I recently came across this project, does anyone have any information, or background on it? https://getsession.org https://github.com/Loki-project
From my understanding it's a fork of Signal, with some fundamental differences in network design
this post was submitted on 25 Feb 2020
5 points (100.0% liked)
Privacy
39651 readers
257 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Huge list of security problems with Signal:
https://github.com/privacytoolsIO/privacytools.io/issues/779
(and note that privacytools.io still endorses Signal even after being made aware of this)
People really have to learn to differenciate between PRIVACY and ANONIMITY. Two different concepts.
Well its run by a US company, and they dont allow anyone else to distribute versions of their app (eg fdroid), even though its open source. Also the server code is not open source. I prefer Telegram, at least this way only the Russians get my data.
The client app for Signal users is also non-free software soon to be removed from the FSF Directory:
community should promote federate chat solution like xmpp or matrix. Everything dealing with your privacy should be federated.
Well that's not quite true. First federation means sharing a lot of metadata: you have to federate so finding users on a federated i hard without sharing metadata. Matrix "leaks" a lot of metadata. Privacy with "what" you say? Yes, but most offer you this. Privacy with who talks to who, where, etc? Nope.
Signal is Open Source and server builds are replicable (you can be sure that they run official on their AWS server), being centralised means that almost no metadata is leaked. But I also dislike the ways OWS and Moxie make their decisions.
I recomend you reading the whitepaper of Session at getsession.org. Session is decentralised and it has all the Signal benefits (Signal protocol, and no metadata). How? Onion routing. As said, read about it I recommend you a lot.
server builds are replicable
Assuming this is what is really running on the server side, and there is no way to prove it. And there is no way to run an independent server and federate with the walled garden.
being centralised means that almost no metadata is leaked
This is plain false.