That so-called hostility seems to be pretty one-sided IMO. The response from the Signal dev seemed pretty calm and reasonable, but OP seemed to take it as a personal insult for no reason.

Some projects don't want to discuss issues on GitHub and prefer a forum they have control over; that's totally understandable.

That's those projects I don't report issues to and rather maintain local patches for.

I'm not gonna sign up to the fivetrillionth forum or bug tracker for your special snowflake software. If you don't allow bug reports via github issues, you won't get mine.

I guess not wanting to sign up with my email adress on servers administered by god knows who with unknown security practices just to help you makes me a special snowflake then.

Use keepass so you can remember your passwords, dont use the same password everywhere.

>with my email adress on servers administered

>makes me a special snowflake then

No one needs you, it's nice that you live but you are not special like...let's say a snowflake.

Just stop.

Obviously; I'm living in the first world, so it shouldn't come as a surprise. It's like saying "Why don't you sell everything you have and dedicate your life to helping those that go without food?" And I'm actually one of those few people who do donate to a charity on a monthly basis. Do you do that? I'm doing that because it costs me money, not time, since I do have enough of the former, not the latter. Which brings me back to the original issue: I just don't want to bother with all the overhead of a sign up, waiting for some email confirmation that doesn't arrive because you self host mail and your mails get swallowed by Gmail, etcpp. Just no. Maybe you just don't want bug reports and patches since you also don't have enough time to handle them anyways, but if you do, just try make it frictionless. You don't need to sell your soul to github or anything, but it's still the number one OSS hosting platform of today, so just go with it. At least for the issue tracker, you can still just use it as a mirror otherwise.

It's possible to create a trashmail or other addresses...yes that's possible.

Some people have no food, therefore other people should be obliged to do security research for free, while conforming to the whims of any project they encounter.

>security research for free

He makes no "security research" if he just makes reports on github...he's a troll and nothing else.

They have been ignoring or brushed off the importance of reported privacy related issues for years. Doesn't built trust to use Signal for me personally

Could you be more specific about the issues they’ve been ignoring or brushing off?

For a year, they have been reporting reports of the issue wit the IME keyboards. See: https://community.signalusers.org/t/signal-should-warn-users...

If you are serious about privacy and secure messenger, you just can't brush off such issues.

[1] https://twitter.com/realsexycyborg/status/119769536810582425... [2] https://community.signalusers.org/t/signal-should-warn-users... [2] https://www.theverge.com/22249391/signal-app-abuse-messaging...

Of course they’re brushing this off, there’s simply nothing they can do to solve the problem of compromised platforms.

Signal should focus on problems they can realistically solve.

Adding a warning is not unrealistic and unsolvable.

A warning was added a few weeks ago :)

That's not a problem of Signal but of insecure IME-Apps.