You can't leak users' data if you don't hold it

Re:You can't leak users' data if you don't hold it by defen on Thursday March 28, 2024 @07:57PM (#39858969)

Isn't this an argument against putting any personal information into any app? Signal could turn malevolent tomorrow and start sending all your chats to their servers, which could have life-threatening implications for people vs just potentially being embarrassing.

[ Parent | on HN ]

Re:You can't leak users' data if you don't hold it by travisjungroth on Friday March 29, 2024 @12:50AM (#39860838)

I put data into Google Docs knowing it lives on their servers. So there’s no problem there.

Signal has an open source client. Big difference for these claims.

[ Parent | on HN ]

Re:You can't leak users' data if you don't hold it by defen on Friday March 29, 2024 @02:22PM (#39867329)

Do you compile your own open source client for your phone? Or do you install it from an app store? Most people are going to install it from the app store, so I believe my point still stands. What correlation is there between what's in the app store vs what is published in the open source repo? e.g. how do you validate that the app store client was compiled from a specific commit in the open source repo?

[ Parent | on HN ]

Re:You can't leak users' data if you don't hold it by travisjungroth on Friday March 29, 2024 @06:00PM (#39869454)

The Signal Android app has (had?) reproducible builds. You can see what is on the site and in the App Store is the same as when built from source. One person doing this provides some confidence for everyone else.

Still, I’m less confident in saying any other company fulfill’s Matter’s promise than saying they aren’t.

[ Parent | on HN ]