News for hackers. Stuff that matters.
Re:Snap Store administrators removed signal-desktop from Ubu... by sschueller on Thursday November 03, 2022 @11:37AM (#33452676)

  - Still need a phone number
  - They refuse to post the app on f-droid (directly)
  - No 3rd party clients allowed on their servers.
  - Crypto thing they attempted
  - I don't trust Moxie, he rubs me the wrong way.
Re:Snap Store administrators removed signal-desktop from Ubu... by junon on Thursday November 03, 2022 @11:38AM (#33452694)
Agreed on all counts, especially the last one.
Re:Snap Store administrators removed signal-desktop from Ubu... by artificialLimbs on Thursday November 03, 2022 @11:42AM (#33452756)
- Backups? lol...
Re:Snap Store administrators removed signal-desktop from Ubu... by aeturnum on Thursday November 03, 2022 @11:43AM (#33452769)
None of these suggest you shouldn't use signal - or that it's not meeting its goal of secure communication (except the last one I suppose).

Signal is not without flaws as you say, but if you have a phone number and can access a binary, there's every reason to believe it will securely and privately transmit your messages. You are also, ofc, free to fork their client and run your own service (as others have done).

Re:Snap Store administrators removed signal-desktop from Ubu... by krageon on Thursday November 03, 2022 @12:06PM (#33453161)
There is no reason to believe it is secure, as it doesn't have reproducible builds. What you download has binary blobs embedded.
Re:Snap Store administrators removed signal-desktop from Ubu... by aeturnum on Thursday November 03, 2022 @04:48PM (#33457288)
Signal has repeatedly been audited[1] so there's more reason to believe the protocol has the capacity to be secure than other options. Obviously if you believe the company is actively subverting their goal, you should use your own fork.

Edit: to be clearer - signal both publishes a protocol (that is thought to be secure) and provides a public service (that claims to use the signal protocol). Signal has claimed that the binary blobs they add to their public client (and the other restrictions) are required to run a public service (anti-abuse, etc). You are free to believe them or not - I do.

At the protocol level, which you are free to use, none of the problems you or the ancestors have pointed to apply. All of the alternatives people are pointing to here are at the "protocol" level - accessible only if you or someone you trust has setup a node. There's nothing wrong with that - it's a good idea - but it's no reason to attack signal's service for not being a protocol (which they also provide).

[1] https://community.signalusers.org/t/overview-of-third-party-...

Re:Snap Store administrators removed signal-desktop from Ubu... by gort19 on Thursday November 03, 2022 @11:45AM (#33452811)
What do you recommend as an alternative?
Re:Snap Store administrators removed signal-desktop from Ubu... by freedomben on Thursday November 03, 2022 @12:05PM (#33453147)
keybase.io has been great, although it's not without its risks either since it was acquired by Zoom. It's still up and seemingly maintained but AFAIK there's no new feature work.

I've heard WhatsApp recommended from people I trust, but I have never personally used it so can't speak from experience.

Re:Snap Store administrators removed signal-desktop from Ubu... by calgoo on Thursday November 03, 2022 @12:42PM (#33453692)
The legal team at the company I work for are suggesting to remove keybase and treat it as compromised as there is no way of knowing of keys and other data has not been shared with the Chinese government. No proof at all of course, just the world we live in I guess :)
Re:Snap Store administrators removed signal-desktop from Ubu... by seized on Thursday November 03, 2022 @12:20PM (#33453356)
A lot of people moved to Signal because of WhatsApps changes so that advice can thought of as misleading at best.

Your suggested alternatives are owned by Zoom and Facebook. I'll stick with Signal.

Re:Snap Store administrators removed signal-desktop from Ubu... by happymellon on Thursday November 03, 2022 @12:24PM (#33453428)
As a Facebook owned app, I don't trust WhatsApp.

All of them being tied to a phone number is bad form.

Re:Snap Store administrators removed signal-desktop from Ubu... by L3viathan on Thursday November 03, 2022 @04:23PM (#33456963)
> keybase.io has been great

> Crypto thing they attempted

well...

Re:Snap Store administrators removed signal-desktop from Ubu... by chpatrick on Thursday November 03, 2022 @12:01PM (#33453087)
matrix/element.
Re:Snap Store administrators removed signal-desktop from Ubu... by friend_and_foe on Thursday November 03, 2022 @01:01PM (#33453994)
XMPP with OMEMO e2ee. Fallback to jitsi meet for video calling, although several xmpp clients support video calling to each other.
Re:Snap Store administrators removed signal-desktop from Ubu... by alias_neo on Thursday November 03, 2022 @03:15PM (#33455952)
Jitsi Meet is pretty good for video, and relatively easy to self-host, though you'll need some decent resources for it. The docker-jitsi-meet project[0] can get you started quickly

Signal's "source available" infra can be self-hosted but it's huge effort and relies on a bunch of cloud-specific services which need to be replaced with self-hostslable alternatives. It's also extremely poorly documented and the code quality is fairly mediocre. I wouldn't recommend trying to host Signal infra yourself; it can be done; I've done it at work and it took some months of effort, and maintaining it is a nightmare (or was, then at least) because they'd only push one huge update to GitHub quarterly or less often.

[0]https://github.com/jitsi/docker-jitsi-meet

Re:Snap Store administrators removed signal-desktop from Ubu... by ixwt on Thursday November 03, 2022 @11:46AM (#33452825)
Moxie stepped down from the CEO of Signal in January of this year [0]. Other than that, yeah. Valid criticisms that their reasons are flimsy at best.

[0]:https://www.theverge.com/2022/1/10/22876891/signal-ceo-steps...

Re:Snap Store administrators removed signal-desktop from Ubu... by krageon on Thursday November 03, 2022 @12:05PM (#33453150)
Stepped down maybe, but the fostered culture remains.
[dead]
Re:Snap Store administrators removed signal-desktop from Ubu... by windexh8er on Thursday November 03, 2022 @11:55AM (#33452986)
I see you're new, you might want to review the guidelines:

https://news.ycombinator.com/newsguidelines.html

Re:Snap Store administrators removed signal-desktop from Ubu... by dheera on Thursday November 03, 2022 @12:48PM (#33453799)
Yeah the phone number thing is a bad move since it's traceable to your identity one way or another, even if you use a virtual number like I do.