People hoping to get randomly added to war chats lol
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
i'm more curious about getting on their venmo friend list.
"hey, it's uh, vlad. i need 200k for the um, rigging of the midterms in uh, wisconsin. thank you."
Just send like a request for a few thousand dollars and put the description entirely I'm Russian lol
I would ruin it by posting my balls immediately
Ironically having a giant security breach happen in a security focused messaging app was good advertising.
Of course in this instance the breach was not because of the app, which is a good thing I guess.
"When something is made idiot-proof, they will just make better idiots."
Gestures broadly at the federal government
Gestures narrowly at oval office and cabinet.
On Signal you can verify user identify, and you should absolutely do it if were to discuss national security maters.
This is not a hidden feature, I think it's designed to prevent man in the middle attack. It also work against the "oops I accidentally added a journalist to my conversation no one should know of", which is so dumb that no one saw this coming 😅
Dont use consumer apps for national security matters.
There was a vulnerability identified in Signal last year that caused the British to discontinue its use. I dont trust the british government but I am wary of what they are wary of.
vulnerability
My understanding is this has less to do with Signal than phones themselves. Signal messages are decrypted and stored on the phone itself, so a successful attack on the phone would allow access to the messages.
This is completely fine for personal use since the average person isn't going to be a target, but for classified information, that's unacceptable. This isn't unique to any messenger, any app that stores data on the phone is open to it.
It's not a security breach per se. Someone accidentally added a journalist to the group. Signal is still as safe as it's ever been.
PEBKAC
Everyone hoping to get accidentally added to a government group chat.
Good. It's the only encrypted channel I trust right now.
I'd consider using them if I didn't need to use a phone number to register. My friends and family stick with Briar as a result.
Hey man, if you can convince anyone to use Briar, do that. I have better luck getting people to use Signal because it's way more popular and easier to sign up. And if I want to know if someone uses it, I can find out instantly.
I have a little pull in my group of friends. I've got 11 kids and I make them use Briar (SMS is removed from the phones) and so their friends end-up getting Briar and then their friends' parents have also gotten it. So we have a nice little circle of people using it.
Nice
Matrix is also an option and heavily audited+ federated. And unlike Signal not based in the US.
And the best? You can easily selfhost a bridge to signal and WhatsApp.
How well do the signal and whatsapp bridges work? Have you used them yourself? I tried setting up a discord bridge years ago and it was terrible. Is it better now?
I'm just learning this is an option, but Matrix Signal Bridge.
Best I can tell from the documentation, we add the Matrix server bot to a signal account, and it relates messages between the two platforms.
Bad actors are sowing distrust by implying that Signal is not secure. Always remember that the powers that be don't want the public to have encrypted comms and would love to ban private messaging apps altogether. I could also be completely wrong and Signal is in fact a fed honeypot...
The code is open-source though, and I'm hoping that individuals more learned than I would surely alert us if there were any backdoors/exploits...
There are many things you can complain about when it comes to signal, but overall it's a huge improvement from unencrypted messengers like discord and definitely a ~~step~~ leap in the right direction
You have to be very tinfoil hat to believe that this current administration is capable of anything so sophisticated as a misdirection.
Bad actors are sowing distrust by implying that Signal is not secure. Always remember that the powers that be don’t want the public to have encrypted comms and would love to ban private messaging apps altogether.
Wrong logic, trying to guess what they are doing. I mean, if you were a god-level poker player, then maybe, but most people are not and god-level players lose too.
and Signal is in fact a fed honeypot
Being competitive and protected from network effects (decentralized, p2p, federation, one standard and many implementations, all that) can hurt being secure. The complexity of being both may not be practical.
The point of Signal is academic level security. It has a clear model and is not doing anything to make it more complex.
Which is why it is centralized, leading to suspicions and accusations of being a honeypot.
The code is open-source though, and I’m hoping that individuals more learned than I would surely alert us if there were any backdoors/exploits…
That's a wrong hope in any case.
