Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Sunshine ( Sunshine@piefed.ca )  to Privacy@programming.devEnglish · 10 months ago

Is Signal safe?

proton.me

external-link
message-square
22
link
fedilink
44
external-link

Is Signal safe?

proton.me

Sunshine ( Sunshine@piefed.ca )  to Privacy@programming.devEnglish · 10 months ago
message-square
22
link
fedilink
Is Signal safe? What to know about this encrypted messaging app | Proton
proton.me
external-link
Signal is often considered the gold standard in private and secure messaging. But is Signal safe? How much of its reputation is justified?
alert-triangle
You must log in or # to comment.
  • Prunebutt ( Prunebutt@slrpnk.net ) 
    link
    fedilink
    arrow-up
    23
    ·
    10 months ago

    Gonna leave this here:

    Signal Contingency Plan

    • Blaze ( Blaze@piefed.zip ) 
      link
      fedilink
      English
      arrow-up
      4
      ·
      10 months ago

      Didn’t expect Deltachat, it’s a great app

  • onlinepersona ( onlinepersona@programming.dev ) 
    link
    fedilink
    arrow-up
    9
    ·
    10 months ago

    I’d like a comparison of Signal vs Jami, Briar, and SimpleX. They are all decentralised to some degree.

    • sbeak ( sbeak@sopuli.xyz ) 
      link
      fedilink
      English
      arrow-up
      15
      ·
      10 months ago

      Based on what I know, in a nutshell, Signal is centralised and requires phone number (both of which may not be ideal), SimpleX is decentralised (not one central server) and doesn’t require phone number, Jami and Briar are peer-to-peer networks (but this means that both users must have the client running to receive new messages/notifications, which is not ideal). Signal seems to be more audited in terms of security and such compared to the smaller fish (but that’s because it is a much, much bigger fish). For me, I would go with Signal since my threat model isn’t super high, and it’s much easier to get others to switch to it. SimpleX is a decent option if you don’t want to share your phone number I guess, but it’s more obscure and less established compared to Signal (in terms of users and security audits). Jami and Briar don’t seem all that great for the everyday user due to the limitations of the peer-to-peer model (needing both clients running at all times drains battery it seems), but could be decent options if your threat model is super super high

      Matrix is another option but is a bit complicated to set up, and unless you know how things work, it can seem quite confusing. It’s more of a Discord competitor with the different communities and rooms.

      • FrostyPolicy ( FrostyPolicy@suppo.fi ) 
        link
        fedilink
        arrow-up
        5
        ·
        10 months ago

        You do need a phone number to signup to Signal but you don’t need to share it with anyone. Just create a new username for each new person you want to add.

        • Onomatopoeia ( Onomatopoeia@lemmy.cafe ) 
          link
          fedilink
          English
          arrow-up
          6
          ·
          10 months ago

          That still means all your chats are identifiable to your phone number.

          For an org that claims they’re interested in privacy, that’s a major contradiction.

          • lambalicious ( lambalicious@lemmy.sdf.org ) 
            link
            fedilink
            English
            arrow-up
            7
            ·
            10 months ago

            “Major contradiction” how? It’s simply admitting a limitation in their reality and working around it. It’s pretty reduced from what it used to be, that would be that the phone number would be known to all chat participants. Do consider that it took some guy spending years in jail to learn enough of the telecom system that he might (not even “will”, but “might”) be able to spin up his own mobilecom that only requires a ZIP code to sign up.

            Signal is not 100% perfect, they’re barely reaching 98% perfect, but. Fantastical (fanatical) absolutism in goals helps no one make step progress.

