Post ApUMVfR5YN3BSJC4gq by gopal@fedia.social
(DIR) More posts by gopal@fedia.social
(DIR) Post #ApUMVd18Xt6RxF2Jxg by praetor@social.sdf.org
2024-12-27T03:44:32Z
1 likes, 0 repeats
I just sorta wish there was a #signal client in #emacs so I could talk to my crew. BTW my #signal is praetor.63 so hit me up to #chat
(DIR) Post #ApUMVdo3c0EcOxvODI by bignose@fosstodon.org
2024-12-27T06:04:20Z
0 likes, 0 repeats
That would be feasible, *if* the #Signal corporation actually wanted to grant #SoftwareFreedom.Sadly, they don't; they reject connection to official Signal servers from any unofficial client. https://github.com/LibreSignal/LibreSignal/issues/37#issuecomment-217211165Because of that, any third-party client will be resisted by Signal corporation, making it a hostile environment and unlikely to succeed.@praetor
(DIR) Post #ApUMVerzeqyfhSm2zI by praetor@social.sdf.org
2024-12-27T06:18:38Z
0 likes, 0 repeats
@bignose I mean, I can _kinda_ undestand why they do that. They have a reputation of being ultra secure, and look what a heaping garbage pile WhatsApp has become.
(DIR) Post #ApUMVfR5YN3BSJC4gq by gopal@fedia.social
2024-12-27T10:40:10.326Z
0 likes, 0 repeats
@praetor @bignose I'm not clear why people still quote this comment from back in 2016. Lots of water has flown under the bridge after this and there are many non-official signal clients connecting with signal server and working on the network. #molly (molly.im/) is the best example, which I am using for years now. There is also #flare (gitlab.com/schmiddi-on-mobile/flare) and the signal-cli (github.com/AsamK/signal-cli) All these unofficial clients are actively being developed and working well in the signal network. Possibly you could wire up signal-cli with emacs to make a signal emacs client?
(DIR) Post #ApUMVgR7pifqYiDcO0 by bignose@fosstodon.org
2024-12-27T21:29:34Z
0 likes, 0 repeats
@gopal > I'm not clear why people still quote this comment from back in 2016.Because, unless you can point us to where the #Signal corporation has changed their position, that comment continues to represent their position today: They are hostile to third-party clients connecting to Signal official servers.I'd love to know where they've announced a change of their policy and now accept and support third-party clients (allowing for #SoftwareFreedom) if that's true.@praetor
(DIR) Post #ApUMVhJMa43jGvavvU by strypey@mastodon.nzoss.nz
2024-12-28T01:13:17Z
0 likes, 0 repeats
(1/2)@bignose> I'd love to know where they've announced a change of their policy and now accept and support third-party clientsMe too. There's still no Signal-compatible chat app in F-Droid, as a consequence of those 2016 comments by Moxie.@gopal @praetor
(DIR) Post #ApUMiSoZn21c4nHWtc by strypey@mastodon.nzoss.nz
2024-12-28T01:15:39Z
0 likes, 0 repeats
(2/2)@praetor> [Signal] have a reputation of being ultra secure... as long as your threat model doesn't include monolithic, centralised platforms controlled by one entity as a threat. Hell, even BlueSky, which isn't really decentralised, is a much more open platform than Signal. Given the enshittification that usually results from centralised control of platforms, it amazes me that anyone still considers it a valid way to run a service in 2024.
(DIR) Post #ApUOBrDeEYia7KaYc4 by bignose@fosstodon.org
2024-12-28T01:32:09Z
0 likes, 0 repeats
@strypey> still no #Signal compatible chat app in #FDroid(Before anyone gives a #WellActually, yes we both know #MollyIM will provide an app you can download, by adding the @mollyim specific repo. That's in conflict with the security advice “don't trust anything except from the official #FDroidRepo”, and making exceptions is undermining good security practice.) @gopal @praetor
(DIR) Post #ApUUYJGPFGFfBvy5Fw by strypey@mastodon.nzoss.nz
2024-12-28T02:43:24Z
0 likes, 0 repeats
(1/2)@bignose> security advice “don't trust anything except from the official FDroidRepo”At the risk of a #WellActually ...That's not security advice as such, more advice on how to minimize the risk of proprietary dependencies sneaking in through third-party repos. Which are one vector for security flaws (hard-to-audit code).But if you don't trust the motives and security chops of the Molly devs, why would you use it? If you do, it makes sense to also trust their repo.@gopal @praetor
(DIR) Post #ApUUyHjTYo8dyJx25g by strypey@mastodon.nzoss.nz
2024-12-28T02:48:10Z
0 likes, 0 repeats
(2/2)@bignose> It also does nothing to address the “violating Signal's expressed policy against third-party clients” problemAgreed, and this is the core problem.I understand that Moxie no longer has total dictatorial control over Signal platform. If I'm right, the current crew may be willing to revisit interoperability with other Free Code chat apps that support Signal protocol E2EE (eg XMPP+OMEMO, Matrix).If so, let's see that in writing. Until then it's remains a proprietary network.
(DIR) Post #AqPnMvgrXJyI2sizBY by stoner713@poa.st
2025-01-24T18:12:58.161762Z
0 likes, 1 repeats
@praetor