The divide in these comments perfectly encapsulates why nothing ever gets done when it comes to privacy
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
This thread is the worst case of astroturfing I’ve seen on this site so far, holy shit.
I dont understand the downvotes on some of these anti-signal arguments. There are a number of very valid arguments against Signal if privacy is your chief concern: they have centralised servers, they've been extremely lax with adding their production updates to their publicly available source code on github, they receive funding from RFA.
Yup, would probably get more people to join by just using Discord at this point.
You won't see previous messages, but that doesn't mean the group is dead lol
Don't want Signal with randoz. Try SimpleX, easy mutli-accounts.
Why not a matrix server?
Or Simplex Chat
Would be the most appropriate in this case as people don't need to hide when talking in public groups
Seen a lot of different opinion in this, but personnaly I would recommended this.
-
SimpleX, for the most privacy (but not really appropriate here) Wouldn't use any of threema wire and else, as it's not the best.
-
A good option in the case of this project is a matrix server, if the group is public it's the best thing. Try to host it somewhere else than matrix.org. Will have no real hiding but surely anonymously if done correctly
SimpleX maybe 😁
Yeah not doing Signal with randos.
That is indeed a massive improvement, but until they allow multiple profiles per number - that would still mean either using the same account with internet randos as I do with IRL friends, or renting a whole other number and risking losing the account once the ownership of the number expires.
Not usable until they support unifiedpush. I won't burn my battery with simplex.
Actually it's not burning my battery so much, but I can understand
Why not something xmpp based? Or matrix
Lol not in Signal
Why not?
Basically a app that lock you with a phone, giving you only one account. Centralized servers. Not good.
Good for some use cases. Only if the Signal Foundation stays in the current track and it doesn’t go south like with Mozilla.
For a privacy chat group with random people, maybe another app would be a bit better.
Personnaly I would recommended SimpleX for small groups and 1:1, only a bit less uglier
Because you can't have privacy if a company asks for your phone number.
Depends, who do you want to shield what information from? Signal knows all of their users’ phone numbers. You can hide it from other Signal users. All depends on your threat model.
The NSA
Right, then Signal might not be the best option. The NSA can easily track who’s using Signal, and possibly do some traffic correlation to reveal who’s talking to who.
But to state that there is no privacy on Signal at all is a bit of a stretch.
Yes but, I ain't joining a random group I found on Internet on a service which has my phone number. Which can be easily traced back to me. Because I don't know who all the members are then if someone is on the list then that will put me also on the list. If it was something like matrix where even though the group could be unencrypted and open to all. I can use Qubes and whonix to make sure that some stupid idiot doesn't put me on a watchlist I don't want.
But if I know all the members and I or someone I trust controls who can join then anonymity isn't a concern security is and in that scenario yes I'll definitely be using signal. I already am. But not here.
Signal knows all of their users’ phone numbers.
Only the hash of your phone number.
How exactly is it hashed? There aren't that many possible phone numbers, so it might be viable to just try every valid number until you find one that matches
Good correction, thanks
Burner numbers are pretty easy to come by...
Not for everyone. Check your privilege.
I mean online providers like jmp.chat, my sudo, and virtualsim will hook you up for a couple of bucks. So sure, if you are seriously cash constrained or crypto is unobtainable for you, then not so easy.
If you use one of those accounts, someone will just take over your account after some weeks/months
Like anyone's doing that just to talk to you.
What @jagged_circle said but also. Even if you were lucky enough to be born in a country where you don't have to give government I'd and thumb print just to get a goddamn sim card. It is still feasible to trace it back to you if you are not careful and there are a lot of ways you can slip up.
Like if you use a phone/device which is know to be yours then even if you buy new prepaid sim card anonymously your ID will be revealed due to same IMEI.
Or if you turn it on in a public area where cops know that you are there (maybe because they caught you on a camera) even though this is public area how many people connected to that tower are using burner sims, and how many of those are into extreme privacy or into something they suspect you to be involved.
And so many other scenarios and at the end it will come down to humane error which will be very tricky to avoid in this case. Whereas in case of being online you can properly setup iptable rules. Qubes, whonix, etc. Test it yourself that even if your VPN/TOR/I2P/etc. Goes down you're not reviling your true IP
Known what's easier? A username.