            • dontsayaword ( dontsayaword@piefed.social ) 
              link
              fedilink
              English
              arrow-up
              3
              ·
              10 months ago

              You both make good points but I have to agree that having to give them my phone number and knowing all my data is correlated with that is an issue for the privacy-oriented user (ie. their target userbase)

              • lambalicious ( lambalicious@lemmy.sdf.org ) 
                link
                fedilink
                English
                arrow-up
                6
                ·
                10 months ago

                Yeah, it’s a data point it’d be useful not to have to count on. But, then again, it’s only the one. And it mostly serves as a data point only, not as an entry point. It’s not possible to (normally) access anywhjere near all that data — in particular, the chats — primarily via the phone number, so in as much as it’s about privacy, privacy is preserved (note however: not increased). Signal’s intended use is for privacy, not anonymity.

              • FrostyPolicy ( FrostyPolicy@suppo.fi ) 
                link
                fedilink
                arrow-up
                4
                ·
                10 months ago

                What data? The only thing they know is when the account was created and when was the last access.

      • JustEnoughDucks ( JustEnoughDucks@feddit.nl ) 
        link
        fedilink
        arrow-up
        1
        ·
        10 months ago

        Isn’t simpleX also starting shitcoin crypto scam enshittification? https://feddit.org/post/20942973

        Also apparently the founder is also a raging right winger his twitter account aources and supports fascist states. It doesn’t mean the technology isn’t good, but makes donating to the project supporting a fascist…

        At that point, delta chat might be the better option.

        • sbeak ( sbeak@sopuli.xyz ) 
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 months ago

          uh oh

    • Prunebutt ( Prunebutt@slrpnk.net ) 
      link
      fedilink
      arrow-up
      4
      ·
      edit-2
      10 months ago

      Do you know deltachat? I think that one hit a sweet spot in decentralization.

      • Blaze ( Blaze@piefed.zip ) 
        link
        fedilink
        English
        arrow-up
        2
        ·
        10 months ago

        It definitely does

      • алсааас [she/her] ( alsaaas@lemmy.dbzer0.com ) 
        link
        fedilink
        arrow-up
        2
        ·
        10 months ago

        Doesn’t using EMail & PGP allow for major leakage of metadata?

        • Prunebutt ( Prunebutt@slrpnk.net ) 
          link
          fedilink
          arrow-up
          2
          ·
          edit-2
          10 months ago

          Not in that implementation, actually.

          Edit: They address that point in the quite thorough FAQ

  • Noxy ( noxypaws@pawb.social ) 
    link
    fedilink
    English
    arrow-up
    5
    ·
    10 months ago

    proton’s article misspelled CDN in one place as CND

    interesting

  • Eldjárn ( phpinjected@lemmy.sdf.org ) 
    link
    fedilink
    arrow-up
    4
    ·
    10 months ago

    depend on your usecase.

  • chasteinsect ( chasteinsect@programming.dev ) 
    link
    fedilink
    arrow-up
    2
    ·
    10 months ago

    i checked out Threema that was mentioned in the article. It’s 6.50 eur. I would have trouble getting people to use Signal, how do people convince others to pay for a messaging app?

  • WhatGodIsMadeOf ( WhatGodIsMadeOf@feddit.org ) Banned
    link
    fedilink
    arrow-up
    2
    ·
    10 months ago

    Nothing and no one is actually safe in the world. And there is no such thing as privacy.

    • chasteinsect ( chasteinsect@programming.dev ) 
      link
      fedilink
      arrow-up
      1
      ·
      10 months ago

      Privacy exists, complete anonymity on the internet is way way harder, however.

  • stupud ( stupud@lemmy.zip ) Banned
    link
    fedilink
    arrow-up
    1
    ·
    10 months ago

    Removed by mod

  • Alavi ( somegeek@programming.dev ) 
    link
    fedilink
    arrow-up
    1
    ·
    10 months ago

    Delta chat is the real secure and lrivate option.

Privacy@programming.dev

privacy@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@programming.dev

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 223 users / day
  • 520 users / week
  • 1.2K users / month
  • 3.88K users / 6 months
  • 34 local subscribers
  • 5.32K subscribers
  • 1.93K Posts
  • 7K Comments
  • Modlog
  • mods:
  • Ategon ( Ategon@programming.dev ) 
  • danielintempesta ( danielintempesta@programming.dev ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code