• a14o@feddit.org
    link
    fedilink
    arrow-up
    23
    arrow-down
    19
    ·
    4 days ago

    Signal still centrally collects metadata and requires a phone number to participate.

    If you’re serious about privacy, ESPECIALLY if you’re part of a group looking to organize in a clandestine fashion, you should look into the vastly superior SimpleX Chat.

      • burgerchurgarr@lemmus.org
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        Idk why it’s always assholes coming up with good software (shoutout to the lemmy devs lol) but simplex is a great messenger nevertheless. I sure as hell won’t donate to that guy though, like ever.

        • D06M4@lemmy.zip
          link
          fedilink
          arrow-up
          1
          ·
          2 days ago

          Nope. To add a little context, imagine that someone who uses Lemmy (which is well known to be developed by a team of people not everyone agrees with) to crosspost the same articles to infinity told everyone not to use a piece of well regarded and audited open source privacy software because it’s main developer has sided with US republicans.

    • Optional@lemmy.world
      link
      fedilink
      arrow-up
      23
      arrow-down
      1
      ·
      4 days ago

      per the article

      Signal can’t access user metadata. It’s not just that Signal promises not to keep logs. They’ve literally engineered their service to cryptographically prevent themselves from having access to metadata, even if they wanted to. Signal doesn’t know what groups you’re in, or even what Signal groups exist on the platform. They don’t know the names or membership of any Signal group. They can’t even access your profile picture or name. All of this is stored on user devices and shared directly from user to user. On the other hand, if WhatsApp gets a data request, Meta will turn over details about everyone in your group, exactly who sends messages to who, and when, because WhatsApp collects all of this.

      • throwawayacc0430@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 days ago

        They’ve literally engineered their service to cryptographically prevent themselves from having access to metadata, even if they wanted to.

        So, its all done by the user client? Meaning: If you check the source code, and compiled it yourself, it’s safe? Even against a malicious server?

      • Telorand@reddthat.com
        link
        fedilink
        arrow-up
        8
        ·
        4 days ago

        Signal is likely fine for a use case like that. Don’t feel like you need to switch if you don’t have a good reason. Signal is a great balance between stupid-easy useability and E2EE messaging, and people who actually need that extra mile of privacy should know better than to use Signal.

      • scytale@lemmy.zip
        link
        fedilink
        arrow-up
        5
        ·
        3 days ago

        i cant do a seitch again

        On a serious note, sticking to Signal for family group chats is fine. No need to move them over to another platform.

    • Telorand@reddthat.com
      link
      fedilink
      arrow-up
      14
      arrow-down
      7
      ·
      4 days ago

      Signal collects your IP address and the last IP address you sent a message to. They store that info to maintain their services. They also store your phone number, either of which can be tied back to your identity (in the US, don’t @ me, friends from across the pond).

      The only thing these reveal is that you use Signal, which is currently still legal. Also, even if a judge ordered Signal to collect outgoing messages for your user, the content of your messages would already be encrypted. So unless your use of the service could be construed as illegal (or perhaps who you’re talking to), then it’s probably still safe to use.

      However, all that said, I still agree that SimpleX is a better choice for activism. No phone numbers or other useful identifiers, uses a series of nodes rather than a central server, expiring contact-adding codes, etc… it’s simply better, if you need privacy against external threats.

      And there’s no reason you can’t have both on your phone for different kinds of groups!

    • scott
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      7
      ·
      4 days ago

      They dropped the phone number requirement a while ago

        • a14o@feddit.org
          link
          fedilink
          arrow-up
          2
          ·
          3 days ago

          What’s more, they require you to periodically log in on your phone. If you exclusively use the desktop client, you will get a message that access will be blocked if you don’t sign in on your phone.

          • 0_o7@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 days ago

            Sometimes, it feels like a surveillance loophole is left for the OS (remember when they had plain text backups on windows). And Apple, Microsoft, and Google would happily turn over data, while Signal always will have plausible deniability.

            And you will always need a smartphone OS built by one of the US companies above to start and continue using signal.

      • Optional@lemmy.world
        link
        fedilink
        arrow-up
        4
        ·
        4 days ago

        Yeah I thought they had too, but it’s the case that for a new account you still have to have a phone #. You can then use a chosen account for everything else.

        • scott
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 days ago

          I’ve been corrected on that.