• Kalcifer@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    134
    arrow-down
    6
    ·
    edit-2
    11 months ago

    Signal isn’t federated [1][2][3.1]; it’s decentralized [1][2][3.2]. Though, for all practical purposes, I would generally argue that it’s centralized.

    References
    1. Signal-Server. signalapp. Github. Published: 2025-01-31T15:34:14.000Z. Accessed: 2025-02-01T09:24Z. https://github.com/signalapp/Signal-Server.
      • This is the source code for the server that Signal uses.
    2. “Signal (software)”. Wikipedia. Published: 2025-01-06T09:34Z. Accessed: 2025-02-1T09:30Z. https://en.wikipedia.org/wiki/Signal_(software).
      • ¶“Architecture”. ¶“Servers”.

        Signal relies on centralized servers that are maintained by Signal Messenger. In addition to routing Signal’s messages, the servers also facilitate the discovery of contacts who are also registered Signal users and the automatic exchange of users’ public keys. […]

    3. “Reflections: The ecosystem is moving”. moxie0. Signal Blog. Published: 2016-05-10. Accessed: 2025-02-01T09:40Z. https://signal.org/blog/the-ecosystem-is-moving/.
      1. ¶5. to ¶“Stuck in time”. ¶3-6

        One of the controversial things we did with Signal early on was to build it as an unfederated service. Nothing about any of the protocols we’ve developed requires centralization; it’s entirely possible to build a federated Signal Protocol-based messenger, but I no longer believe that it is possible to build a competitive federated messenger at all. […] [interoperable protocols] [have] taken us pretty far, but it’s undeniable that once you federate your protocol, it becomes very difficult to make changes. And right now, at the application level, things that stand still don’t fare very well in a world where the ecosystem is moving. […] Early on, I thought we’d federate Signal once its velocity had subsided. Now I realize that things will probably never slow down, and if anything the velocity of the entire landscape seems to be steadily increasing.

      2. ¶“Stuck in time”. “Federation and control”. ¶6.

        An open source infrastructure for a centralized network now provides almost the same level of control as federated protocols, without giving up the ability to adapt. If a centralized provider with an open source infrastructure ever makes horrible changes, those that disagree have the software they need to run their own alternative instead. It may not be as beautiful as federation, but at this point it seems that it will have to do.

      • Kalcifer@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        41
        arrow-down
        4
        ·
        11 months ago

        My comment wasn’t protesting the use of Signal; it was rather clarifying the misinformation in OP’s post — ie misinformation that Signal is a federated service.

        • apex32@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          11 months ago

          I wish Boost understood the collapsible spoilers.

          On my client, it’s all expanded and I see all the formatting characters. It looks/works great in a browser though.

            • Kalcifer@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              2
              ·
              11 months ago

              Dang 😕. See my comment for a related response.

              I recommend reporting the bug to the Sync devs to fix their Markdown formatting to improve feature compatibility between them and the Lemmy UI.

          • Kalcifer@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 months ago

            I wish Boost understood the collapsible spoilers.

            On my client, it’s all expanded and I see all the formatting characters.

            Ah dang, that’s good to know (though I’m not sure what to do as an alternative) — I was unaware that the collapsible spoilers weren’t supported on Boost. I guess that means that Lemmy’s markdown formatting hasn’t entirely been standardized across the service. I personally have encountered some inconsistency on the Tesseract UI with CommonMark Autolink [2] formatting where the autolinks don’t even render [1].

            I recommend reporting this to the Boost devs to improve Markdown feature compatibility between them and the Lemmy UI.

            References
            1. “Kalcifer” @Kalcifer@sh.itjust.works. To: [“Happy #GlobalSwitchDay”. @squirrel@discuss.tchncs.de. “Fediverse” !fediverse@lemmy.world. Tesseract. sh.itjust.works. Published: 2025-02-01T07:08:40Z. Accessed: 2025-02-02T04:40Z. https://tesh.itjust.works/post/sh.itjust.works/32046509.]. Published: 2025-02-01T09:20:14Z. Accessed: 2025-02-02T04:42Z. https://sh.itjust.works/post/32046509/16425699.
              • Raw Text:
                Signal isn't federated ^[1][2][3.1]^; it's decentralized ^[1][2][3.2]^. Though, for all practical purposes, I would generally argue that it's centralized. 
                
