this post was submitted on 02 Mar 2021
154 points (97.5% liked)
Privacy
39669 readers
148 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The thing is, I first thought that it was not updated frequently simply because the server side of Signal is really simple (it's only role is to forward messages after all), so the code was very rarely touched.
However there seems to be people that have tried to run their own infrastructure that are not able to get some features to work.
Would it be even legal for them to run an updated version of the server without releasing it as FLOSS given the AGPL license?
The legality of this is unclear. If their silence on this topic isn't because they're trying to do their best Apple role-play (which is most likely, imo), the cynic in me says it's because they acknowledge they should publish the source ASAP in compliance with the AGPLv3.
If you are the sole owner of the copyright of some software you can do whatever you want with it. The license applies to others, not yourself.
Not well versed in this, so this may be inaccurate, but the other issue is that the Server relies on and uses other AGPLv3 software (e.g. storage-service), so if they want to use the latest versions of each they also have to release all the latest changes to the server under AGPLv3 (which is why Google avoid AGPL like the plague).
This is not true. That library appears to be entirely developed by Signal: https://github.com/signalapp/storage-service/graphs/contributors and if that's the case they don't have to follow any of the AGPL requirements because they own the copyright on it.
do you have any links/more info about the people who had issues running their own infrastructure? ive been following Signal development pretty closely and all features im aware of make sense that they would not require a server code change. I'd love to see any actual technical details over the hysteria in this thread.
This thread linked by OP contains someone talking about attachment not working. I wasn't able to find where I remember reading about someone not being able to make reactions work.
It actually seems like they have already been criticised in the past for being slow to release the server side code: https://community.signalusers.org/t/where-is-new-signal-server-code-why-not-share-signal/15068/2