this post was submitted on 10 Nov 2023
110 points (93.0% liked)

Technology

59398 readers
4589 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

It seems useless to me, at least regarding the cybersecurity aspect. Of course, it's helpful when people ask for my contact information, and I don't want to share my phone number or email address.

But they still require information that could be used to prove or be linked to my identity for registration, right? This means a hacker could still reveal your IP address, phone number, email, and your passcode. Likewise, the development team can access these as well.

I know I'm overly cautious about my privacy, but that's just how I am.

all 27 comments
sorted by: hot top controversial new old
[–] [email protected] 38 points 1 year ago (1 children)

Seems I'm in the minority but having to use my phone number as identier is exactly why I don't use apps like this, including WhatsApp. I don't care if my username gets shared, but I do not want my phone number to be shared with a bunch of randoms.

[–] [email protected] 3 points 1 year ago (1 children)

Would you be more likely to use Signal if the username tests become mainstream? Then you wouldn't need to share your phone # with everyone.

[–] [email protected] 2 points 1 year ago

As in use phone number to sign up but only share unique username. I'd still dislike having to use a phone number but being able to use such an app with family would be enough of a plus to finally get over it.

[–] [email protected] 20 points 1 year ago

I use Signal because there are few viable alternatives, but I absolutely hate that it requires a phone number at all. Nothing should require a phone number, much less use it as a primary account ID. Phone numbers are not user IDs. They do not belong to users, they can be reassigned to different people by third parties, they are frequently controlled by corporations with horrible security practices.

Ironically, iMessage is much better in this regard. You can actually use it with just an Apple ID, which does not require a phone number, only an email address.

It sounds like Signal will still require a phone number but merely allow you to hide it. That's a big improvement, but still bad.

[–] [email protected] 15 points 1 year ago (1 children)

I remember when Signal used to be a drop-in replacement for SMS. It used phone numbers so you could automatically upgrade to secure messaging if your recipient also had Signal, and just use regular SMS otherwise.

[–] [email protected] 7 points 1 year ago

Signal's automatic fallback to SMS was the best. Now they killed that and even have the audacity to ask for donations. Boo!

[–] [email protected] 15 points 1 year ago (1 children)

It's disappointing, I wanted to have desktop signal without depending on an application in another device.

[–] [email protected] 1 points 1 year ago

I currently use Waydroid to use it without a smartphone, and it is very annoying that I have to bother like this.

[–] [email protected] 14 points 1 year ago (1 children)

All the personal information you mentioned should be hashed or encrypted. For any given phone number, see how little information they have: just an account creation timestamp and a last access timestamp.

[–] [email protected] 4 points 1 year ago (1 children)

There's so much FUD about Signal it's ridiculous. I'm starting to believe those glowie memes are true it's just the "lol like I'd ever trust Signal!!!" folks who I think might be the glowies. 🫣🫣🫣

spoiler(No I don't actually believe they're glowies lol).

[–] [email protected] 2 points 1 year ago (1 children)

My main complaint is that they officially prohibit 3rd party clients including 3rd party builds of their official ones. They also don’t have reproducible builds for their clients. It leaves the door wide open for inserting some telemetry via an update to completely bypass their otherwise good encryption and (lack of) data retention.

[–] [email protected] 1 points 1 year ago (1 children)

Would allowing third parties access to their server API just cause spammers to flood signal users.

[–] [email protected] 4 points 1 year ago

They can already do that. You can make custom clients that pretend to be the real one, it’s just against their terms of service. Spammers generally don’t care about the ToS though, so it’s just legitimate users that are affected.

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago) (3 children)

So if I claim fubo as a username on Signal, that means what? Nobody else can use that username? If so, it's another global namespace, same as Twitter; ten or twenty years in the future, someone's gonna want to be reclaiming disused usernames.

(What if I want to be fubo to some people, and MissCatPictures to other people? Can I do that from one phone? One phone number?)

[–] [email protected] 7 points 1 year ago (1 children)

In the current Staging implementation, you pick a username (which you can change), and the app picks a two-digit suffix to your username.

[–] [email protected] 19 points 1 year ago* (last edited 1 year ago) (1 children)

Oh, so can I keep trying until I get to be fubo69? Nice.

(I am a heavy Signal user; it's my primary messaging service for people I know IRL. It's where I post cute pictures of my housemates' cats. I really want the Signal folks to get stuff right and not mess it up.)

[–] [email protected] 4 points 1 year ago

Sure, unless the username+suffix is already taken.

[–] [email protected] 4 points 1 year ago (2 children)

What if I want to be fubo to some people, and MissCatPictures to other people?

Use SimpleX

[–] [email protected] 2 points 1 year ago (1 children)

The question is about the functionality of signal

[–] [email protected] 3 points 1 year ago (1 children)

I meant only to address what I specifically quoted. The feature of using multiple identities, separately for each contact, is baked right into SimpleX and works amazingly well.

[–] [email protected] 2 points 1 year ago

Sounds neat, I'll look into it

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

What if I want to be fubo to some people, and MissCatPictures to other people?

Jami allows that, and I think Cwtch does as well. SimpleX doesn't have usernames at all.