                ::: spoiler References
                1. Signal-Server. signalapp. Github. Published: 2025-01-31T15:34:14.000Z. Accessed: 2025-02-01T09:24Z. <https://github.com/signalapp/Signal-Server>.
                   - This is the source code for the server that Signal uses.
                2. "Signal (software)". Wikipedia. Published: 2025-01-06T09:34Z. Accessed: 2025-02-1T09:30Z. <https://en.wikipedia.org/wiki/Signal_(software)>.
                   - ¶"Architecture". ¶"Servers".
                     > Signal relies on centralized servers that are maintained by Signal Messenger. In addition to routing Signal's messages, the servers also facilitate the discovery of contacts who are also registered Signal users and the automatic exchange of users' public keys. […]
                3. "Reflections: The ecosystem is moving". moxie0. Signal Blog. Published: 2016-05-10. Accessed: 2025-02-01T09:40Z.  <https://signal.org/blog/the-ecosystem-is-moving/>.
                   1. ¶5. to ¶"Stuck in time". ¶3-6
                      > One of the controversial things we did with Signal early on was to build it as an unfederated service. Nothing about any of the protocols we’ve developed requires centralization; it’s entirely possible to build a federated Signal Protocol-based messenger, but I no longer believe that it is possible to build a competitive federated messenger at all. […] [interoperable protocols] [have] taken us pretty far, but it’s undeniable that once you federate your protocol, it becomes very difficult to make changes. And right now, at the application level, things that stand still don’t fare very well in a world where the ecosystem is moving. […] Early on, I thought we’d federate Signal once its velocity had subsided. Now I realize that things will probably never slow down, and if anything the velocity of the entire landscape seems to be steadily increasing.
                   2. ¶"Stuck in time". "Federation and control". ¶6.
                      > An open source infrastructure for a centralized network now provides almost the same level of control as federated protocols, without giving up the ability to adapt. If a centralized provider with an open source infrastructure ever makes horrible changes, those that disagree have the software they need to run their own alternative instead. It may not be as beautiful as federation, but at this point it seems that it will have to do.
                :::
                
                • Rendered:

                • In the rendered text there are no links; however, there should be links at the end, as is shown by the CommonMark autolinks in the raw text.
            2. “CommonMark Spec”. John MacFarlane. CommonMark. Version: 0.31.2. Published: 2024-01-28. Accessed: 2025-02-02T04:51Z. https://spec.commonmark.org/0.31.2/#uri-autolink.
              • §6.5 “Autolinks”. ¶2.

                A URI autolink consists of <, followed by an absolute URI followed by >. It is parsed as a link to the URI, with the URI as the link’s label.

    • amzd@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      2
      ·
      11 months ago

      it’s decentralized

      No it’s not. From literally your own comment:

      Signal relies on centralized servers

      For a decentralized messenger use https://delta.chat

      • Kalcifer@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        edit-2
        11 months ago

        it’s decentralized

        No it’s not. From literally your own comment:

        Signal relies on centralized servers

        I was using “decentralized” to mean that there isn’t centralized control over ownership of the service in general — eg anyone can spin up their own server (impractical, imo, pushing it more towards being centralized) and people can use it (making it decentralized, imo (Please correct me if I am wrong, but I do think my usage of the term is appropriate in this way.)), but people who use that server can only communicate with that server (making it not federated). But yes it could still be said to be centralized in that it operates on a client-server model [1].

        This is more an argument of definitions, though. I’m not trying to claim anything in bad faith.

        References
        1. Signal-Server. signalapp. Github. Published: 2025-01-31T15:34:14.000Z. Accessed: 2025-02-01T09:24Z. https://github.com/signalapp/Signal-Server.
          • This is the source code for the server that Signal uses.
        • amzd@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          1
          ·
          11 months ago

          That’s just open source, not decentralized. I can’t find a definition of decentralization that would even make it vague. From Wikipedia:

          Decentralization is the process by which the activities of an organization, particularly those related to planning and decision-making, are distributed or delegated away from a central, authoritative location or group and given to smaller factions within it.

