News for hackers. Stuff that matters.
Re:Signal WhatsApp Chats Import by FalconSensei on Friday January 08, 2021 @01:55PM (#25688466)
> the Signal team fundamentally does not value chat history the same way a lot of people do

This is the core problem as why many projects don't get mainstream. They have 2 options: they can focus on what they think is a priority, or on what the public thinks is a priority.

I'm not saying Signal is wrong on doing what they are doing, as they are being successful among some niches (i.e: tech). But to grab Whatsapp users, they need feature and UX parity, at least to some level

Re:Signal WhatsApp Chats Import by skrowl on Friday January 08, 2021 @04:00PM (#25690438)
This is exactly why Telegram is beating Signal.

They're singularly focused on the user experience and what users want.

Uninstall / reinstall / multiple-devices works flawlessly.

Re:Signal WhatsApp Chats Import by freeone3000 on Friday January 08, 2021 @04:43PM (#25690902)
I fundamentally distrust any program which claims E2E encryption and is capable of recovering my chat history onto a new device. This means that Telegram is technically able to recover my chat history, making the "E2E" bit of the encryption smoke-and-mirrors.
Re:Signal WhatsApp Chats Import by FalconSensei on Friday January 08, 2021 @04:51PM (#25690993)
I can be wrong, but on Telegram E2E is not default. Those are used only in 'secret chats', which I believe are not recoverable.

So you can use regular texting for everything you don't care much about, like sending youtube videos and memes to your friends, and use the secret chat to things that re more sensitive. That's great for most people that currently use Whatsapp

Re:Signal WhatsApp Chats Import by greiskul on Friday January 08, 2021 @06:12PM (#25691737)
How is that great? On whatsapp everything you do is E2E by default.
Re:Signal WhatsApp Chats Import by higerordermap on Saturday January 09, 2021 @06:21AM (#25699478)
* normal ppl care about chat history more than encryption, and telegram can be accessed from many devices without tethering from one (a la whatsapp). If you want E2EE anyway, you can use E2EE chats.

* Whatsapp is closed source, so you can't tell if the encryption is true anyway (what if they are transmitting your private key?). Telegram has open source implementation and API.

* Facebook will not have your metadata. The subject of these events is basically FB having too much of data about you.

Re:Signal WhatsApp Chats Import by FalconSensei on Saturday January 09, 2021 @07:50PM (#25706966)
In my case, I care more about being able to use it without depending on my phone, than E2E. The single thing I hate the most on any messenger is my phone having to be on and online, for me to send/receive messages on my computer
Re:Signal WhatsApp Chats Import by charwalker on Friday January 08, 2021 @06:49PM (#25692601)
Re:Signal WhatsApp Chats Import by saagarjha on Saturday January 09, 2021 @03:05AM (#25698558)
Right, that's not the default option.
Re:Signal WhatsApp Chats Import by cmeacham98 on Friday January 08, 2021 @05:08PM (#25691170)
I am unaware of Telegram's implementation, but this is not necessarily true. The app could use a secret you provide and only you know (most obviously, your password) to store and restore chat history.
Re:Signal WhatsApp Chats Import by JoshTriplett on Friday January 08, 2021 @05:44PM (#25691507)
> I fundamentally distrust any program which claims E2E encryption and is capable of recovering my chat history onto a new device.

I would expect a Signal implementation of this to allow recovering chat history if you restore a backup onto the new device and if you re-enter your PIN.

Re:Signal WhatsApp Chats Import by freeone3000 on Friday January 08, 2021 @08:25PM (#25694589)
Your pin is not your key, even through a KDF. That would allow guessing with only 10**4 guesses. Signal exports an unencrypted backup to a formatted text file, which can then be imported by another signal instance.
Re:Signal WhatsApp Chats Import by JoshTriplett on Saturday January 09, 2021 @12:26AM (#25697531)
I don't mean a network backup. I mean a device-to-device data transfer, for which the device passphrase and the Signal PIN together should be sufficient.

(Also, your Signal PIN can be an alphanumeric passphrase.)

Re:Signal WhatsApp Chats Import by gsich on Friday January 08, 2021 @05:53PM (#25691580)
Telegram only has E2E if you enable it. "Normal" chats are not E2E encrypted.
Re:Signal WhatsApp Chats Import by natenthe on Friday January 08, 2021 @04:43PM (#25690906)
That's ok. I care about data hygiene. Signal cares about data hygiene. I don't want old data lying around and ready to be used by nefarious third parties at any point in the future. I'm sticking with Signal as long as they stay true to their values. I don't need it to be #1.
Re:Signal WhatsApp Chats Import by dunefox on Friday January 08, 2021 @07:54PM (#25693794)
> I don't need it to be #1.

I don't either, but a chat app is useless if I can't use it to chat with people and almost nobody I know will consider Signal. It's either WhatsApp, Telegram, or SMS (horrible).

Re:Signal WhatsApp Chats Import by charwalker on Friday January 08, 2021 @06:47PM (#25692559)
Telegram is really good for this, in my experience, and similar to Signal.

But you're right, Signal is designed for secure communication between parties. Allowing messages to be exported or archived should at worst leave only your own messages (and remove all others including media) and at best not exist at all.

Sure, let me just single handedly backup our conversation and send it to the HK police...

Re:Signal WhatsApp Chats Import by FalconSensei on Saturday January 09, 2021 @07:52PM (#25706995)
That's the thing, there are different types of uses. And in my case, I only message family and close friends.

I doubt my mom will send my 'good morning', 'good night' and 'love you' to the HK police.

If you are communicating with people you don't know/trust, then yeah, you want expiring messages that are not exportable

Re:Signal WhatsApp Chats Import by carlhjerpe on Sunday January 10, 2021 @05:25AM (#25713150)
You should be aware that if you can read messages on the screen with an open source app they can be exported. There's no way around this, if the app is closed source it might be initially harder to export but just as possible.