"we kill people based on metadata"
"Signal is safe, all they have access to is your metadata"
Discussion
Why?
This is fuckery I can approve of lol
The only metadata they can get from Signal is frequency of messages and the size of the message files. Everything else is encrypted. There's a feature with Signal called Sealed Sender, it makes it so anyone looking at the data being exchanged can't know who messages came from. This means that unless you and your contact are both active targets of the government, they really can't do much with that minimal metadata... Or, at least, nothing they can't do with other options.
Now, if you need total anonymity due to being a whistleblower or something like that, I'd definitely recommend Session instead, as it's anonymous, has almost no visible metadata and is onion routed. It's not great for a daily option, however, thus why Signal is the best option for the average person.
If people enjoy SimpleX, more power to them, but I just don't find it to be a good experience at this point in time. There are also some valid concerns over its security that I'm also questioning myself.
That said, nothing about it is inherently bad, just not for me haha
Fair enough 😁 Would you care to point me to some security concerns?
The biggest is definitely the fact that a vast majority of its relays are run by the company, which is a for profit company that kinda just showed up out of nowhere. The tech itself seems solid but it's concening to me that the relays are overwhelmingly run by the company.
Also, unlike Session, itd be incredibly easy for governments to set up honeypot relays. If I'm not mistaken, there isn't any onion routing in SimpleX, meaning they wouldn't even need to do a sybil attack to know metadata like your IP.
Thanks, that’s very informative. I saw that nostr:npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll has a nostr:npub1exv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9csm7d828 server package on their marketplace which means other people could run servers. But that is an issue in itself as you state in your second point 🙂
No problem! I'm down with people using what they enjoy; as long as they're not using unencrypted messengers or big tech ones (Telegram basically falls under both categories), they're doing good for their privacy. It just irks me when people buy the Signal FUD and rush to act like SimpleX is the ultimate, end-all option haha
Got it 😁 thanks again!
You can run your own relay and that should be pretty easy.
Compare that to Signal where there is only one relay that everybody should use and it's already a honeypot.
There is some nuance here. If I'm not mistaken Signal knows that communication between two parties was established due to the authentication token, but sealed sender prevents them from knowing the content or frequency of communication between two parties.
I believe frequency is unavoidable with any messaging app, though, right?
According to Signal (...) the sealed sender functionality prevents them from knowing the frequency.
Interesting: If you view this post in Amethyst, it says "edited". And when you click on "edited" multiple times, it plays an animation of two white balls bouncing around on a black space.
Yeah. It's nostr:nprofile1qqsrhuxx8l9ex335q7he0f09aej04zpazpl0ne2cgukyawd24mayt8gprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hszxmhwden5te0wfjkccte9emk2um5v4exucn5vvhxxmmd9uq3xamnwvaz7tmhda6zuat50phjummwv5hsx7c9z9 protesting about edits.
Abuse is a great way to force changes. Just look at the spam wars.
It is like he wants to damage his own invention, his own protocol.
How long will it take those Bitcoiners to understand that Bitcoin IS the metadata.
If you swap Monero for Bitcoin, you are at risk..
What's the point of this spam?
"This design prevents leaking any users' metadata on the application level. To further improve privacy and protect your IP address you can connect to messaging servers via Tor."
Ive been thinking, the only truly private way to send a message is Owl Post. We must all buy owls and train them.
not your keys not your data
Signal is soo META 🫠
Location data (if changing device without sms), phone number, ip address, network graph
"trust me bro" backend
signal is not great