Post Abbmi7D2In0RbpXAdU by Bindestriche@social.anoxinon.de
(DIR) More posts by Bindestriche@social.anoxinon.de
(DIR) Post #Abbi9QxSU8u2uHSG8W by briankrebs@infosec.exchange
2023-11-08T20:05:05Z
2 likes, 12 repeats
One of the more limiting things about Signal is you have to give out your mobile number to everyone. Even if it is a burner, I still don't want to advertise to the world that it's mine.Was happy to read today that Signal is now beta testing a new username feature. https://community.signalusers.org/t/public-username-testing-staging-environment/56866
(DIR) Post #Abbi9RzycGVm8NdmhU by wjmaggos@liberal.city
2023-11-08T20:09:28Z
0 likes, 0 repeats
@briankrebs isn't @signalapp centralized? shouldn't we all be moving to something that isn't?
(DIR) Post #AbbiLDeFnQt96P5kBs by railmeat@fosstodon.org
2023-11-08T20:11:00Z
0 likes, 0 repeats
@wjmaggos what decentralized equivalent to Signal?@briankrebs @signalapp
(DIR) Post #Abbiabewo0IFuoklii by wjmaggos@liberal.city
2023-11-08T20:14:21Z
0 likes, 0 repeats
@railmeat @briankrebs @signalapp that's a great question. @matrix?
(DIR) Post #Abbmi7D2In0RbpXAdU by Bindestriche@social.anoxinon.de
2023-11-08T21:00:31Z
0 likes, 0 repeats
@wjmaggos depends on your threat model. I don't think the average user should be required to know a trustworthy admin. matrix is an option if you care for that.
(DIR) Post #AbbnFBlIOeU7HjKTeC by wjmaggos@liberal.city
2023-11-08T21:06:31Z
0 likes, 0 repeats
@Bindestriche couldn't the people who run Signal instead run a Matrix server, along with Mozilla and Automatic etc? isn't that our better future, FOSS decentralized tech and lots of companies with principals that run these servers and we pay them a sustainable rate?
(DIR) Post #AbbnjM2ejxUbr5pkKO by Bindestriche@social.anoxinon.de
2023-11-08T21:11:58Z
0 likes, 0 repeats
@wjmaggos security in a decentralized service is hard. That is why email is the mess it is. if you don't want to cut of people, you need to use the lowest common denominator, which often is out of date and insecure
(DIR) Post #Abbnp3HlOAK7QAcINs by Bindestriche@social.anoxinon.de
2023-11-08T21:13:00Z
0 likes, 0 repeats
@wjmaggos federation adds complexity which is the enemy of security. there is a reason why mastodon dm's are not end2end encrypted and it is not that msto defs are lazy.
(DIR) Post #AbboRhGtAdHkRIdQfY by Bernard@friends.ravergram.club
2023-11-08T21:20:02Z
1 likes, 1 repeats
@briankrebs Decentralized https://simplex.chat/ does not even use user ID's. You create and dispose of addresses as you want. It is easy to use, but most people are too habituated to Signal or other apps to try it. Here is my current address: https://simplex.chat/contact#/?v=1-4&smp=smp%3A%2F%2Fh--vW7ZSkXPeOUpfxlFGgauQmXNFOzGoizak7Ult7cw%3D%40smp15.simplex.im%2FJfQo6pHMEXsSkJKXL83pinIq6CddTEK5%23%2F%3Fv%3D1-2%26dh%3DMCowBQYDK2VuAyEAUzwMM2xx8T2yqOQxY3jysgaFAqL8ZmVJWFIX30JVH0U%253D%26srv%3Doauu4bgijybyhczbnxtlggo6hiubahmeutaqineuyy23aojpih3dajad.onion
(DIR) Post #AbbofXitT3UkscKuRM by Bindestriche@social.anoxinon.de
2023-11-08T21:22:27Z
1 likes, 0 repeats
@wjmaggos getting back in the habit of paying for online services with money instead of data is a good development. but choice of provider is not a silver bullet. there are good reasons why we have central food health inspections. checking if a provider is trustworthy requires a skilset that should not be necessary to just use a messenger. just as I don't want to bring a lab in a restaurant just to know the food is save to eat.
