this post was submitted on 06 Oct 2024
179 points (95.4% liked)

Privacy

31942 readers
825 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] grandma@sh.itjust.works 31 points 1 month ago (2 children)

The divide in these comments perfectly encapsulates why nothing ever gets done when it comes to privacy

[–] 2xsaiko@discuss.tchncs.de 5 points 1 month ago (1 children)

This thread is the worst case of astroturfing I’ve seen on this site so far, holy shit.

[–] gwilikers@lemmy.ml 1 points 1 month ago* (last edited 1 month ago)

I dont understand the downvotes on some of these anti-signal arguments. There are a number of very valid arguments against Signal if privacy is your chief concern: they have centralised servers, they've been extremely lax with adding their production updates to their publicly available source code on github, they receive funding from RFA.

[–] MangoPenguin@lemmy.blahaj.zone -4 points 1 month ago (1 children)

Yup, would probably get more people to join by just using Discord at this point.

[–] monk@lemmy.dbzer0.com 21 points 1 month ago* (last edited 1 month ago) (1 children)

You won't see previous messages, but that doesn't mean the group is dead lol

[–] autonomoususer@lemmy.world 0 points 1 month ago* (last edited 1 month ago)

Don't want Signal with randoz. Try SimpleX, easy mutli-accounts.

[–] Boomkop3@reddthat.com 15 points 1 month ago (2 children)
[–] possiblylinux127@lemmy.zip 9 points 1 month ago

Or Simplex Chat

[–] foremanguy92_@lemmy.ml 2 points 1 month ago

Would be the most appropriate in this case as people don't need to hide when talking in public groups

[–] foremanguy92_@lemmy.ml 8 points 1 month ago

Seen a lot of different opinion in this, but personnaly I would recommended this.

  • SimpleX, for the most privacy (but not really appropriate here) Wouldn't use any of threema wire and else, as it's not the best.

  • A good option in the case of this project is a matrix server, if the group is public it's the best thing. Try to host it somewhere else than matrix.org. Will have no real hiding but surely anonymously if done correctly

[–] foremanguy92_@lemmy.ml 6 points 1 month ago (2 children)
[–] shaserlark@sh.itjust.works 10 points 1 month ago (1 children)

Yeah not doing Signal with randos.

[–] dubyakay@lemmy.ca 12 points 1 month ago (1 children)
[–] EngineerGaming@feddit.nl 15 points 1 month ago

That is indeed a massive improvement, but until they allow multiple profiles per number - that would still mean either using the same account with internet randos as I do with IRL friends, or renting a whole other number and risking losing the account once the ownership of the number expires.

[–] Samsy@lemmy.ml 8 points 1 month ago (1 children)

Not usable until they support unifiedpush. I won't burn my battery with simplex.

[–] foremanguy92_@lemmy.ml 5 points 1 month ago

Actually it's not burning my battery so much, but I can understand

[–] mariusafa@lemmy.sdf.org 2 points 1 month ago

Why not something xmpp based? Or matrix

[–] jagged_circle@feddit.nl 0 points 1 month ago (1 children)
[–] 5dh@lemmy.zip 4 points 1 month ago* (last edited 1 month ago) (2 children)
[–] foremanguy92_@lemmy.ml 7 points 1 month ago (1 children)

Basically a app that lock you with a phone, giving you only one account. Centralized servers. Not good.

[–] 5dh@lemmy.zip 1 points 1 month ago (1 children)

Good for some use cases. Only if the Signal Foundation stays in the current track and it doesn’t go south like with Mozilla.

For a privacy chat group with random people, maybe another app would be a bit better.

[–] foremanguy92_@lemmy.ml 2 points 1 month ago

Personnaly I would recommended SimpleX for small groups and 1:1, only a bit less uglier

[–] jagged_circle@feddit.nl 1 points 1 month ago (2 children)

Because you can't have privacy if a company asks for your phone number.

[–] 5dh@lemmy.zip 4 points 1 month ago (2 children)

Depends, who do you want to shield what information from? Signal knows all of their users’ phone numbers. You can hide it from other Signal users. All depends on your threat model.

[–] jagged_circle@feddit.nl 3 points 1 month ago (1 children)
[–] 5dh@lemmy.zip 3 points 1 month ago* (last edited 1 month ago) (1 children)

Right, then Signal might not be the best option. The NSA can easily track who’s using Signal, and possibly do some traffic correlation to reveal who’s talking to who.

But to state that there is no privacy on Signal at all is a bit of a stretch.

[–] AnnaFrankfurter@lemmy.ml 1 points 1 month ago* (last edited 1 month ago)

Yes but, I ain't joining a random group I found on Internet on a service which has my phone number. Which can be easily traced back to me. Because I don't know who all the members are then if someone is on the list then that will put me also on the list. If it was something like matrix where even though the group could be unencrypted and open to all. I can use Qubes and whonix to make sure that some stupid idiot doesn't put me on a watchlist I don't want.

But if I know all the members and I or someone I trust controls who can join then anonymity isn't a concern security is and in that scenario yes I'll definitely be using signal. I already am. But not here.

[–] windpunch@feddit.org 2 points 1 month ago (2 children)

Signal knows all of their users’ phone numbers.

Only the hash of your phone number.

[–] CosmicGiraffe@lemmy.world 2 points 1 month ago (1 children)

How exactly is it hashed? There aren't that many possible phone numbers, so it might be viable to just try every valid number until you find one that matches

[–] windpunch@feddit.org 2 points 1 month ago* (last edited 1 month ago)
[–] 5dh@lemmy.zip 1 points 1 month ago

Good correction, thanks

[–] oddsignal@eviltoast.org -5 points 1 month ago (3 children)

Burner numbers are pretty easy to come by...

[–] jagged_circle@feddit.nl 2 points 1 month ago (1 children)

Not for everyone. Check your privilege.

[–] oddsignal@eviltoast.org 0 points 1 month ago* (last edited 1 month ago) (2 children)

I mean online providers like jmp.chat, my sudo, and virtualsim will hook you up for a couple of bucks. So sure, if you are seriously cash constrained or crypto is unobtainable for you, then not so easy.

[–] jagged_circle@feddit.nl 1 points 1 month ago

If you use one of those accounts, someone will just take over your account after some weeks/months

[–] autonomoususer@lemmy.world 0 points 1 month ago* (last edited 1 month ago)

Like anyone's doing that just to talk to you.

[–] AnnaFrankfurter@lemmy.ml 2 points 1 month ago

What @jagged_circle said but also. Even if you were lucky enough to be born in a country where you don't have to give government I'd and thumb print just to get a goddamn sim card. It is still feasible to trace it back to you if you are not careful and there are a lot of ways you can slip up.

Like if you use a phone/device which is know to be yours then even if you buy new prepaid sim card anonymously your ID will be revealed due to same IMEI.

Or if you turn it on in a public area where cops know that you are there (maybe because they caught you on a camera) even though this is public area how many people connected to that tower are using burner sims, and how many of those are into extreme privacy or into something they suspect you to be involved.

And so many other scenarios and at the end it will come down to humane error which will be very tricky to avoid in this case. Whereas in case of being online you can properly setup iptable rules. Qubes, whonix, etc. Test it yourself that even if your VPN/TOR/I2P/etc. Goes down you're not reviling your true IP

[–] autonomoususer@lemmy.world 2 points 1 month ago

Known what's easier? A username.

load more comments
view more: next ›