
[–] geoma@lemmy.ml 1 points 1 year ago

Cool.thanks!

[–] Buddahriffic@lemmy.world 2 points 1 year ago (1 children)

I have to be misunderstanding what you're saying because it sounds like you're happy that app shares your location by default? Or do you mean it uses that format by default when you decide to share a location?

[–] geoma@lemmy.ml 9 points 1 year ago

I meant that it uses the OSM "format" when I decide to share it voluntarily. That totally makes sense for me. I don't want to be sharing no Google links.

[–] ruplicant@sh.itjust.works 17 points 1 year ago

there is a fork with proprietary dependencies removed called Signal-FOSS, whose repo you can add to F-Droid if you decide to trust it

[–] Unreliable@lemmy.ml 15 points 1 year ago

There are several Signal forks on f-droid that remove the need for Google services iirc.

[–] onlooker@lemmy.ml 13 points 1 year ago* (last edited 1 year ago)

To answer your second question: they advertise Signal as a secure and private messenger, so heavily using Google services would be kind of counter-productive. To answer your first question: here.

[–] possiblylinux127@lemmy.zip -1 points 1 year ago* (last edited 1 year ago)

Because they don't seem to care about free software I guess

You can use Molly if you want more freedom. I do wish that Signal would build in orbot to avoid censorship.

[–] delirious_owl@discuss.online -4 points 1 year ago

Because signal doesn't care about privacy or anonymity

[–] autotldr 9 points 1 year ago

This is the best summary I could come up with:


AI is “not open in any sense,” the battle over encryption is far from won, and Signal’s principled (and uncompromising) approach may complicate interoperability efforts, warned the company’s president, Meredith Whittaker.

“We’re seeing a number of, I would say, parochial and very politically motivated pieces of legislation often indexed on the idea of protecting children And these have been used to push for something that’s actually a very old wish of security services, governments autocrats, which is to systematically backdoor strong encryption,” said Whittaker.

” ‘Accountability’ looks like more monitors, more oversights, more backdoors, more elimination of places where people can express or communicate freely, instead of actually checking on the business models that have created, you know, massive platforms whose surveillance advertising modalities can be easily weaponized for information ops, or doxing, or whatever it is, right?

One specific such proposal is comes via the Investigatory Powers Act in the United Kingdom, under which the government there threatens to prevent any app updates — globally — that it deems a threat to its national security.

“And honestly,” she added, “I think we need the VC community, and the larger tech companies more involved in naming what a threat this is to the industry, and pushing back.”

But of course Signal can’t interoperate with another messaging platform, without them raising their privacy bar significantly,” even ones like WhatsApp that support end-to-end encryption and already partly utilize the protocol.


The original article contains 1,027 words, the summary contains 238 words. Saved 77%. I'm a bot and I'm open source!