          Signal has a central authoritative server and to use it with any other server you have to modify the source code.

          • Kalcifer@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            1
            ·
            edit-2
            11 months ago

            Decentralization is the process by which the activities of an organization, particularly those related to planning and decision-making, are distributed or delegated away from a central, authoritative location or group and given to smaller factions within

            Imo this fits my usage of the term — Signal can be broken up into many isolated servers [1] all offering the same service.

            References
            1. Signal-Server. signalapp. Github. Published: 2025-01-31T15:34:14.000Z. Accessed: 2025-02-01T09:24Z. https://github.com/signalapp/Signal-Server.
              • This is the source code for the server that Signal uses.
          • Kalcifer@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            edit-2
            11 months ago

            That’s just open source, not decentralized.

            Depending on exactly how said open source development is occuring, I could argue that open source development is an example of decentralization. It may even be an example of federation (all depending on licensing and development medium imo).

    • jollyrogue@lemmy.ml
      link
      fedilink
      English
      arrow-up
      7
      ·
      11 months ago

      Yeah, Moxie has openly shot down the idea of adding federation to Signal, and I’ve never heard them claim Signal was decentralized.

      Matrix is federated, distributed, and decentralized.

      XMPP is federated and decentralized.

        • jollyrogue@lemmy.ml
          link
          fedilink
          English
          arrow-up
          3
          ·
          11 months ago

          Matrix servers keep a copy of any remote room an account on the server has joined, and it’s possible to recreate a room from the copies held on different servers. There are more details I don’t remember, but at a high level that’s how it’s distributed.

          Storing messages of remote rooms in addition to local rooms is why people complain about the storage requirements of Matrix servers. They don’t realize it’s distributed.

    • namingthingsiseasy@programming.dev
      link
      fedilink
      English
      arrow-up
      7
      ·
      11 months ago

      but I no longer believe that it is possible to build a competitive federated messenger at all.

      The fact that we have a telephone system that works with separate providers contradicts this sentiment. If I want to pick up the phone and talk to my cousin’s puppy in New Zealand, I can do that without creating an account on his provider’s service.

      I don’t understand why we’ve forgotten this as a society. Yes, it was difficult to upgrade the phone systems over the past century, but it’s worth it in my opinion. I really wish we’d start seeing government regulation that says “you should be able to talk to someone on a service without having to create an account on said service.” I thought the DMA would do this, but sadly, Whatsapp still requires an account to talk to people using that service. Very disappointing.

      • jollyrogue@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        How is the puppy?

        As for interoperability between services… Monetization of surveillance data. The social media companies are Ad companies, and they make their money surveilling people and selling access. It’s harder to build an accurate model of a person when only pieces of data is available, and they need to have more data then the other Ad tech companies they’re competing with.

  • Undaunted@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    75
    ·
    11 months ago

    Unfortunately, the switch from YouTube to PeerTube has not worked for me so far. I can’t find a decent instance (not full of right-wing/conspiracy content) with interesting stuff that also allows me to make an account.

    • FundMECFS@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      48
      ·
      11 months ago

      Yes finding the right instance on peertube is a nightmare — and also the general lack of quality content, or subtitling, which makes it as good as useless for deaf people like me.

      • Elrecoal19_0@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        ·
        11 months ago

        Yeah, it is already hard to find reasons to use it for the average user, so people with disabilities (deafness, blindness,intellectual etc.) probably even have reasons to NOT use them (no subtitles, each instance might have different elements or structure that might be a nightmare for screen readers, it might be too complex for some people, etc.).

  • ERROR: Earth.exe has crashed@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    41
    ·
    11 months ago

    Youtube is probably the one that you can’t “Just Switch To Fediverse”

    Youtube content is mainly by creators. If they won’t leave, there will be no transition. And unlike reddit posts, you can’t just reupload. Because they will copyright strike you and take it down. Also, videos take up a lot more space than just text and some low-res memes like reddit-type sites.

    reddit is essentially a bunch of strangers talking to people, moving froms stranger Group A to stranger Group B is very easy to do. The reddit > Lemmy transition is probably one of the easiest. You’re just joining a new group of strangers.

