The biggest issue with Matrix is that the server collects ALL the metadata.
-
I’ve been trying SimpleX a little this week. It hasn’t been great, unfortunately. It could be an iOS issue, but notifications aren’t coming through. Maybe Android will be better.
-
or every one of them uses Signal exclusively on iOS, your conversations are still tied to Google
Just because someone else uses Google on the other end does not make it dependent on Google on your end.
you are being very rude.
I'm being rude because you're spreading FUD and misinformation and actively making people unsafe. If you have evidence to prove that Signal has access to all of that information, feel free to share with the class. Otherwise, shut it.
If Signal had access to any of that information they would have been legally compelled to provide it when they were served with warrants but they did not, which proves that you're incorrect.
-
You can enable a registration lock, where anyone with your number would have to enter a pin to register an account with it. However, it removes itself if you don't log in for a while.
-
I would be more concerned about how phone-oriented it is. A phone's default OS is such spyware that I am not sure just what is safe from from being uploaded. And even if the person wants a more private alternative, most phones have locked bootloaders. On the other hand, Linux would run on damn near anything... But using Signal on it without a smartphone is very annoying. No way my mom would understand an Android VM or a command-line client, because the desktop client isn't feature-full and doesn't even allow registration.
-
Yep, that's what I was thinking of. I guess just set a reminder to login every now and then (if you don't use regularly).
-
Lol, let me introduce you to http://smspva.com/
-
On iOS, I had best experience using element X, so far
-
How is public wifi more secure than mobile internet?
For both, you need minimum a VPN connection outha there (to your home ideally, where you are in control of filters etc.) to get some privacy.
-
I personally have them hosted on fly.io for free via the legacy hobby plan
Here's the link for anyone who's interested: https://github.com/pcrockett/mollysocket-fly
-
your conversations are still tied to Google
That's simply false. Signal Notifications never include the content of the message or any metadata, no matter if they're sent over FCM, APN, WebSockets or UnifiedPush (via mollysocket). That wouldn't even be possible, since the Signal server sending out the notification doesn't even have the key to decrypt the message. Only the users involved in the conversation have the keys, that's how end-to-end encryption works. Signal simply sends an empty message via FCM (or any other push system), and the Signal app on your device then receives and decrypts the encrypted message and shows you a preview of the message content as a notification on your operating system.
And every build of the Signal client for WhatsApp also supports WebSockets as a fallback push notification system, in case Play services aren't installed or can't be reached. The only reason why FCM is used by default is that it saves some battery, because it only maintains one background network connection for all apps, instead of each app handling notifications themselves.
-
Their github releases have the apk available so you can manually download it and install it or use obtainium.
-
It's also available on their website btw: https://signal.org/android/apk/
-
I absolutely love Element X. Synapse has been low maintenance to self-host, as well. Win-win.
-
Mobile data you pay a service provider for and link all of your information to ( address, name, etc ), and can be used by one company to track your location at any time with very high accuracy as long as you are near 3 cell towers. Public wifi gets no information about you other than your MAC address and that you're currently within it's range. There is no central body that can track all your movements. You could, theoretically, buy prepaid data plans to minimize the info they know about you, but then you have to buy a new one each month, and there's STILL one company tracking all your movements each month, though they don't really know who YOU are. They could still do traffic analysis to figure that out.
It's not that it's less secure, it's that it's worse for privacy.
Also, messaging over SMS / MMS is awful for security, which I lump in with the rest of this conversation. https://youtu.be/wVyu7NB7W6Y
-
Huh I didn't know this existed. Will compare it to mine later
-
Oh that's the only one I know of. I thought that this is what you're referring to.
-
Nah I rolled my own and didn't publish it so that's probably why haha.
Have you been using this one?
On my app I don't get rich notifications only "you may have a new message". Havent looked into it at all though, only set this up like last week
-
Have you been using this one?
I tried it out once, but I currently don't use it, because I just run mollysocket on my own server.
On my app I don’t get rich notifications only “you may have a new message”.
That should only be the case while your Molly database is locked, because the actual messages can't be decrypted, so no message preview can be shown in the notification.
-
The point is that since Signal's default, well-supported installations use Google services, those services are present on most of your contacts' devices. You might have the knowledge, skill, and motivation to avoid those services on your own device, but since they're still present at the other end of most chats, you haven't escaped them.
It's also worth noting that E2EE doesn't protect the endpionts, and that Google Play Services run with system-level privileges.
