Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

KingThrillgore ,
@KingThrillgore@lemmy.ml avatar

Blaming the Americans is a signature "Russia has fucked with this company" trademark.

YeetPics ,
@YeetPics@mander.xyz avatar

I wonder if it's legit or just another attempt at manipulating markets

xilona ,

If one is to compare apple to apples, imho the decision to choose between Signal, Whatsapp and Telegram and other "messengers" is obvious and clear.

Signal is fully open source!
You can run it on-premises, if you know your business!

Why are we not talking about it?

I hope my comment will not be discarded/removed as not being in sync with the narative... 😉

mox ,

Signal is fully open source! You can run it on-premises, if you know your business!

Why are we not talking about it?

Unless something has drastically changed recently, the official Signal service won't interoperate with anyone else's instance. That makes its source code practically useless for general-purpose messaging, which might explain why few are talking about it.

xilona ,

My point is that you have all the open source software components needed to run secure communications, on your own premises, for your own users/community in case you are not trusting Signal's infrastructure.

If you know any other similar alternative with strong encryption open source protocols please let me know! I love learning new things everyday!

Cheers!

mox , (edited )

on your own premises, for your own users/community in case you are not trusting Signal’s infrastructure.

Yes, that's an example of data (and infrastructure) sovereignty. It's good for self-contained groups, but is not general-purpose messaging, since it doesn't allow communication with anyone outside your group.

If you know any other similar alternative with strong encryption open source protocols please let me know! I love learning new things everyday!

Matrix can do this. It also has support for communicating across different server instances worldwide (both public and private), and actively supports interoperability with other messaging networks, both in the short term through bridges and in the long term through the IETF's More Instant Messaging Interoperability (MIMI) working group.

XMPP can do on-premise encrypted messaging, too. Technically, it can also support global encrypted messaging with fairly modern features, with the help of carefully selected extensions and server software and clients, although this quickly becomes impractical for general-purpose messaging, mainly because of availability and usability: Managed free servers with the right components are in short supply and often don't last for long, and the general public doesn't have the tech skills to do it themselves. (Availability was not a problem when Google and Facebook supported it, but that support ended years ago.) It's still useful for relatively small groups, though, if you have a skilled admin to maintain the servers and help the users.

xilona ,

Thank you very much for the info!

h6d2n ,

simplex ;)

yogthos , (edited )
@yogthos@lemmy.ml avatar

I'm always amazed how people come out of the woodwork to defend Signal any time any criticism of it comes up. It's become a sacred cow that cannot be questioned. Whatever you may think of Telegram should bear zero weight on your views of Signal.

The reality is that developers of Signal have close ties to US security agencies. It's a centralized app hosted in US and subject to US laws. It's been forcing people to use their phone numbers to register, and this creates a graph of real world contacts people have. This alone is terrible from security/privacy perspective. It doesn't have reproducible builds on iOS, which means you have no guarantee regarding what you're actually running. These are just a handful of things that are publicly known.

And then we know stuff like this happens. NSA suggested using specific numbers for encryption that it knew how to factor quickly. The algorithm itself was secure, but the specific configuration of how the algorithm was implemented allowed for the exploit https://thehackernews.com/2015/10/nsa-crack-encryption.html

These kinds of backdoors are very difficult to audit for because if you don't know what to look for then you won't have any reason to suspect a particular configuration to be malicious. Given the relationship between people working on Signal and US government, this is a real concern.

The same kind of scrutiny people apply to Telegram and other messaging apps should absolutely be applied to Signal as well.

devraza ,
@devraza@lemmy.ml avatar

I’d just like to add that you can use a temporary phone number service to sign up to Signal as you only need a phone number to register, not to actually use Signal.

The_Dark_Knight ,

Idk how secure telegram is but cmon signal is shady AF . They won't let fdroid have it cause they want to sign their own keys or some shit but there is a speculation its because they can roll out custom apk to targets which governments want which is just not possible if it is hosted by someone like fdroid . Even telegram allows that and they even allow third party apps which signal won't .

SimpleX and briar is the best option if your actually worried about privacy .

This comment is copy pasted from another thread where I had the same opinion

TheAnonymouseJoker Mod ,

Signal stans do not have an answer to this. OMEMO is verifiable, rest of the stuff around it is not. Signal even had a time when they did not update the backend open source code for over 6 months.

TheAnonymouseJoker Mod ,

Signal and Telegram are not rivals, though? Signal aims to be a E2EE chat platform, while Telegram works like a public forum in realtime chat format. Signal/WhatsApp are different from Telegram/Discord. They are not the same type of platforms.

Durov is comparing apples and oranges, and anyone falling for this whining, calling Telegram bad is an idiot.