    For everything else, your contacts will also need to switch.

    For Mastodon, the people you follow will also need to switch. This is even harder than getting your friends to switch.

    • TropicalDingdong@lemmy.world
      link
      fedilink
      English
      arrow-up
      24
      arrow-down
      1
      ·
      11 months ago

      Hear me out.

      Creators should be hosting peer tubes. And they should host exclusively their own content. Fans of their can subscribe to whatever systems they want to pay and support.

      For creators, it’s a backup for when YouTube the project inevitably fails. For fans as well. But it’s also a backup of their content.

      • Statick@programming.dev
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        1
        ·
        11 months ago

        Tech-savvy content creators, sure…

        Your average content creator that wants to make Minecraft videos? Unrealistic.

        I hate the monopoly Youtube has, but all of the federated alternatives have a learning curve the general public isn’t willing to deal with.

        • Natanox@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          9
          ·
          11 months ago

          Not to mention it lacks any (ethical) monetization options. And the app is absolutely rudimentary, lacking even basic functionality.

          Framasoft made it clear they don’t want to make it a Youtube alternative though, however it could be through plugins. So there’d have to be a company or cooperative using it as a base to build upon, which is actually realistic. Especially European ones; not because Asia wouldn’t be interested in being more independent on the US as well, but because Framasoft is from France and Europe actively works towards this goal anyway with lots of money behind it.

    • RandomVideos@programming.dev
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      2
      ·
      11 months ago

      A lot of youtubers make a living posting videos.

      They dont have a good enough reason to risk going to a much smaller audience with no ads and no membership system

      They also probably arent knowledgeable enough about computers to switch

      • acockworkorange@mander.xyz
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        You don’t need to have a YouTube login to watch those. But you can join Peertube to post your content that you make without money as an end goal.

    • Rose@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      11 months ago

      For Mastodon, the people you follow will also need to switch. This is even harder than getting your friends to switch.

      Well I switched from the birdsite to Mastodon because a) I like to shout in the void and b) see what other people are shouting into the void. Doesn’t really ultimately matter who’s doing the shouting. People who go to social media exclusively for news and updates are a bit strange when you really think about it. You’ve got to have the shout in you.

      (I’m only being half facetious here)

    • jonjuan@programming.dev
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 months ago

      You also can’t just switch from whatsapp to signal. I have hundreds of contacts on whatsapp that message me constantly there, and 2 on signal.

    • acockworkorange@mander.xyz
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      Remember the early days of YouTube? When people made garage videos for fun? Remember Vines? When people were making videos instead of businesses making content?

      That’s what Peertube is for. It’s to have fun. Showcase your high school band. Talk about your potted plants. Share your excitement about trains. It’s not to make money. It’s to live.

    • jaybone@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      11 months ago

      The Lemmy logo always looks so sad or angry to me. Wished he could look happier.

      The only ones on the right I really like are signal and friendica. (I had never seen the friendica logo before. This is really well done whoever designed that. Good job.)

      All the big guys of course can afford graphic design teams and marketing/PR research.

      The notable exception for me is mastodon. While I’m still not a big fan of that logo either, it certainly looks better than the X logo. I’m guessing Musk DOGE’d his design teams in favor of some yes-men.

  • chanteoma@lemmy.ml
    link
    fedilink
    English
    arrow-up
    33
    arrow-down
    1
    ·
    11 months ago

    Hi, I think too many people are focusing too much on the type of software included in this chart. I don’t think the goal of the person that created the chart was to create the ultimate guide to move to the Fediverse or FOSS apps with all the options available for them. I believe it prioritizes simplicity, and it’s clearly directed towards people unaware that these alternatives exist.

    Most people I know don’t even know what the Fediverse is, and I think this initiative is for them.

    I know that debating which FOSS/Fedi apps are the best is a big matter of concern for people that are already aware of the problems some platform have. But focusing too much on this debate not only creates more division among supporters of FOSS/Fedi, but it is also drawing attention from the main point: Bringing more people to the Fediverse.

