turning into a crypto-ponzi currency scheme?

stephendiehl.com/blog/signal.h

Surprise!

That Signal:
- isn't really free/libre software (as Moxie denied freedom to redistribute modified version)
- would *never* federate (political choice of centralization)
- updated server software wasn't published
- invaded people's phonebooks
- runs on Amazon+NSA's infrastructure
- is virtually impossible to use out of Google's infrastructure -
- etc.

...didn't seem to be enough to alarm Signal users.

Follow

AH also forgot what is probably the most important from a privacy/information-security perspective:

- impossible to use without a *phone-number*!

Now the true objective of all these political choices (strong identifier + centralization + control of the distribution, etc) becomes clear: there is a financial interest to keep the users captive, to get rich with ponzi-crypto....

... well done, Moxie, many of us didn't see it coming! :)

· · Web · 2 · 8 · 10

@autodigestivo @jz Can we really trust Snowden? A former secret service agent ... You know what we said, it's like mafia, you can't quit secret services ... Unless you're dead 😉

@jz Thanks to /e/ OS really everybody can use it without using Google's ifrastructure. I use it everyday - degoogled :)

@matse @masstransitkrow

Are you sure you also got rid of:
"
* firebase-messaging for push notifications
* play-services-maps for maps and sharing location
* play-services-auth for performing reCaptcha checks during signup
* firebase-ml-vision for face detection for the ‘Scribbles’ feature (?)"

As all these proprietary Google libraries seem to be included in ...

forum.f-droid.org/t/signal-wic

@jz No, you are absolutely right! Thanks for the interesting link with the discussion.
In fact I really dislike the fact, that Signal is just available in the PlayStore or on the website as apk and not e.g. on F-Droid.
Nevertheless I used Riot / Elements a lot with a group chat and with encryption there it's unfortunately a mess - people who are not into IT are just lost.

@jz @matse these items won't load without Play Services, and are rendered inert due to my DNS-level blocking of g----- domains.

@masstransitkrow
Nice, thanks for the information! Since /e/ is Goole Play service free I guess that these services won't load then :)

At least location sharing in Signal is working on /e/ (never used it, just tested it for this post) - but I believe it's because of installed MicroG

@jz @matse any app that depends on their APIs will fail to install because they will look for the permission "G----- Play License Check".

If anyone tries to use their apps without GMS, the app won't run.
Signal does not have access to Location under any circumstance as it isn't needed.

I am aware of some Firebase APIs in use by 17 apps, but because I also prevent googleapis.com from resolving, I'm not too worried.

@jz I didn't notice any issues with Signal. Push notifications are working and everything works just as it should (or as it worked on my old, "normal" Android device) - but withoug Google Play Services or Google Apps.
It might just be because of MicroG, I'm not really into the details and didn't want to take care of - that's why I just use /e/.

@masstransitkrow @matse

good for you, you made it, you're great! how about everybody else, including the people you're chatting with in Signal?

also there are *many* more domains than that...

@jz @matse nobody else is using it.

I use Signal for the aesthetic and backup functionality.

As for domains, I used a modified version of the one from someonewhocares to make a zone record. I will eventually harshen it to incorporate more severe blocks.

@jz As I said, Signal is of couse not perfect - but IMHO the best messenger at the moment. Name me any other alternative that my mother can install and use, that is free (as in freedom), end to end encrypted and can make encrypted video calls and I will switch.
But at least I didn't find such a messenger yet. Closest is riot, but as I said, with E2E it's a nightmare to use for an average user.

@jz @matse@social.urspringer.de There is an alternative build at signal.org/android/apk/

I have not checked, but I think it does not include integration with Google push notification services.

@wire

the download link displays "Loading..." to me, unless i authorize javascript from.........

......

.... (wait for it)....

.....

.....

.... yeah right, google.com!

!

@jz There is a JavaScript, but it's hosted on Signal page, not google.com.

@wire sure, thank you. but see? even that has to go through google's tracking? that's really annoying to me and not so much the sign of a company that has people's privacy at heart...

@jz I didn't find any references to google trackers except the google play image which tries to set cookies on me, but Firefox blocks this attempt.

I found something more interesting:
signal.org/#toggle-signalcount

It shows a message "SignalCounter tracking is now DISABLED in this browser until signal.org/#toggle-signalcount is loaded again."

Sign in to participate in the conversation
La Quadrature du Net - Mastodon - Media Fédéré

Mamot.fr est une serveur Mastodon francophone, géré par La Quadrautre du Net.