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

1000001585

Gutless2615 ,

I think Telegram has always been a honeypot

rottingleaf ,

An FSB (or AP, don't know which, the main thing is it's Russian) honeypot at that.

extant ,

There's no oversight for any of these agencies and they have the means and incentive to backdoor cryptography, what would stop them from doing this morality? There's no possible way that they both aren't compromised and all we're seeing now is them firing pot shots at each other trying to convince the reader to join their honeypot because its sweeter.

tastysnacks ,

No sure if you mean government agencies but if you do, there's definitely oversight. Don't think that your Congress peoples aren't in on it too.

electricprism ,

Pot trying to call out Kettle.

F. Doubt.

sunstoned ,

Ma-trix! Ma-trix!

tuckerm ,

I know that Telegram has a lot of users, so I'm not describing all of them here. But I've noticed that it seems especially popular among people who kind of like to "play pretend" as underground hackers. You know, the kind of person who likes to imagine that the government would be after them.

This mudslinging feels like more of a marketing campaign than anything else. An info op that will work well on the Telegram users who like to imagine that they have outmaneuvered all the info ops.

rottingleaf ,

Yes. And those pretenders are always people who can't install Synapse and "delete" their messages thinking that's very smart.

autonomoususer ,

Because we keeping saying Signal and Telegram instead of Anti-Libre Software, Service as a Software Substitute, and Centralised.

We should reach them in their spaces, moding, hacking, piracy and beginner programming channels.

mox ,

There is also Matrix, which has advantages over both of them.

electricprism ,

Anyone see if self hosted server ever got easy enough? For realsies.

autonomoususer ,

Use the Docker container.

The_Dark_Knight , (edited )

Matrix is shit atm mate stop recommending it maybe one day it will become good but that day is not today also they are said to be scattering metadata and bashes XMPP for no real reason . Briar and SimpleX is the gold standard for now only if they had more users .

autonomoususer ,

bashes XMPP for no real reason .

This is a lie.

The whole area of XMPP vs Matrix is quite subjective. Rather than fighting over which open interoperable communication standard works the best, we should just collaborate and bridge everything together. The more federation and interoperability the better.

https://matrix.org/docs/older/faq/

The_Dark_Knight ,

Yeah my bad . Shit source from reddit I guess .

xilona ,

+1

mox , (edited )

Matrix is shit atm mate

No, it is not.

bashes XMPP for no real reason .

No, it does not.

Briar and SimpleX is the gold standard for now

No, they are not. They might fit a certain niche (or could once they mature) but neither is a good general-purpose messenger, because their goals and designs inherently limit usability.

No messaging platform fits every use case, but Matrix is great for general-purpose private messaging that anyone, anywhere can easily use, without Google services, without a phone number, and without being vulnerable to shutdown if a single country's laws turn unfavorable. It has other advantages as well. It's not flawless, but is constantly improving, and is already very useful to many people.

If you have a specific criticism that you can actually support with facts, you could bring it up for discussion. Slinging vague attacks that look a lot like something one might see in a poorly-informed reddit post doesn't help anyone.

The_Dark_Knight ,

Its like you have never used it . The clients and servers are laggy federation is shit etc . but you seem to have your mind set no hope in arguing .

mox ,

The clients and servers are laggy

Which ones, exactly? The largest public server was laggy about two or three years ago, but hasn't been recently in my experience, and in any case, you can pick a different server or run your own. I have never seen a laggy client.

federation is shit etc .

Again, that doesn't match my experience, and what you've written is too vague to have any useful meaning.

no hope in arguing .

Apparently not. Good day.

devraza ,
@devraza@lemmy.ml avatar

I’ve previously had issues with Matrix being incredibly slow and unreliable with federation (I’m self-hosting). However, that’s pretty much in the past now and I seem to have somehow resolved that issue.

mox ,

Which server software are you running? Any recent experience with Conduit or Dendrite?

devraza , (edited )
@devraza@lemmy.ml avatar

I’ve been using Conduit within a docker container for a while now, and it’s worked pretty well aside from the mautrix-signal bridge (this was fixed in version v7.0.0, I think). Other than conduit, I tried out dendrite, but the latency in sending messages was unbearable.

mox ,

I wonder if Conduwuit would be worth a try. I don't know anything about the maintainer or what led to the fork, but I see it already has active contributors.

devraza ,
@devraza@lemmy.ml avatar

I'm not sure - conduwuit does seem to have more active development but it's not as though conduit is dead either...I also can't find any other reasons to use conduwuit mentioned on its repository, so I'm just going to stick to conduit.

UnfortunateShort , (edited )

Edward fucking Snowden has recommend Signal and I think if anyone knows whether it's secure, it's probably him and the NSA.

That and he is paranoid to a point where he physically kills all mics and cameras on his devices, so if he claims anything is secure, I will believe him unconditionally.

TheAnonymouseJoker Mod ,

Edward Snowden Is NOT a security expert. Snowden was a NSA contractor. I repeat, Snowden is NOT a security expert.

so if he claims anything is secure, I will believe him unconditionally

This is how you know the brain has rotten and become a slick turd.

Gutless2615 ,

Username related.

