Comment on The Signal and the noise: Why the messaging app is great for privacy but not for war plans.

Amoxtli@thelemmy.club ⁨11⁩ ⁨months⁩ ago

• rottingleaf@lemmy.world ⁨11⁩ ⁨months⁩ ago

  I think there was an article recently about Session devs, first, having their protocol derived from Signal’s, second, not knowing what they were doing with that, which would discredit it pretty hard.

  Also everything is traceable, it’s a question of effort and who you piss off.

  source

  • Amoxtli@thelemmy.club ⁨11⁩ ⁨months⁩ ago

    You don’t know what you are talking about. Just because Session is a fork of Signal doesn’t mean it isn’t better, but is an improvement. Session adds identity protection and it is decentralized. There is no personal information needed to create accounts; no phone number or email required. There is no metadata storage. Had the Trump cabinet used Session instead of Signal, there would be no evidence to the identities of the individuals messaging each other. Signal requires a phone number to have an account which traces to an identity. The leaked war plans were not from encryption failing, but traceable identities.

    source

    • rottingleaf@lemmy.world ⁨11⁩ ⁨months⁩ ago

      Just because Session is a fork of Signal doesn’t mean it isn’t better.

      And nobody said that, strawman count one.

      Session adds identity protection and it is decentralized.

      Just so you knew, everything about security is made much harder and more complex by decentralization. Welcome to the real world, two good things do not help each other, you have to compromise on something.

      This statement adds nothing but the vague idea that decentralization helps security, so answered only that.

      There is no personal information needed to create accounts; no phone number or email required. There is no metadata storage.

      The article I don’t remember was about purely technical mistakes of Session developers in processes inherited from Signal. Mistakes! Mistakes happen in software. While what you are doing is listing features.

      Signal requires a phone number to have an account which traces to an identity and metadata that logs time and date.

      You are again talking about features and policies and limitations.

      Damn right it’s better to use a system where users using their IP addresses store messages in a blockchain, very anonymous.

      Had the Trump cabinet used Session instead of Signal, there would be no evidence to the identities of the individuals messaging each other. Signal requires a phone number to have an account which traces to an identity and metadata that logs time and date. The leaked war plans were not from encryption failing, but traceable identities by an insider.

      Buddy, that journalist didn’t trace anything, they just were added to a chatroom, saw what’s being discussed there, said oops, informed others and left it.

      I’m sure you can set a nickname to your real name in Session too.

      source
• kn33@lemmy.world ⁨11⁩ ⁨months⁩ ago

  Signal is gaining the network effect. Session is not. Don’t let perfect be the enemy of good enough.

  source

  • nyamlae@lemmy.world ⁨11⁩ ⁨months⁩ ago

    To be fair, variety makes groups more resilient. If Signal were to ever become compromised somehow, people who use other apps like Session will be okay.

    It’s not a zero-sum game, either – people can use Signal and other apps.

    source
  • 52fighters@lemmy.sdf.org ⁨11⁩ ⁨months⁩ ago

    If you can influence others to do so, use the better app. My family, we use Briar.

    source