this post was submitted on 02 Mar 2021
154 points (97.5% liked)

Privacy

39669 readers
144 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

The Signal Server repository hasn't been updated since April 2020. There are a bunch of links about this here but I found this thread the most interesting.

To me, this is unforgivable behaviour. Signal always positioned themselves as "open source", and the Server itself is under the best license for server software (AGPLv3 -- which raises questions about the legality of this situation).

Signal's whole approach to open source has constantly been underwhelming to say the least. Their budget-Apple attitude (secrecy, i.e. "we can never engage the community directly", "we will never merge/accept PRs", etc) has lead to its logical conclusion here, I guess. I have been somewhat of a "Signal apologist" thus far (I almost always defend them & I think a lot of criticism they get it very unfair) but yeah I'm over Signal now.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 4 years ago (1 children)

If you are the sole owner of the copyright of some software you can do whatever you want with it. The license applies to others, not yourself.

[–] [email protected] 0 points 4 years ago (1 children)

Not well versed in this, so this may be inaccurate, but the other issue is that the Server relies on and uses other AGPLv3 software (e.g. storage-service), so if they want to use the latest versions of each they also have to release all the latest changes to the server under AGPLv3 (which is why Google avoid AGPL like the plague).

[–] [email protected] 0 points 4 years ago

This is not true. That library appears to be entirely developed by Signal: https://github.com/signalapp/storage-service/graphs/contributors and if that's the case they don't have to follow any of the AGPL requirements because they own the copyright on it.