TheAnonymouseJoker Mod ,

Do you have any serious and constructive thing to say, or may this be considered a case of hit-and-run trolling?

rottingleaf ,

This is how you know the brain has rotten and become a slick turd.

Agreed. Making it a contest of "this talking head seems smarter" means exactly that.

Try explaining that to normies though. They don't want to understand shit, and they want to think they are safe without understanding shit. That this is impossible they just don't want to believe, because they don't understand shit.

TheAnonymouseJoker Mod ,

I absolutely aim to challenge this kind of crap. If I leave, I doubt there will be people who will do it consistently. People want to follow X, Y and Z cults but not A, B and C cults, and think they are rational. Rationalists can come up with the most irrational nonsense, which is why they are not rational.

rottingleaf ,

That you can't do something well or at all without understanding it is philosophy. Philosophy is weak in the sense that it exists on the same level as aesthetics or instincts. So it's fighting instinct in a system built to make crowd management through instinct convenient, - in disadvantaged position.

Also NT people like to champion their stupidest ideas as a banner to assemble under. Stupidest exactly to exclude any rational reason, so that only the feeling of community would remain.

They don't always say what they mean. They might say "this thing is better", but what they mean is "I'm with the group which distinguishes itself by support for this thing, don't be against us".

rottingleaf ,

so if he claims anything is secure, I will believe him unconditionally.

That's much more stupid than just using Facebook and unencrypted e-mail with Outlook address for communication, but knowing how safe exactly those are.

autonomoususer , (edited )

Same guy shilled anti-libre software and we should let them stop us thinking for ourselves?

dubyakay ,

/s, right? I'm just hoping this is missing a /s.

catalog3115 , (edited )

I am going to repeat what I have said for another similar post.

I still stand for Signal App.

  • Telegram has no default E2EE, Telegram is run by for profit company
  • Multiple flaws were found in Telegram's encryption algorithm
  • Almost all cleartext messages are stored on telegram server, but signal stores encrypted message temporarily
  • Signal is non-profit & all their source code + finances are public. Even their server codes are publically available
TCB13 , (edited )
@TCB13@lemmy.world avatar

Yes, yet telegram isn't a piece of shit of an app that runs slowly on every device, can't sync messages because "something went wrong" and doesn't depend on electron to run. Also, not funded by the CIA.

hruzgar ,

completely agree with you. I can't believe why you are getting downvoted. Promoting a platform which is funded by the CIA, US gov and Israel. Completely insane really I don't understand how people are still believing this. They really need to wake up to the truth otherwise things will never change. Privacy will stay an illusion we give ourselves to believe that nobody can read our messages (even if they absolutely can)

johnnyb ,

you believe every mathematician and the crypto people are conspiring to spy on us and call other people insane?

Linguist ,

Could you not apply this "funded by the CIA" argument to other things such as... The Tor Network? Which was created by the US Military Naval Research? Also some US government departments have donated to Tor. Does that mean Tor is breached?

TCB13 ,
@TCB13@lemmy.world avatar

Okay that’s fair, even if remove that and assume they hold zero influence / there are no cleaver backdoors Signal is still not good when it comes to performance and reliability.

Coasting0942 ,

Guys, I think all these computers took military funding. Wake up sheeple.

rottingleaf ,

Telegram is as safe as just using Facebook DMs (unencrypted), only it's Russian.

I suggest you judge for yourself how safe that is.

JubilantJaguar ,

Even if it were encrypted and the backdoor was controlled by the Russian state, logically that would make it safer than Facebook for anyone living in Western jurisdictions. The Russian government cannot get them and is hardly going to exchanging intelligence with its enemies.

rottingleaf ,

Even if it were encrypted

It's not.

logically that would make it safer than Facebook for anyone living in Western jurisdictions. The Russian government cannot get them and is hardly going to exchanging intelligence

No it wouldn't. You shouldn't opine on what they'd do. They can negotiate, you know. And they are exchanging intelligence all the time.

with its enemies.

If that were true, corporations wouldn't work with their competitors.

JubilantJaguar ,

You shouldn’t opine

To "opine" is to have an opinion. Are you suggesting I should refrain from having an opinion? Does this apply to your own opinions too? Odd place to make such an argument.

Otherwise: interesting point. To me, a state that can obtain personal data by leaning on its owns corporations is, by definition, more threatening than one that has to negotiate for it with a hostile power. But perhaps I underestimate the scale of that practice.

rottingleaf ,

On what they would and wouldn't do - yes, I try not to make opinions.

But perhaps I underestimate the scale of that practice.

Considering that the balance of power between US government and, say, Meta is not much different from the same between it and Russian government (Meta doesn't have a military, but has ways to compensate for that), that should be right.

okamiueru ,

To what extent is it Russian?

xilona ,

+1

autonomoususer , (edited )

claiming it has ties Which lines of its libre software source code are malicious?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • privacy@lemmy.ml
  • incremental_games
  • meta
  • All magazines
    •