  • DicJacobus@lemmy.world
    link
    fedilink
    English
    arrow-up
    31
    ·
    11 months ago

    instead of switching ive mostly just been ditching entirely. I need less time interacting with internet people.

    literally the only thing on this list im still using is facebook messenger, for my work colleagues. and youtube. everything else ive migrated (reddit-lemmy), or abandoned and torched

    • 8fingerlouie@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 months ago

      It’s funny how things work out.

      I’ve spent years checking social media multiple times per day, and due to current (and not so current) events, I initially just deleted twitter. I tried mastodon, but it was a complete echo chamber. Twitter on the other hand was 25% bots and 50% porn, so I just deleted it. Turns out I didn’t miss it.

      I recently did the same with Instagram, Facebook, TikTok and Snapchat. Guess what, not missing those either.

      Facebook messenger is tough to get rid of though. I have kids that attend after school activities, and there aren’t really any easy fixes. I doubt I can successfully persuade 100+ people to migrate to signal just because of my political crusade.

      It’s not being helped by the fact that ~75% of the people here use iPhones, so most communication not going through messenger goes through iMessage. Last I checked I knew a total of 4 people on signal, despite having 50+ people i regularly communicate with over messenger or iMessage.

      • nyamlae@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        I doubt I can successfully persuade 100+ people to migrate to signal just because of my political crusade.

        Don’t know till you try! And if you’re playing the long game, you don’t need to convince 100+ people – the more individuals that join, the easier it will become to convince everyone else to make the switch too.

        • 8fingerlouie@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago

          In this specific case, like my kids soccer or swimming team, I would need to convince 15 childrens parents, so 30 people (or more) to switch.

          On top of that, the soccer club has more teams, and since soccer practice is scheduled by the club, the club itself would need to switch their ways of working, and that’s where it gets tough.

          Facebook, for better or for worse, offers a free platform with a built in blog, instant messenger, calendar, reminders, and an easy way to send messages to all relevant people.

          Signal only solves one or two of those problems, meaning they would have to find alternatives for the rest, and I for one don’t miss the time when everybody used some variant of a shared calendar (ie Google calendar) to schedule, and you’d be subscribe to 10+ calendars with notifications going off left and right.

          Nor do I miss every club having its own poorly maintained Wordpress site, with ensuing loss of credentials because the admin used “hunter2” as their password.

          These people are not tech nerds, they’re enthusiasts for whatever sport they’re teaching our kids, and we should make their jobs as easy as possible.

    • Katana314@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      More recently I’ve felt like there’s issues with being completely disconnected from any sort of critical mass. If I wanted to join a protest in my local city, I have doubts any of the fringe social networks could organize that. I can do my part to try to get more people on there.

      It’s part of why I joined BlueSky over X. It’s more popular, and issues be what they are, that counts for a lot.

  • teri@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    33
    arrow-down
    4
    ·
    11 months ago

    I support the cause in general but: Signal is not federated at all. It may seem like a decent alternative to WhatsApp but is it really? It still falls under the same US jurisdiction. Let’s say the US gov starts agressively prosecuting dissidents and certain minorities (they already do): can and should we still use signal in this case? I don’t think so. Sadly i can’t name a much better alternative. Maybe matrix. But it has other issues.

    • Bazoogle@lemmy.world
      link
      fedilink
      English
      arrow-up
      24
      ·
      11 months ago

      Signal is open source. They absolutely do always comply with US warrants. They have never provided any information to US law enforcement, because they can’t access it. They literally have no way of accessing the information contained inside the texts. The most they could provide is metadata, but they currently aren’t collecting that. I also think if they started, it would not work well for their user base. You can see all their requests for information, and the responses they gave, here: https://signal.org/bigbrother/

      • teri@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        3
        ·
        11 months ago

        I really hope they stand strong. We need some influential entities standing up to the shit going on. Sadly, given the current situation in the US I have to assume that the Trump gang will sooner or later try to crack down on Signal. Who knows, forcing them to give out meta data to identify dissidents etc.

        At least the open-source app makes me hope that there’s a little less nasty things they can do than Facebook/Whatsapp.

    • drathvedro@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      Let’s say the US gov starts agressively prosecuting dissidents and certain minorities (they already do): can and should we still use signal in this case?

