• 1 Post
  • 106 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle



  • Eager Eagle@lemmy.worldtoPrivacy@lemmy.mlWhy We Stopped Using Signal Messenger
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    edit-2
    1 month ago

    It turns out that startup funding for Signal was from a US Government tied entity. Some people won’t like that. Here’s an interesting article: Signal Facing Collapse After CIA Cuts Funding

    Someone already commented on the “nothing-burger” this article and line of reasoning actually is, so I won’t repeat it here.

    $19m / 50 = $380,000 per year per employee!!!

    This $19M figure includes more things. That’s why a blog post shouldn’t be read as an accounting report. Report summaries with salary figures are available btw, one search away.

    The infrastructure was not designed to minimize the cost of operations, it was designed for another purpose, data collection by third parties:

    The quoted text is not evidence for this. Quite the opposite, in fact.

    Elon Musk also promotes Signal:

    He promotes Linux too. Also, I bet he drinks water.

    I see some valid concerns / questions, but it’s immersed in a muddy water of arguments that is hard to disentangle.








  • Telegram is the only massively popular messaging service that allows everyone to make sure that all of its apps indeed use the same open source code that is published on Github.

    Not true. Signal has a very similar client verification process to Telegram’s, described here. The lack of an iOS reproducible build is an Apple limitation / nuisance.

    It’s very complicated, the 2nd jailbroken device is necessary because there’s no other way to download the .ipa, but even if you manage to do that and bit-for-bit reproduce the .ipa you downloaded from source, there’s no way to know if the App Store is sending every user the same .ipa or if your other, non-jailbroken iPhone downloaded a backdoored one.

    Telegram docs even acknowledge these limitations.

    Ultimately, this client verification is not the selling point Telegram’s founder makes it sound like, since most messages are not E2EE and the server code is closed.