Using Signal groups for activism
-
They dropped the phone number requirement a while ago
you mean, you don't need one for registration?
-
can you show evidence for this?
The best choice for activism right now is signal and has been for years. The best choice isn't necessarily the most hardened app or messaging system, it's the most hardened balanced against ease of use and access, along with features.
It's been proven in court several times. The only information they keep is your phone number, unix timestamp of your account creation, and the unix timestamp of when you were last online.
-
It's been proven in court several times. The only information they keep is your phone number, unix timestamp of your account creation, and the unix timestamp of when you were last online.
Which is not the claim OP made.
-
Which is not the claim OP made.
Which claim are you referring to?
-
Which claim are you referring to?
Signal collects your IP address and the last IP address you sent a message to.
-
Signal collects your IP address and the last IP address you sent a message to.
Yeah, they likely misremembered that it was timestamps instead of IPs.
-
Yeah, they likely misremembered that it was timestamps instead of IPs.
I mean its the principal claim.
-
SimpleX is run by a Trump apologist and "white genocide" believer who believes the protests are fake and/or literally Stalin.
Edit: "all child abuse is horrible. But..." Evgeny is especially concerned about "genocide of young white girls" specifically, wondering "can Elon Musk help?"
Can all of this compromise the SimpleX protocol in any way?
-
I mean its the principal claim.
I'd say that the principal claim is that they can't see your messages and that they have no incriminating data on you. No judge can order them to hand over your data and incriminate you because they don't have that data. What exactly is the very little data they have is less important.
-
Use Walkie talkies with a voice changer and coded phrases
No Imeis, no way to track you. Just don't transmit near your house.
Very insecure. Vulnerable to MITM, jamming, etc.
-
you mean, you don't need one for registration?
I've been corrected on that.
-
Very insecure. Vulnerable to MITM, jamming, etc.
wrote on last edited by [email protected]Airgapped Android phones (with radios removed) and use Rattlegram + OpenKeychain to encrypt and sign messages.
As for jamming... well they can just turn off mobile networks and the internet too.
-
I'd say that the principal claim is that they can't see your messages and that they have no incriminating data on you. No judge can order them to hand over your data and incriminate you because they don't have that data. What exactly is the very little data they have is less important.
Thats re-interpreting what they said to be something defensible; but it isn't what they said. What they said was specific, and isn't, afaik, supported by any evidence. Its also the very first thing they said. Their main point. The primary point. Not some other thing they didn't say, but the very first, and very specific thing they said first.
Re-interpreting what people say to support our bias is both de-constructive when real security concerns are on the line, disingenuous, and shows a lack of reading comprehension.
-
Airgapped Android phones (with radios removed) and use Rattlegram + OpenKeychain to encrypt and sign messages.
As for jamming... well they can just turn off mobile networks and the internet too.
What you mentioned doesn't have PFS nor break-in recovery, plus it uses PGP... a significant security downgrade compared to Signal or SimpleX.
-
What you mentioned doesn't have PFS nor break-in recovery, plus it uses PGP... a significant security downgrade compared to Signal or SimpleX.
That's the dilemma with modern commucations. If you use signal or similar apps, your device can get hacked with pegasus or similar malware. AFIAK, walkie talkies and ham radios don't really have "backdoors" (unless they messed with the supply chain), you hold the button and it transmits, let go and it doesn't transmit. Dead simple. If you do encryption using a separate non-internet-connected device, then transmit it over the old-school radio, its virtually unhackable.
So you really have to weigh the risks.
Are you trying to have Perfect Forward Secrecy and is Pegasus not a risk to you?
Or do you prefer to be secured against pegasus, but use a clunky non PFS encryption?
Are you doing all your communications before the protest? (in which case you can use a phone with signal)
Or do you also want to have comms during the protest? (in which case, radios have no IMEI and cannot really be "hacked" and encryption is done on a separate device)
-
This post did not contain any content.
Some users are mentioning SimpleX, which has some very good features, but for activism I'd really suggest Briar. Just scan each other's QR codes to add all the needed contacts with no real names and create a mesh network through WiFi or Bluetooth connections between devices (no internet needed). If everyone is still bent on using Signal, whoever owns an Android phone should at least download the .apk from Molly.im. This version of the app is better suited for this.
-
Can all of this compromise the SimpleX protocol in any way?
Nope. To add a little context, imagine that someone who uses Lemmy (which is well known to be developed by a team of people not everyone agrees with) to crosspost the same articles to infinity told everyone not to use a piece of well regarded and audited open source privacy software because it's main developer has sided with US republicans.
-
SimpleX is run by a Trump apologist and "white genocide" believer who believes the protests are fake and/or literally Stalin.
Edit: "all child abuse is horrible. But..." Evgeny is especially concerned about "genocide of young white girls" specifically, wondering "can Elon Musk help?"
Idk why it’s always assholes coming up with good software (shoutout to the lemmy devs lol) but simplex is a great messenger nevertheless. I sure as hell won’t donate to that guy though, like ever.
-
Signal still centrally collects metadata and requires a phone number to participate.
If you're serious about privacy, ESPECIALLY if you're part of a group looking to organize in a clandestine fashion, you should look into the vastly superior SimpleX Chat.
The only metadata they collect is:
-
The last time you connected to their server
-
When you first registered
-
-
I promise I'm not being pedantic. Which claim? I made at least two.
The one that suggests Signal collects your IP addresses.