      Definitely no. Russian government already is aggressively prosecuting dissidents and you can’t join Signal there. I don’t know whether it’s due to sanctions or if the government is blocking 2FA SMS messages. In either case, it is impossible to join without a phone number confirmation. At least I wasn’t able to. I don’t see the USA being that far off with all the recent TikTok drama.

      • nyamlae@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        you can’t join Signal there. I don’t know whether it’s due to sanctions or if the government is blocking 2FA SMS messages. In either case, it is impossible to join without a phone number confirmation.

        What do you mean? You need a phone number to join Signal in any country.

        • drathvedro@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago

          And that’s the problem. The whole privacy thing goes out the window because it relies on an insecure and state-controlled method for authentication. What’s the use of it if it can be killed off in any country at a whim of its, or USA’s government?

    • JigglySackles@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      Is Threema still a good option? Anyone know? I know it’s not a fediverse instance just a secure messaging platform. On that note though, can any federated platform really be used as secure messaging? Or is it too open?

      • teri@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        My personal opinion is that Threema is still a viable alternative to WhatsApp. The app is open-source, there’s even a ‘libre’ variant on F-Droid. The service is proprietary though. The jurisdiction (Switzerland) seems more trustworthy currently. I don’t really understand the business model of Threema: It seems like they have some revenue from a commercial service “Threema Work”. The initial cost for purchasing an app license does not really contribute to sustainability I guess. I suspect it is more for making scams more expensive. I hope they can be sustainable from that and don’t need to start doing shit.

    • teri@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      11 months ago

      We should stop being naive. Immersing ourselves as a society into facebook and twitter significantly contributed to the shit situation we are in now. Going to Signal seems like a short term solution. We should have some idea where to go on the long term.

      • Bazoogle@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        ·
        11 months ago

        Facebook and twitter are not the same as signal. The signal protocol is a free open source project, that WhatsApp, Signal, and many other use. It secures the data so that whatever servers they are stored on, the company storing it does not know what the texts say. Facebook and Twitter are all about getting as much data as possible. Even though WhatsApp uses the signal protocol, they still collect all metadata with the texts (which is really what they want anyway). Moving to open source project is absolutely the long term goal to get out of this shit hole.

    • EuroNutellaMan@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      11 months ago

      Jurisdiction is not that important. Even if it was in Switzerland it’d have to comply with international law enforcement and warrants. The key is that sure Signal is obliged to give out whatever data it has, but the point is that it doesn’t have much useful data to give. It’s the same as Mullvad, and a far smarter approach than “lol we just gonna ignore the warrant huhuhu look at us we host somewhere in Shitzerfuck” (oh btw “We are in X country which is not in N eyes” is just marketing).

      Oh and btw the same goes for instances of the fediverse (which are ran by volunteers you need to trust), and if they don’t comply and the US government really wants to break into them they probably will find a way. Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up, do some social engineering, arrest someone or at worst find a bug to exploit, and I can guarantee that unless you have some serious security wizards running your instance you’re not beating the FBI there and if the FBI is really persistent and focused on you for some reason then the wizards won’t be enough you need state actors.

      If your threat model actually includes the US government (aka you’re actually in danger and not some paranoia or just-in-case situation, be realistic with yourself) and there’s credible threats you may be targeted by it or other governments then you’re probably going to be using tor, briar, all that jazz, and wouldn’t be on lemmy. If you’re just some guy who just needs to message your family and shit Signal is perfectly fine, I can tell you that unless you’re a serious threat to the government they won’t waste resources cracking down ways to capture you via signal or whatever you use that is even somewhat secure (so no telegram, no WhatsApp, no messenger, etc), even if you’re a minority or activist, if not because you’re not important enough then because they have other easier ways to do it.

      Edit: oh and btw Signal was banned in Ruzzia (a country way more authoritarian than the US currently is) because the FSB couldn’t crack it so that goes to show it is pretty secure.

      • nyamlae@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        (oh btw “We are in X country which is not in N eyes” is just marketing)

        Why do you say this? There are real data-sharing agreements between the Eyes.

        Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up

        This already happened with kolektiva, unfortunately, but from what I hear they’ve since strengthened their security.

