this post was submitted on 20 Oct 2024
30 points (76.8% liked)

Technology

60055 readers
3751 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
 
  • Signal forks can have unexpected behaviours like retaining deleted messages and also they don't get updated at the same rate that Signal get updated.

  • Every couple of years I hear a story about hackers disturbing signal with backdoors, which would be impossible or very hard to be done If they blocked third party clients. (Ex: 1)

  • The amount of people who use third party Signal clients are very few anyway.

I saw what WhatsApp did to forbid modification of it's app which works in stopping a lot of distributions, why doesn't Signal do the same?

all 18 comments
sorted by: hot top controversial new old
[–] [email protected] 34 points 2 months ago (1 children)

IIRC, they do forbid third-party clients from their network. You can build it from source, but you won’t be able to connect to production Signal servers.

Third-party clients would not necessarily be a bad thing. Signal has limited resources, and as such has to cut corners. I for one would love a native desktop client that’s not Electron bloatware.

[–] tekato 19 points 2 months ago (1 children)

They don’t allow 3rd party clients, as per their ToS:

You must not (or assist others to) access, use, modify, distribute, transfer, or exploit our Services in unauthorized manners, or in ways that harm Signal, our Services, or systems. For example you must not (a) gain or try to gain unauthorized access to our Services or systems; (b) disrupt the integrity or performance of our Services; (c) create accounts for our Services through unauthorized or automated means; (d) collect information about our users in any unauthorized manner; or (e) sell, rent, or charge for our Services.

You need authorization to access Signal servers, which they don’t give:

we really don't want forked versions of the app maintained by other parties connecting to our servers. Not only could the users using the forked version have a subpar experience, but the people they're talking to (using official clients) could also have a subpar experience (for example, an official client could try to send a new kind of message that the fork, having fallen out of date, doesn't support). I know you say you'd advocate for a build expiry, but you know how things go. Of course you have our full support if you'd like to fork Signal, name it something else, and use your own servers.

In my opinion, this is a horrible decision from Signal.

[–] visor841 13 points 2 months ago* (last edited 2 months ago)

Yeah this is a big part why I'm very skeptical of Signal. It feels a lot like Ubuntu's snap store, it's technically open but you can't really interact with the main corporate controlled ecosystem.

[–] hummingbird 16 points 2 months ago* (last edited 2 months ago) (1 children)

Signal forks can have unexpected behaviours like retaining deleted messages and also they don’t get updated at the same rate that Signal get updated.

There are ways to save messages before they are deleted even if the stock app is used. Do not ever rely on this feature to work in a "safe" way.

Every couple of years I hear a story about hackers disturbing signal with backdoors, which would be impossible or very hard to be done If they blocked third party clients. (Ex: 1)

That is a problem the users who prefer 3rd party clients have to deal with. Obviously if you care enough to not use the official build, you of cause have to take care of using a trustworthy source. That is not "your problem" though.

The amount of people who use third party Signal clients are very few anyway.

That sounds a lot like "I don't use it, so none else needs it either" argument. In my opinion, none of your arguments above are a good reason to combat 3rd party clients.

[–] [email protected] 1 points 2 months ago

That's a lot of flack from an application which refuses to distribute itself outside the play store.

[–] [email protected] 10 points 2 months ago (1 children)
[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

This is the way. I might be open to switch back if they [signal] added [official] support for unified push, though

[–] [email protected] 1 points 2 months ago (1 children)
[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

I know. I meant switch back to signal if signal added official support.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

At least until the official client allows registration from desktop without VM shenanigans, and allows an arbitrary SOCKS proxy instead of just their own, and doesn't depend on Google services on mobile, there NEED to be third-party clients like signal-cli or Molly.

[–] [email protected] 2 points 2 months ago

SimpleX Chat seems to be the new kid on the block.

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago)

How do Signal stop forks from connecting to their servers?