News for hackers. Stuff that matters.
Re:Looking back at how Signal works by eeZah7Ux on Friday June 05, 2020 @07:50PM (#23435306)
Signal is a walled garden. They refuse to allow federation and even prohibit any modified client to use their servers.

It's the least open "open source" model, and once (if) they gain significant market share they can easily close down the app and lock-in the users.

Please use and spread federated alternatives. Donate and contribute.

Re:Looking back at how Signal works by jjtheblunt on Friday June 05, 2020 @08:06PM (#23435420)
What alternative would you recommend?
Re:Looking back at how Signal works by 0d9eooo on Friday June 05, 2020 @09:38PM (#23436040)
I'm surprised Briar isn't coming up more in these discussions. Maybe it's locked down too tight for everyday use, but for protesters and individuals at risk it seems ideal.

I admit I could be missing something though, as I've not used it heavily.

Re:Looking back at how Signal works by goatsi on Saturday June 06, 2020 @02:00AM (#23437160)
Briar doesn't have an iOS version, making it useless if you want to communicate with more than 50% of the population in the US.
Re:Looking back at how Signal works by 1ark on Saturday June 06, 2020 @06:57AM (#23438300)
Started using Jami (GNU Ring). No central servers, no phone numbers.
Re:Looking back at how Signal works by MYEUHD on Friday June 05, 2020 @08:17PM (#23435512)
XMPP with OMEMO
Re:Looking back at how Signal works by merge on Saturday June 06, 2020 @08:13AM (#23438606)
agreed. I recently removed Signal and started using xmpp (again). It'll always be there (Signal probably won't) and getting a friend to install conversations.im and register a name on a public server is not much harder than getting someone to install Signal. To me it somehow feels like it's a good time for xmpp
Re:Looking back at how Signal works by Multicomp on Friday June 05, 2020 @09:13PM (#23435908)
TL;DR / I accidentally wish-listed myself:

Sign in to matrix.org with Riot Android / IOS / Web

Like sibling poster, XMPP with OMEMO encryption is an option, but it requires setting up an xmpp server with ejabberd or prosody software, then installing Gajim on your PCs and Conversations (paid via play store, free via F-Droid) for Android / a good iOS Xmpp client that supports OMEMO.

Except for techies, ^ is waaaay too much for people who are just looking to have an alternative to Signal's lock-in. I can barely get people to install the signal app and click open :)

I currently recommend installing Riot IOS / Riot Android and logging in to the free Matrix.org instance, which does not use your phone number or anything.

In the future I hope to recommend whatever P2P Matrix phone app comes out, and you just share your ids with friends via QR code handshakes and boom, you are off to the races with nothing but an internet connection and a friend ID. Metadata is all local to phones, so nothing to see.

In the medium future, I also hope to recommend cwtch.im which is the replacement for richochet, a metadata resistant p2p e2ee messaging app.

In the far future, I hope to have something like a smartphone mobile ad hoc network-based p2p e2ee app where you scan qr codes to handshake and you either communicate over the internet (like p2p matrix) or over mesh network as long as you are within 10 hops of another device (like bridgefy or firechat). Bonus points if one can DIY a passive repeater that works with the mesh network.