        • EuroNutellaMan@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago
          1. There’s data-sharing agreements with more than just the N eyes countries
          2. If there’s an international warrant for that data the company is obliged to comply regardless

          The only countries in which n° 2 doesn’t apply for the US are countries you really don’t want your data in either.

          In short, however: if a government really wants your data it will find a way to get it no matter where you store that data, so the best thing is to simply not store that data at all, Mullvad and Signal don’t do that.

  • breadguyyyyyyyyy@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    2
    ·
    11 months ago

    I keep seeing this type stuff but neither peertube or friendica are genuine replacements at this point, mastodon is weaksauce compared to akkoma or a misskey fork, and loops is alpha software. also yes signal is centralized but it just works and has contact discovery so it owns matrix and xmpp when compared to whatsapp. basically none of this stuff is truly ready

    • exhaust_fan@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      [Signal] has contact discovery so it owns matrix and xmpp when compared to whatsapp

      Can you please elaborate? Idk what this means

      • acockworkorange@mander.xyz
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        It means that, because signal mandates you to use your phone as ID, all your phone contacts that have signal are immediately signal contacts. Matrix, XMPP, SimpleX, etc. can’t really do that. That’s by choice, to preserve privacy, but it does create a friction point when migrating.

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      matrix too has contact discovery, if you add your phone number (or email). most users don’t, and that tells me something

  • Victor@lemmy.world
    link
    fedilink
    English
    arrow-up
    16
    ·
    11 months ago

    Thank you for this! Bookmarked this post, downloaded the image, sent it to all my friends. Love you!

  • namingthingsiseasy@programming.dev
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    3
    ·
    11 months ago

    I’m surprised this hasn’t been said yet… but what I hate most about Signal is its requirement for a phone number. I don’t want to be identified, and I want to be able to create multiple separate accounts with different identities if I want to.

    I also hate the fact that it’s a mobile-first service. Yes, there is a desktop application (and just one really crappy one at that), but it’s clearly designed to revolve first and foremost around your phone and be virtually impossible to use without one. As someone who hates writing on a 3-inch screen, this is a also non-starter for me.

    I understand the arguments about perfectionism, but this is too much. I’ll stick with XMPP, Matrix and IRC, thanks.

    • chiliedogg@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      1
      ·
      11 months ago

      It’s meant to replace people’s text messaging apps with .i imal barriers to entry. People’s existing SMS/MMS contacts aren’t stored by user account names, but by phone number.

      When I added Signal to my device, I was able to open up my existing contacts and go.

      • namingthingsiseasy@programming.dev
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        2
        ·
        11 months ago

        My understanding from what you’re writing (and from this article) is that the phone number is really the account number. That’s all well and fine, but then they force you to verify that the number is yours (or at the very least, one that you have access to because you need to receive a confirmation over SMS), so you can’t use something more private. And sure, it makes it a little harder to find your new contact, but I don’t think it’s really that big of a deal - just exchange your other “account number” via some other channel.

        Besides, don’t think for a second that when this identifying information inevitably falls into the wrong hands that it will benefit you in any way. “What are you hiding, citizen?” and all that bullshit.

        The part of it that bothers me is the sense of entitlement that these companies exhibit. The “Give us your phone number or fuck off” sentiment is something I just refuse to accept. If Google forces us to do the same and we refuse, what makes Signal think that we’ll do it for them when they’re so much smaller by comparison? Especially when you’re trying to claim you’re more secure and private to people that much more tech savvy than average, this just comes off as not understanding your audience very well. I’m sure I’m not the only one that is holding out against using Signal because of this.

        • chiliedogg@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          2
          ·
          11 months ago

          The last thing we need is more barriers to entry. People have hundreds of SMS /MMS contacts they’vebuilt up over decades. You can’t expect people to say “fuck all that” and start over from scratch.

          And you also WANT verification unless you want some bot setting up an account with my phone number so they can scam people pretending to be me.

          It really sounds like your issue with Signal is it’s not the correct service for your use. It’s like declaring a wrench bad because it’s not good at driving nails.

      • sexual_tomato@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        11 months ago

        They used to allow their client to be used to send unsecured SMS. Then they stopped. Whatever they thought they were doing, they killed the simplest path to onboarding laypeople they had. I kinda gave up on signal after that.