News for hackers. Stuff that matters.

A comment on Signald: Unofficial daemon for interacting with Signal. Parent comment

Re:Signald: Unofficial daemon for interacting with Signal by sneak on Monday April 26, 2021 @05:59AM (#26940917)
How or why would they ban you for publishing software?

If they ban end-user accounts that use your client software to connect to their API, that's obviously a bug in your software as it diverges from the behavior of the official client. This is why anyone making an alternative client should be doing so with a fork of upstream that is regularly updated. You'd need to keep it in sync pretty closely. Most official Signal clients autoupdate (a huge security vulnerability in and of itself[1], as SolarWinds demonstrated very nicely for everyone), but not all of them (you can't override the user's systemwide app autoupdate setting on iOS), so they have to maintain BC with out of date versions for at least a few weeks/months.

[1]: https://github.com/signalapp/Signal-Desktop/issues/4578

[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by jeltz on Monday April 26, 2021 @07:32AM (#26941416)
I was referring to banning of users who use third party clients and I do not think it would be particularly hard to do if they really wanted to. You can for example use request patterns or the fact that the unofficial clients do not autoupdate. I doubt that they would go that far, but it would be trivial if they really wanted to.
[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by sneak on Monday April 26, 2021 @09:40AM (#26942378)
Banning the set of users that are so passionate about your service that they jumped through hoops to work around your dogshit software is probably not the best decision a product company can make.
[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by slenk on Monday April 26, 2021 @01:46PM (#26945520)
Yea but Moxie is trying to make money out of said dogshit software with his crypto editions
[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by sneak on Monday April 26, 2021 @08:37PM (#26950224)
FWIW Moxie has claimed to own zero mobilecoin, and Signal/OWS is a nonprofit.

You're accusing him of lying.

[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by orhmeh09 on Tuesday April 27, 2021 @03:14PM (#26960171)
Nothing GP said has to contradict either of these. I think you’re accusing them of accusing him of lying. Was Marlinspike paid for his services to mobilecoin, possibly even as CTO? Be more careful with your accusations. https://www.coindesk.com/signal-founder-may-have-been-more-t...
[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by andrepd on Monday April 26, 2021 @07:02AM (#26941252)
That thread is a bit ridiculous, the guy was already told that he can block updates.signal.org if he really wants to inspect the commits first, but he insists there no workaround.
[ Parent | on HN ]
Re:Signald: Unofficial daemon for interacting with Signal by sneak on Monday April 26, 2021 @09:39AM (#26942367)
My mitigation strategy for this issue has already been posted in that thread; I didn't file it because of my own computer.
[ Parent | on HN ]