this post was submitted on 08 Nov 2023
520 points (98.7% liked)

Privacy

29854 readers
1563 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 116 points 8 months ago (1 children)
[–] seaQueue 36 points 8 months ago* (last edited 7 months ago) (4 children)

Now if they'd just let me run the damned client on more than one device so I can reply to messages from my tablet.

[–] clif 17 points 8 months ago (1 children)

I'm running it on phone, tab (long ago), and desktop... What do you mean?

[–] [email protected] 17 points 8 months ago (3 children)

Maybe they mean how the messages don't sync between devices

[–] clif 15 points 8 months ago (1 children)

Ah, I thought that was by design.

[–] [email protected] 22 points 8 months ago (2 children)

But they do sync. They just don't keep messaging history, which is, as you say, by design. Signal doesn't keep copies of your messages so they cannot give you old message history if you connect your account to a new device.

[–] [email protected] 12 points 8 months ago (5 children)

That's true, but once you trust a new device, there's no reason the authority (your phone that has all history) couldn't transfer the history over to the new client.

I get it would add some complexity, but it could be done in a secure and private way.

[–] UnculturedSwine 12 points 8 months ago (1 children)

I feel like that is also by design. If your account is compromised, you wouldn't want them to be able to pull messages from your existing devices. It kinda defeats the purpose of them not being stored on the servers.

[–] [email protected] 5 points 8 months ago

They could just make it opt-in, no?

"New device X has logged in to your account. Do you want to transfer existing history on this device to it?"

load more comments (4 replies)
load more comments (1 replies)
[–] seaQueue 3 points 7 months ago

Yup, exactly. I switch between phone and tablet during the day and signal is the only messaging client that makes me stop what I'm doing and pick up an entirely separate device to check messages and reply. A bunch of my friends ended up on telegram or matrix because the usage model just doesn't work for people who use multiple android or iOS devices.

[–] CaptainS7ark 3 points 8 months ago (1 children)

Probably mean run it on more than one phone. I'd love to run it on my iPhone and my android phone but it can't be run without a phone number on a phone afaik

load more comments (1 replies)
[–] [email protected] 5 points 8 months ago

Take a look at Molly for your tablet!

load more comments (2 replies)
[–] [email protected] 81 points 8 months ago* (last edited 8 months ago) (3 children)

Still sucks you will need a phone number to use it though. Hopefully they adopt meshnet type technology similar to https://berty.tech so people can communicate even when the internet is shut off across all platforms with end to end encryption

[–] n00b001 39 points 8 months ago (6 children)

My mouth waters at the idea of decentralised, infrastructure-less, encrypted, p2p, mesh messaging

Thanks for pointing me towards Berty!

[–] [email protected] 8 points 8 months ago

infrastructure-less

I'd say it is infrastructure-agnostic and not necessarily without infrastructure.

[–] [email protected] 7 points 8 months ago (1 children)

There's Briar, but I am upset they don't have the bluetooth mesh functionality on desktop at least yet, and I don't know if you can make it work in a VM.

[–] n00b001 4 points 8 months ago

I think I tired Briar, but I either couldn't get it working on android or on iOS

[–] [email protected] 5 points 8 months ago (2 children)

In the world of Mobile, you’re always going to have to have some kind of signalling protocol that will have to be through someone else Simply because establishing listening functions that help push notifications reach you at all consumes battery. In this case, I think what the real thing should be is, if we should be trusting these push notification systems We should be able to host them as well Servers we choose to associate with our devices

load more comments (2 replies)
load more comments (3 replies)
[–] [email protected] 13 points 7 months ago

Another day, another chat service.

load more comments (1 replies)
[–] shotgun_crab 35 points 8 months ago (4 children)

Why are phone numbers a requirement anyway

[–] [email protected] 29 points 8 months ago (1 children)

To validate that a user is a person. The idea is to trust the phone companies that a person who happens to possess a phone number is actually a person.

