Privacy

35064 readers

625 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

154

Signal Server is effectively closed source software right now (lemmy.ml)

submitted 4 years ago by [email protected] to c/[email protected]

133 comments fedilink hide all child comments

The Signal Server repository hasn't been updated since April 2020. There are a bunch of links about this here but I found this thread the most interesting.

To me, this is unforgivable behaviour. Signal always positioned themselves as "open source", and the Server itself is under the best license for server software (AGPLv3 -- which raises questions about the legality of this situation).

Signal's whole approach to open source has constantly been underwhelming to say the least. Their budget-Apple attitude (secrecy, i.e. "we can never engage the community directly", "we will never merge/accept PRs", etc) has lead to its logical conclusion here, I guess. I have been somewhat of a "Signal apologist" thus far (I almost always defend them & I think a lot of criticism they get it very unfair) but yeah I'm over Signal now.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 0 points 4 years ago (1 children)

Leak less metadata

citation needed. On the contrary, any network observer can perform a timing attack by correlating messages being exchanged to/from clients and servers. Having centralized servers only makes it easier.

Briar, on the other hand, is P2P and uses Tor as transport network making such attack way more difficult.

[–] [email protected] 0 points 4 years ago (1 children)

I edited the comment with citation.

Briar suffers from the problems I mentioned about P2P requiring more battery and not being able to use push notifications. It also has the works UX of the lot, since you can't even begin communicating with someone without being in having a way to get them a cryptographic identifier/QR code. No way anyone but the most tech savvy will ever use it. Also, it's still not available on IOs.

[–] [email protected] 0 points 4 years ago (1 children)

To protect users metadata including the type of application, protocol, and timing push notifications cannot be used. Equally, direct connections to centralized servers are not suitable. That's a reason for Briar to use Tor.

The thread is about centralized vs decentralized. Availability on OSes, polished UIs and so on are besides the point.

[–] [email protected] -1 points 4 years ago

The thread is about centralized vs decentralized. Availability on OSes, polished UIs and so on are besides the point.

Yes, your are obviously right. Who cares about the end user? /s