Next up:
- Signal getting banned in US govt
- Signal getting banned in the US
- Signal servers seized, devs detained
- Signal protocol repos removed from M$hub
For the people who want to use Signal but are stuck in WhatsApp land because all their contacts are on WhatsApp, you should download WhatsApp business and create an automated away message that says that you are only available via Signal and with a link to your Signal account (if you use a Signal username. ) People in my contacts are slowly switching to Signal.
The chat space is problematic.
- There are a lot of apps that don’t encrypt at all (e.g. Google chat, discord, etc)
- There are apps that encrypt but they are subject to jurisdictions that can or may in the future force backdoors (e.g., Chinese apps, possibly telegram, possibly US apps in the future)
- There are apps that encrypt, are in countries that are privacy focused but are not for free (e.g., threema)
This contributes to a fragmentation that makes WhatsApp the app that-you-must-have
Sure it is supposedly encrypted but I would not bet my money that is without back doors
Whatsapp to messengers is what internet explorer was to browsers lol. Slow, bloated, unfree, universally hated, but still somehow universally used
Ain’t that the truth
Not in the US, pretty much nobody uses it here. Which is really odd to me, since it's so prevalent elsewhere.
So who exactly is downloading the app as a result of this latest government scandal? I'm going to guess it's the maga crowd because they are this as an endorsement from their new king. But hopefully I'm wrong and it's a broad sweep of different users from across the political spectrum.
Why should it matter if the new users are all magas or not?
You wouldn't want the Signal brand to become linked to it.
"I'm on Signal, would you like to chat there?"
"What, on the MAGA Nazi app, are you joking? Of course I'm not talking to you there!"
Ideally you want a broad spectrum of people.
I know it shouldn't make a difference and people should base their views strictly on the technical and usability aspects of the app, but real life doesn't work that way. Perceptions matter.
Perceptions matter.
And this frustrates me to no end.
Yeah, I get it, you don't want to associate with bigoted people. But I wish people would take a step back for a minute and think. If everyone runs away the moment conservatives take interest in something, that means conservatives get an undue amount of power over you.
If we all largely ignore trolls, bigots, and bullies, they'll lose their power. I'm not saying to be tolerant of intolerance, I'm saying we shouldn't let them have power over us. Content moderation should take care of intolerance where it makes sense. On platforms like Signal, this means accepting that privacy means protection for both you and things you dislike. Yes, the platform will be used to arrange drug deals, facilitate pedophiles, and enable Nazis to communicate, but it also protects whistle blowers, people living under repressive regimes, and LGBT communities. Privacy means privacy, and that has value in itself.
Stop throwing babies out with the bathwater.
It just about always comes down to user error. The White House trusting Signal is very indicative of the effectiveness of the app's underlying protocols and the organization's commitment to privacy. This is definitely huge publicity and I hope Signal endures the limelight.
LOL what kinda bullshit comment is this?
The people in the White House are idiots. They choose Signal because they're either dumb/negligent -or- because they have been intentionally avoiding record preservation requirements.
Signal is a solid app for sure, but these dipshits didn't choose it for being the right tool for the job here, as it certainly is not.
-or- because they have been intentionally avoiding record preservation requirements.
It's this one
dipshits didn't choose it for being the right tool for the job here, as it certainly is not.
It was, actually. If they weren't dipshits it wouldn't have been a problem.
Signal, on your personal device, is fine for personal use. It is absolutely not fine for classified communication as the VP or head of DoD, as there are billions of dollars dedicated to compromising your phone.
The encryption doesn’t mean shit if they breach an endpoint or account.
If it was strictly personal chat, yeah, no problem, but they just have to assume the messages are being read by other nations.
That's absolutely correct. Everyone seems to fixate on the encryption, but hackers are lazy and they'll attack whatever is weakest. In this case that means the storage on the phone after it's decrypted.
Don't store classified information on your phone, regardless of what you use to transmit it.
It's not the right tool for their job but still a good tool for the laws they were trying to break...
The white house trusting signal is nice, but using it to circumvent official communication tools which document messages for the archives is not the way it should be used - they used the "disappearing messages"-feature as well. This usage is more in line with criminal organizations like the mafia or yakuza.