(DIR) Post #Abbp7zmmiykI1VivPU by wjmaggos@liberal.city
2023-11-08T21:27:38Z
0 likes, 0 repeats
@Bindestriche there's two ways to ensure good service, democratic oversight/control or economic competition. neither are perfect. Signal seems great right now but I don't see the incentives for that to maintain.
(DIR) Post #AbbruxuMh6p2IVkP5c by keverets@social.librem.one
2023-11-08T21:58:47Z
0 likes, 0 repeats
@wjmaggos @railmeat @briankrebs @signalapp @matrix or alternatively #xmpp / @snikket_im which has OMEMO that's based on the same double-ratchet algorithm as Signal. It also bridges well to SMS and voice phones using jmp.chat (or similar Vonage/Twilio for non-US/Canada numbers)Matrix has some nice features that XMPP lacks, but XMPP is still a well used and reasonable alternative.
(DIR) Post #AbbvCMbGRXmLfCnifA by stereo@freiburg.social
2023-11-08T22:35:40Z
0 likes, 0 repeats
@wjmaggos @railmeat @briankrebs @signalapp @matrix yes, its #matrix ;)
(DIR) Post #AbbxHagxg2vUj15Ot6 by pino@social.cologne
2023-11-08T22:58:49Z
0 likes, 0 repeats
@wjmaggos @briankrebs @signalapp No no, when the big departure from WhatsApp happened a few years ago, all those freedom fighterz (all 5) had no better idea than Signal. Of course. Because that was the most disappointing decision they could make. And if there is one big unwritten rule... Anyways..........Nowadays they probably lament about it at RedditTube. (And of course are all back at WA, because their mother, or whatever lame excuse, ...)
(DIR) Post #Abc3GI5lwdrwTSSEts by jakob@soc.schuerz.at
2023-11-08T23:02:21Z
0 likes, 0 repeats
@wjmaggosThere is also #xmpp in town...@matrix @railmeat @briankrebs @signalapp
(DIR) Post #Abc3GJNBBPO4Rjbefg by joeo10@mastodon.sdf.org
2023-11-08T23:39:31Z
0 likes, 0 repeats
@jakob @matrix @wjmaggos @railmeat @briankrebs @signalapp This is a good post on what makes a good messaging platform as part of why you shouldn't use Signal at all: https://dessalines.github.io/essays/why_not_signal.html#what-makes-a-good-messaging-platformHe mentions #Matrix and #XMPP as great alternatives.
(DIR) Post #Abc3GKYYma5K7JwG36 by wjmaggos@liberal.city
2023-11-09T00:05:59Z
0 likes, 0 repeats
@joeo10 @jakob @matrix @railmeat @briankrebs @signalapp I use Matrix to take calls on my podcast/talkshow and it works great. the only problem is that because most people don't have it, it's a bit of a hassle to get them set up to connect. it could replace SMS and phone calls and simplify the chatroom experience.
(DIR) Post #AbcjrxqtqBYimR91dY by gvs@rebelbase.site
2023-11-09T08:03:30.585129Z
0 likes, 0 repeats
A welcome move, though why not move to anonymous decentralized messengers that are fully open source (Signal regularly holds back server code AND is centralized on AWS which is a massive risk)
(DIR) Post #AbcqAvYFDdcWs4qOum by untsuki@udongein.xyz
2023-11-09T09:14:06.165415Z
0 likes, 0 repeats
@briankrebs It's a good news. I'm somewhat okay with requiring phone to register, but I don't want to share it to everyone just to talk on signal, since it is connected to other accounts and it would be doxxing myself if I share it.