Post A4dbtFpTPKLKY8sYIC by nspanti@social.logilab.org
(DIR) More posts by nspanti@social.logilab.org
(DIR) Post #A4d0Eeko8WfHfwTUsS by jz@mamot.fr
2021-02-25T09:28:08Z
5 likes, 12 repeats
When researchers find a flaw in the way #Signal #Signalapp circumvents censorship in Iran (leading to identify its users), their issue get deleted from Signal's Microsoft Github and they get banned from Signal's repository.....but only because they allegedly violated a "code of conduct" by being "disrespectful"!Morality is safe! Iranians, maybe not... As long as we don't hear about it, there is no problem, right?https://github.com/net4people/bbs/issues/60#QuestionSignal #OTF #Iranhttps://mamot.fr/@jz/100406505533058339
(DIR) Post #A4d6pazfgBSQS8QN3w by nspanti@social.logilab.org
2021-02-25T10:42:11Z
1 likes, 3 repeats
@jz Anyway apparently Signal's users do not want to hear about this kind of thing. They use a centralized service. Moreover it is made by an organization hostile to protocol federalism. We can add that, in consequence, any review of Signal can be obsolete at any time, because the whole chain (server configuration, server software and client software) could change very quickly.https://www.gnu.org/philosophy/who-does-that-server-really-serve.htmlhttps://signal.org/blog/the-ecosystem-is-moving/https://github.com/LibreSignal/LibreSignal/blob/master/README.mdhttps://blog.jabberhead.tk/2019/12/29/re-the-ecosystem-is-moving/https://gultsch.de/objection.html
(DIR) Post #A4dMNUC2y5IUWIpal6 by akeno@liberdon.com
2021-02-25T13:36:27Z
0 likes, 0 repeats
@jz Sheeple got to sheep. Moxie Marlinspook will get what he deserves.
(DIR) Post #A4dPsrpjQNq4g635Bw by Zalzen@neckbeard.xyz
2021-02-25T14:15:45.231216Z
0 likes, 1 repeats
@jz signal dev is shit, just like systemd dev
(DIR) Post #A4dbtFpTPKLKY8sYIC by nspanti@social.logilab.org
2021-02-25T10:54:10Z
0 likes, 1 repeats
@jzhttps://mastodon.social/@Goffi/105552928176446533We already have XMPP + OMEMO for the text.https://www.ssi.gouv.fr/publication/chiffrement-de-messagerie-quasi-instantanee-a-quel-protocole-se-vouer/https://omemo.top/https://www.chapril.org/xmppFor audio only and audio+video, we have SIP + TLS + zRTP (implemented by at least Linphone and Jitsi Desktop).https://www.linphone.org/https://desktop.jitsi.org/There is also Tox and Jami, but I do not how strong is the encryption.https://tox.chat/https://jami.net/What are we waiting for to get rid of #Signal? Do we prefer whine?
(DIR) Post #A4dbtGH7kWSdvtodOK by wiggles@counter.fedi.live
2021-02-25T16:30:15.887578Z
0 likes, 1 repeats
@nspanti @jz explain how I get my 70 year-old mother to use .. uh … “XMPP + OMEMO”?I got her to use Signal by accident. Signal sucks but some smorgasbord of protocols usable only by technical people as some sort of replacement is laughable, it’s a comparable attitude to the famous HN commenter who said “don’t we already have rsync?” to Dropbox’s initial announcement.Yeah, we did already have rsync, but that misses the point.
(DIR) Post #A4ddM4nNbrVggICtJA by anonymoose@fedi.club
2021-02-25T16:46:41.864633Z
0 likes, 0 repeats
@jz what is a good alternative? I'm happy to run my own server if it's as easy as running Pleroma, but the user experience has to be pretty seamless if I'm going to get my wife to use it.
(DIR) Post #A4dg1soClYMlZlehoe by arh@toots.alirezahayati.com
2021-02-25T17:16:35Z
0 likes, 0 repeats
@jz as an Iranian I'm OK with this. I may get arrested because of what I say as I'm not able to communicate safely and I even may get tortured or lose my life but at least SignalApp GitHub is polite.
(DIR) Post #A4dpCJ5mnYbpZmvN2G by doenietzomoeilijk@mastodon.nl
2021-02-25T18:59:20Z
0 likes, 0 repeats
@jz if that flaw is for real, that's pretty horrible for the Iranians who might not be as safe as they feel, especially since safety is the entire _raison d'etre_ for Signal...
(DIR) Post #A4fgTJrof1c5d9LaXg by poujolrost@mstdn.jp
2021-02-26T16:31:02Z
0 likes, 0 repeats
@jz #signalOrg #signal_app #Question_Signal #secureApp #RepublicOfIranSerious news, bad news.