News for hackers. Stuff that matters.
Re:Twilio incident: What Signal users need to know by Iv on Monday August 15, 2022 @04:16PM (#32474834)
Matrix is the protocol I think one should go to if Signal's requirement of phone numbers is a turn down.
Re:Twilio incident: What Signal users need to know by tptacek on Monday August 15, 2022 @04:41PM (#32475077)
Matrix is great. Just remember that the Matrix threat model isn't the Signal threat model: you're usually telling a Matrix instance --- or, really, anyone who can compromise or suborn that instance --- a lot more about your communication patterns than you are with Signal.

Matrix, right now, is a lot more amenable to the kinds of messaging that people on HN tend to want to do than Signal is. The problematic thing is that HN people tend to believe that their workflows are (1) the most important and (2) the ones with the most sophisticated threat models. Neither are true; (2) is very un-true.

For, like, talking to team members about a shared dev project, I'd always use Matrix in preference to Signal --- of course, for that kind of work, what I'd really do is just use Slack or Discord. Which gets at something about what HN wants from Signal.

Re:Twilio incident: What Signal users need to know by mikro2nd on Tuesday August 16, 2022 @03:32AM (#32480182)
Interesting work in this space is being done by OpenPrivacy with their "cwtch" app. An express design goal is to minimise side-channel leakage of information.
Re:Twilio incident: What Signal users need to know by NoToP on Tuesday August 16, 2022 @06:12AM (#32481033)
If the phone number requirement is the only part you dislike, buy a tourist Sim card with cash. The greatest lie of online identity is that phone numbers are tied to individuals forever.
Re:Twilio incident: What Signal users need to know by zaik on Tuesday August 16, 2022 @06:45AM (#32481228)
That's a lot of work considering XMPP or Matrix providers get this right.