[–] [email protected] 11 points 8 months ago* (last edited 7 months ago) (1 children)
[–] [email protected] 4 points 8 months ago (1 children)

I never said it was a good solution. There is no way to trust any validation that a user on the Internet is a person. But this way is cheap easy and most people aren't gonna go through the effort of masking their identities.

Also one discrepancy in an audit of a phone number trusted user base sticks out enough for cops to make some progress.

[–] [email protected] 5 points 8 months ago* (last edited 7 months ago)
[–] [email protected] 19 points 7 months ago (1 children)

People are putting too much thought into this. It's discovery. Signal is a WhatsApp alternative. You switch from WhatsApp and want to know which of your contacts you can still talk to? No action necessary, you can do it right away.

Simple as.

Try doing that without a phone number.

load more comments (1 replies)
[–] crimsdings 9 points 8 months ago

You need some sort of verification that the person is a person. Phone number puts a layer between you and the service you are trying to use - the provider of the number. The provider holds your identity but only passes on a phone number.

It's definitely not ideal, but not bad

[–] [email protected] 5 points 8 months ago (2 children)

Some question to be honest. I cannot expect any privacy if I have to share my phone number.

[–] sudneo 18 points 8 months ago (1 children)

Privacy and anonimity are different things. As long as nobody besides you and the indented destination(s) has access to the content of your communication, that communication maintains privacy, even if everyone sees that it's you talking.

Also, and this is something I mention all the time, the only information this gives is that you use signal. Besides that, as soon as anybody else registered your phone in their contact list, your phone number is already known and associated with you considering that many apps (like all the meta ones) gain access to the contact list and the chance that anybody who has your phone number uses one of those is almost 100%.

[–] JubilantJaguar 7 points 8 months ago

App-accessible contact lists is the original sin of smartphones. As a result, a few powerful corporations know the social graph of entire countries. The handful of people who make efforts to stay anonymous be damned - they're in the database too thanks to their friends. This one infuriating feature makes decent privacy all but impossible.

[–] [email protected] 6 points 8 months ago* (last edited 8 months ago)

They do their best to use the number in ways no one but your contacts who use Signal can actually see what that number is, to be fair. And you're still private either way. What a phone number breaks is anonymity, which is something they don't explicitely claim to give you. (I think)

[–] [email protected] 31 points 8 months ago (5 children)

What is this stupid website. Cant open it because they have banned my IP. Why the fuck do they ban MullvadVPN servers?

[–] [email protected] 22 points 8 months ago

Some malicious users do use VPNs to send spams and many websites automatically bans these IPs. Normally switching to a different VPN server will resolve the issue.

[–] [email protected] 9 points 8 months ago (2 children)

Surprisingly it's fine on Tor.

[–] [email protected] 4 points 8 months ago (3 children)

Is it even possible to block Tor? You could block specific exit nodes, but not all of them unless you had a way to detect when someone was using Tor.

[–] Railing5132 4 points 8 months ago

The firewall I manage at work blocks tor exit nodes and app traffic at the application layer.

load more comments (2 replies)
load more comments (1 replies)
[–] [email protected] 7 points 8 months ago

Banned on my VPN, too, good to know I shouldn’t be aggravated at my service.

[–] [email protected] 6 points 8 months ago* (last edited 8 months ago)

Try a different server. I've never had any issues accessing bleepingcomputer with Mullvad.

[–] [email protected] 14 points 8 months ago

omg i’m so excited for this

[–] [email protected] 14 points 8 months ago (2 children)

c'mon Signal, gimme that apk & I give you some logs in return, don't make it hard on me

[–] [email protected] 14 points 8 months ago

They want you to do just that: https://community.signalusers.org/t/public-username-testing-staging-environment/56866 That link has instructions on how to sign up.

load more comments (1 replies)
[–] [email protected] 3 points 8 months ago (3 children)

Download and installed but it still insists on a phone number. I don't see a way to bypass.

load more comments (3 replies)
load more comments
view more: next ›