HoloKat's avatar
HoloKat 17 hours ago
GM ☕️ Can someone explain to me why we still use Signal? An app with dark pattern UX that constantly asks you to turn on notifications…

Replies (24)

Does it? I thought that push notifications were a way to circumvent the E2E encryption?
Acabo de descargar de zapstore nospeak vamos a ver qué tal va. También estoy esperando que terminen de desarrollar bien whitenoise image
Would be cool if you could just use signal for everything and if the person your calling doesn’t have it, calls could optionally call or txt in the open. Basically have it replace phone and text app completely.
It isn't private. Was literally built/sponsored by NSA and CIA to the tune if tens of million USD per year until recently. And before you argue: 1) the information is public 2) no, I won't spoon feed and you look up yourself 3) CIA doesn't admit they spy on you. Yet is safe to consider they aren't sponsoring that messenger for our benefit and their main reason to exist is intelligence gathering 4) no point offending, nor stating half-truths on behalf of your agency employer. You do your thing, I do mine.
I have some things to say about Signal I will not say here. but i have no other channel to say it privately unless IRL :\
HoloKat's avatar
HoloKat 16 hours ago
In what way? Functional or practical? Because I never use notifications 🤷‍♂️
Havok's avatar
Havok 16 hours ago
It's ubiquitous (network effect) and kinda sorta secure-ish, better than just sms via telecom at least. <shrug> Do I smell a heavy encryption, POW required, WOT enabled secure encrypted messaging platform coming? 🤔
HoloKat's avatar
HoloKat 15 hours ago
The released codebase, yes. But you have no idea what they’re running on their server.
Never said you can't use it. Just pointed the fact it was developed in tandem with intelligence agencies and financed every single year of existence by them. Just in case the obvious name "signal" isn't obvious enough of inside joke as it is. Couldn't care less to convince you about my career profile. Just do whatever you want with fantastic piece of .. tech 😆
My favorite are NOSTR private messages. These messages use an encryption algorithm similar to PGP that is bulletproof, meaning that many tools can replicate the encryption/decryption and was never once demonstrated as broken since about 30 years to now. The other aspect is that many jazzy apps will say "heavy xyz bullshit and support strong privacy" but then: 1) you are using their "free" compiled binaries as clients on your phone/laptop 2) you are using their "free" servers to store your chats 3) Realistically, nobody really runs their own servers for those "clients" People forget how easy it is for an adversary to get your IP address and then decide that your "free" client sends plain text data to their "free" servers, or if you are unlucky they even have your private key to comfortably decode texts on their side like Signal/WhatsApp are likely doing. I'm using NOSTR messages because there are hundreds of volunteer-based relays to choose from (difficult to centralize and track your IP), there are dozens of different clients to send messages (difficult to spoof the encryption). This forces all different parts of the communication chain to stick with the protocol. There are still flaws on this approach. For example the storage on the devices is very vulnerable (e.g. Android, iOS, OSX and Windows) will be inspecting your files on disk. Communicating to a random volunteer-supported isn't a strong guarantee of privacy. In a few weeks you'll likely see a messenger from my side that addresses those weak spots.